ntfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)) 21:13:52 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:52 executing program 2: 21:13:52 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000021c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20002100, 0x20002130, 0x20002160], 0x0, 0x0, &(0x7f0000002100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x110) 21:13:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:13:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)) 21:13:52 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000021c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20002100, 0x20002130, 0x20002160], 0x0, 0x0, &(0x7f0000002100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x110) 21:13:53 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 21:13:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:53 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:13:53 executing program 1: r0 = syz_io_uring_setup(0x3edc, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:13:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:13:54 executing program 3: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:13:54 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 21:13:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:54 executing program 3: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:13:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:55 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) 21:13:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:13:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc080aebe, &(0x7f0000000000)) 21:13:56 executing program 3: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:13:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:56 executing program 3: socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:13:56 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) 21:13:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:13:56 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe0000009058202"], 0x0) 21:13:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = eventfd(0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r0}) 21:13:57 executing program 3: socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) 21:13:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) [ 1723.878087][ T19] usb 3-1: new high-speed USB device number 10 using dummy_hcd 21:13:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = eventfd(0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r0}) [ 1724.085758][ T19] usb 3-1: device descriptor read/64, error 18 21:13:57 executing program 3: socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000005c0)=0x8) [ 1724.187331][T26475] usb 2-1: new high-speed USB device number 10 using dummy_hcd 21:13:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1724.355841][ T19] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1724.426291][T26475] usb 2-1: Using ep0 maxpacket: 8 21:13:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:13:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = eventfd(0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r0}) [ 1724.546772][T26475] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1724.555500][T26475] usb 2-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1724.564353][T26475] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1724.573843][T26475] usb 2-1: config 5 has no interface number 0 [ 1724.580425][T26475] usb 2-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1724.594427][T26475] usb 2-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1724.605386][T26475] usb 2-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1724.615767][T26475] usb 2-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1724.626159][T26475] usb 2-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1724.639865][T26475] usb 2-1: config 5 interface 228 has no altsetting 0 [ 1724.647283][ T19] usb 3-1: device descriptor read/64, error 18 [ 1724.756599][T26475] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1724.766181][T26475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1724.774428][T26475] usb 2-1: SerialNumber: syz [ 1724.786886][ T19] usb usb3-port1: attempt power cycle [ 1724.859120][ T1807] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1724.940004][T26475] hub 2-1:5.228: bad descriptor, ignoring hub [ 1724.946497][T26475] hub: probe of 2-1:5.228 failed with error -5 [ 1725.150494][T26475] usblp 2-1:5.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1725.215992][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1725.297872][T26475] usb 2-1: USB disconnect, device number 10 [ 1725.331547][T26475] usblp0: removed [ 1725.387883][ T19] usb 3-1: device descriptor read/8, error -61 [ 1725.656556][ T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1725.827082][ T19] usb 3-1: device descriptor read/8, error -61 [ 1725.925577][T29448] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1725.947407][ T19] usb usb3-port1: unable to enumerate USB device [ 1726.165615][T29448] usb 2-1: Using ep0 maxpacket: 8 [ 1726.306863][T29448] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1726.315568][T29448] usb 2-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1726.324418][T29448] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1726.335845][T29448] usb 2-1: config 5 has no interface number 0 [ 1726.342091][T29448] usb 2-1: config 5 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1726.354482][T29448] usb 2-1: config 5 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1726.365062][T29448] usb 2-1: config 5 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1726.375507][T29448] usb 2-1: config 5 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1726.385885][T29448] usb 2-1: config 5 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1726.399504][T29448] usb 2-1: config 5 interface 228 has no altsetting 0 21:14:00 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) 21:14:00 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000005c0)) 21:14:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:00 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:00 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000005c0)) 21:14:00 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd(0x5) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1}) 21:14:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1726.786706][T29448] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1726.796289][T29448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1726.956468][T29448] usb 2-1: can't set config #5, error -71 [ 1726.995879][T29448] usb 2-1: USB disconnect, device number 11 21:14:00 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd(0x5) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1}) 21:14:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) [ 1727.235772][ T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd 21:14:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1727.425822][ T19] usb 3-1: device descriptor read/64, error 18 21:14:01 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000005c0)) [ 1727.707024][ T19] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1727.786232][T26475] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1727.896464][ T19] usb 3-1: device descriptor read/64, error 18 [ 1728.017605][ T19] usb usb3-port1: attempt power cycle [ 1728.028535][T26475] usb 2-1: Using ep0 maxpacket: 16 [ 1728.157644][T26475] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1728.326994][T26475] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1728.336544][T26475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.344703][T26475] usb 2-1: Product: syz [ 1728.349283][T26475] usb 2-1: Manufacturer: syz [ 1728.354016][T26475] usb 2-1: SerialNumber: syz [ 1728.436683][ T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1728.566103][T26475] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input33 [ 1728.618944][ T19] usb 3-1: device descriptor read/8, error -61 [ 1728.763292][ T8325] usb 2-1: USB disconnect, device number 12 [ 1728.896964][ T19] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1729.068341][ T19] usb 3-1: device descriptor read/8, error -61 [ 1729.189142][ T19] usb usb3-port1: unable to enumerate USB device [ 1729.555515][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd 21:14:03 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) 21:14:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd(0x5) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1}) [ 1729.802870][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 1729.925763][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1730.145959][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1730.155560][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.163731][ T19] usb 2-1: Product: syz [ 1730.168487][ T19] usb 2-1: Manufacturer: syz [ 1730.173225][ T19] usb 2-1: SerialNumber: syz 21:14:03 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:03 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, 0x0) 21:14:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) [ 1730.487414][ T19] usb 2-1: can't set config #1, error -71 [ 1730.555522][ T19] usb 2-1: USB disconnect, device number 13 21:14:04 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, 0x0) [ 1731.025628][T26475] usb 3-1: new high-speed USB device number 18 using dummy_hcd 21:14:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) [ 1731.221168][T26475] usb 3-1: device descriptor read/64, error 18 [ 1731.275865][ T19] usb 2-1: new high-speed USB device number 14 using dummy_hcd 21:14:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 21:14:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1731.497206][T26475] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1731.525516][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 1731.647116][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1731.697538][T26475] usb 3-1: device descriptor read/64, error 18 [ 1731.817292][T26475] usb usb3-port1: attempt power cycle [ 1731.847044][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1731.856657][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.867404][ T19] usb 2-1: Product: syz [ 1731.871713][ T19] usb 2-1: Manufacturer: syz [ 1731.876937][ T19] usb 2-1: SerialNumber: syz [ 1732.042436][ T19] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input34 [ 1732.286088][T26475] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1732.319094][ T19] usb 2-1: USB disconnect, device number 14 [ 1732.458688][T26475] usb 3-1: device descriptor read/8, error -61 [ 1732.726799][T26475] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1732.897276][T26475] usb 3-1: device descriptor read/8, error -61 [ 1733.016273][T26475] usb usb3-port1: unable to enumerate USB device 21:14:07 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 21:14:07 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, 0x0) 21:14:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 21:14:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:07 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 21:14:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd(0x5) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1}) 21:14:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:07 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 1734.375622][ T8325] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1734.643066][ T8325] usb 2-1: Using ep0 maxpacket: 16 [ 1734.716168][T30910] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1734.766522][ T8325] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1734.937086][T30910] usb 3-1: device descriptor read/64, error 18 21:14:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001100)=[{&(0x7f0000001440)=""/188, 0xcc}, {&(0x7f0000000100)=""/4096, 0x1000}], 0xe, &(0x7f0000000040)=[{&(0x7f0000001380)=""/147, 0xfffffec9}, {&(0x7f0000001640)=""/201, 0xb1}, {&(0x7f00000012c0)=""/33, 0x21}, {&(0x7f0000001540)=""/224}], 0x3, 0x0) [ 1735.026195][ T8325] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1735.037357][ T8325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.046178][ T8325] usb 2-1: Product: syz [ 1735.050481][ T8325] usb 2-1: Manufacturer: syz [ 1735.055450][ T8325] usb 2-1: SerialNumber: syz 21:14:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd(0x5) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1}) [ 1735.205817][T30910] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1735.345043][ T8325] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 1735.449584][T30910] usb 3-1: device descriptor read/64, error 18 [ 1735.576988][T30910] usb usb3-port1: attempt power cycle [ 1735.596330][ T8325] usb 2-1: USB disconnect, device number 15 [ 1736.016157][T30910] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1736.207354][T30910] usb 3-1: device descriptor read/8, error -61 [ 1736.486039][T30910] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1736.667969][T30910] usb 3-1: device descriptor read/8, error -61 [ 1736.797865][T30910] usb usb3-port1: unable to enumerate USB device 21:14:10 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 21:14:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 21:14:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd(0x5) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1}) 21:14:10 executing program 3: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0xdac, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x7, 0x0, 0x0) 21:14:10 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 21:14:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 21:14:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1738.056016][T26475] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1738.335624][T26475] usb 2-1: Using ep0 maxpacket: 16 [ 1738.348474][ T19] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1738.455906][T26475] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1738.548651][ T19] usb 3-1: device descriptor read/64, error 18 21:14:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) [ 1738.660703][T26475] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1738.670078][T26475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.678588][T26475] usb 2-1: Product: syz [ 1738.682900][T26475] usb 2-1: Manufacturer: syz [ 1738.687779][T26475] usb 2-1: SerialNumber: syz 21:14:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) [ 1738.850145][ T19] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1738.876130][T26475] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input36 [ 1739.192502][T26475] usb 2-1: USB disconnect, device number 16 [ 1739.283525][ T19] usb 3-1: device descriptor read/64, error 18 [ 1739.408786][ T19] usb usb3-port1: attempt power cycle [ 1739.884863][ T19] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1740.174000][ T19] usb 3-1: device descriptor read/8, error -61 [ 1740.445729][ T19] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1740.617345][ T19] usb 3-1: device descriptor read/8, error -61 [ 1740.739499][ T19] usb usb3-port1: unable to enumerate USB device 21:14:14 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 21:14:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:14 executing program 1: 21:14:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) 21:14:14 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd", 0x2a}, {&(0x7f0000000280)='\f', 0x1}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 21:14:14 executing program 1: 21:14:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) 21:14:15 executing program 3: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x105, 0x0, &(0x7f00000005c0)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 21:14:15 executing program 1: [ 1742.005630][ T19] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1742.195794][ T19] usb 3-1: device descriptor read/64, error 18 [ 1742.486497][ T19] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1742.675621][ T19] usb 3-1: device descriptor read/64, error 18 [ 1742.796371][ T19] usb usb3-port1: attempt power cycle [ 1743.227008][ T19] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1743.397253][ T19] usb 3-1: device descriptor read/8, error -61 [ 1743.666734][ T19] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1743.856684][ T19] usb 3-1: device descriptor read/8, error -61 [ 1743.980473][ T19] usb usb3-port1: unable to enumerate USB device 21:14:18 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e000102030109022400010000"], 0x0) 21:14:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) 21:14:18 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:18 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 21:14:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 21:14:18 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 21:14:18 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 1745.256939][ T8325] usb 3-1: new high-speed USB device number 34 using dummy_hcd 21:14:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) [ 1745.531351][ T8325] usb 3-1: Using ep0 maxpacket: 8 [ 1745.658436][ T8325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.668929][ T8325] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1745.908502][ T8325] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1745.917839][ T8325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.926207][ T8325] usb 3-1: Product: syz [ 1745.930504][ T8325] usb 3-1: Manufacturer: syz [ 1745.935354][ T8325] usb 3-1: SerialNumber: syz [ 1745.967234][ T8325] usb 3-1: config 0 descriptor?? [ 1746.227240][ T8325] usb 3-1: USB disconnect, device number 34 21:14:20 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e000102030109022400010000"], 0x0) 21:14:20 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:20 executing program 1: syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 21:14:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:21 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) [ 1747.556032][ T8325] usb 3-1: new high-speed USB device number 35 using dummy_hcd 21:14:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) [ 1747.809531][ T8325] usb 3-1: Using ep0 maxpacket: 8 [ 1747.934550][ T8325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.944912][ T8325] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1748.216597][ T8325] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1748.225954][ T8325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.234117][ T8325] usb 3-1: Product: syz [ 1748.238618][ T8325] usb 3-1: Manufacturer: syz [ 1748.243369][ T8325] usb 3-1: SerialNumber: syz [ 1748.406882][ T8325] usb 3-1: config 0 descriptor?? [ 1748.485714][T26475] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1748.653220][ T8325] usb 3-1: USB disconnect, device number 35 [ 1748.680094][T26475] usb 2-1: device descriptor read/64, error 18 [ 1748.966459][T26475] usb 2-1: new high-speed USB device number 18 using dummy_hcd 21:14:22 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e000102030109022400010000"], 0x0) 21:14:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r2}) 21:14:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) [ 1749.169008][T26475] usb 2-1: device descriptor read/64, error 18 [ 1749.296751][T26475] usb usb2-port1: attempt power cycle 21:14:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 21:14:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1749.739542][T26475] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1749.856863][T26475] usb 2-1: Invalid ep0 maxpacket: 0 [ 1750.026041][T26475] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1750.143111][T26475] usb 2-1: Invalid ep0 maxpacket: 0 [ 1750.161785][ T19] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1750.171327][T26475] usb usb2-port1: unable to enumerate USB device 21:14:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1750.406042][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 1750.527774][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.538179][ T19] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1750.797251][ T19] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1750.809076][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.817877][ T19] usb 3-1: Product: syz [ 1750.822177][ T19] usb 3-1: Manufacturer: syz [ 1750.827036][ T19] usb 3-1: SerialNumber: syz [ 1750.909090][ T19] usb 3-1: config 0 descriptor?? 21:14:24 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) [ 1751.153636][T26475] usb 3-1: USB disconnect, device number 36 21:14:25 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca74370009"], 0x0) 21:14:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x1, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) [ 1751.722979][ T8325] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1751.926359][ T8325] usb 2-1: device descriptor read/64, error 18 21:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 21:14:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)) 21:14:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1752.196088][ T8325] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1752.385820][ T8325] usb 2-1: device descriptor read/64, error 18 [ 1752.491896][T30910] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1752.512449][ T8325] usb usb2-port1: attempt power cycle 21:14:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)) [ 1752.755477][T30910] usb 3-1: Using ep0 maxpacket: 8 [ 1752.878050][T30910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.888411][T30910] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1752.933110][ T8325] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1753.074882][ T8325] usb 2-1: Invalid ep0 maxpacket: 0 [ 1753.138100][T30910] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1753.147531][T30910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.156356][T30910] usb 3-1: Product: syz [ 1753.162541][T30910] usb 3-1: Manufacturer: syz [ 1753.167734][T30910] usb 3-1: SerialNumber: syz [ 1753.245819][ T8325] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1753.283076][T30910] usb 3-1: config 0 descriptor?? [ 1753.333518][T30910] adutux 3-1:0.0: interrupt endpoints not found [ 1753.345811][ T8325] usb 2-1: Invalid ep0 maxpacket: 0 [ 1753.352660][ T8325] usb usb2-port1: unable to enumerate USB device [ 1753.536040][T30910] usb 3-1: USB disconnect, device number 37 [ 1754.032819][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 1754.039665][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 21:14:27 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 21:14:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)) 21:14:27 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca74370009"], 0x0) 21:14:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 21:14:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x47a06, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000a, 0x12, r2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1755.066320][T30910] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1755.305933][T29448] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1755.356937][T30910] usb 3-1: Using ep0 maxpacket: 8 [ 1755.477469][T30910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.488099][T30910] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1755.522060][T29448] usb 2-1: device descriptor read/64, error 18 21:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1755.798457][T30910] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1755.807853][T30910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.816234][T30910] usb 3-1: Product: syz [ 1755.820558][T30910] usb 3-1: Manufacturer: syz [ 1755.827248][T30910] usb 3-1: SerialNumber: syz [ 1755.833408][T29448] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1756.013694][T30910] usb 3-1: config 0 descriptor?? [ 1756.055818][T29448] usb 2-1: device descriptor read/64, error 18 [ 1756.081544][T30910] adutux 3-1:0.0: interrupt endpoints not found [ 1756.176915][T29448] usb usb2-port1: attempt power cycle 21:14:29 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r2) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1756.271624][T30910] usb 3-1: USB disconnect, device number 38 [ 1756.596486][T29448] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1756.695792][T29448] usb 2-1: Invalid ep0 maxpacket: 0 [ 1756.877339][T29448] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1756.986280][T29448] usb 2-1: Invalid ep0 maxpacket: 0 [ 1756.992442][T29448] usb usb2-port1: unable to enumerate USB device 21:14:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:31 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="cc", 0x1}], 0x1, 0x0) move_pages(0x0, 0xa401, &(0x7f0000000180)=[&(0x7f0000000000/0x2000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 21:14:31 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca74370009"], 0x0) 21:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:31 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 21:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, 0x0, 0x0, @val={0x10, 0x1}}}]}, 0x48}}, 0x0) 21:14:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:31 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r2) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1758.337786][T26475] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1758.585970][T26475] usb 3-1: Using ep0 maxpacket: 8 [ 1758.627488][ T19] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1758.717857][T26475] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.728388][T26475] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 21:14:32 executing program 5: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x707, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0}) [ 1758.876833][ T19] usb 2-1: Using ep0 maxpacket: 16 21:14:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x5c, 0x0, 0x0, 0x0, 0x2000000) [ 1758.999198][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:14:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1759.057944][T26475] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1759.067356][T26475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.075796][T26475] usb 3-1: Product: syz [ 1759.080100][T26475] usb 3-1: Manufacturer: syz [ 1759.084831][T26475] usb 3-1: SerialNumber: syz [ 1759.226230][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1759.235969][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.244126][ T19] usb 2-1: Product: syz [ 1759.248730][ T19] usb 2-1: Manufacturer: syz [ 1759.253463][ T19] usb 2-1: SerialNumber: syz [ 1759.271423][T26475] usb 3-1: config 0 descriptor?? [ 1759.336160][T26475] adutux 3-1:0.0: interrupt endpoints not found 21:14:33 executing program 5: add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1759.507229][ T19] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1759.530147][T29448] usb 3-1: USB disconnect, device number 39 [ 1759.703270][ T19] usb 2-1: USB disconnect, device number 29 21:14:33 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x0, 0x80, 0x0, 'queue1\x00'}) 21:14:33 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r2) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:33 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4}], 0x17, 0x0) 21:14:33 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff"], 0x0) 21:14:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0), 0x0, [{}]}, 0x88) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20088a927f1f6588b927481241ba7860686ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a96825a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 21:14:34 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) 21:14:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1760.875661][ T19] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1761.075788][T26475] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1761.120842][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 1761.263299][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.273722][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1761.285297][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 21:14:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1761.347006][T26475] usb 2-1: Using ep0 maxpacket: 16 21:14:35 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1761.478979][T26475] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1761.496320][ T19] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1761.505971][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.514139][ T19] usb 3-1: Product: syz [ 1761.518781][ T19] usb 3-1: Manufacturer: syz [ 1761.523509][ T19] usb 3-1: SerialNumber: syz [ 1761.592441][T29448] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1761.653459][ T19] usb 3-1: config 0 descriptor?? [ 1761.685973][T26475] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1761.695836][T26475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.704086][T26475] usb 2-1: Product: syz [ 1761.708659][T26475] usb 2-1: Manufacturer: syz [ 1761.713398][T26475] usb 2-1: SerialNumber: syz [ 1761.731571][ T19] adutux 3-1:0.0: interrupt endpoints not found [ 1761.797678][T26475] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1761.856163][T29448] usb 6-1: Using ep0 maxpacket: 8 [ 1761.909661][T26475] usb 3-1: USB disconnect, device number 40 [ 1761.987306][T29448] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1761.996092][T29448] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1762.005126][T29448] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1762.014739][T29448] usb 6-1: config 250 has no interface number 0 [ 1762.021361][T29448] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1762.033261][T29448] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1762.044109][T29448] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1762.054858][T29448] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1762.070882][T29448] usb 6-1: config 250 interface 228 has no altsetting 0 21:14:35 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffe0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000560000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x15124a0da69408c2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005d832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f00000007c0)=""/35) splice(r0, &(0x7f00000001c0)=0x1000000000b32, 0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x20b, 0xdffc42c660f1fe9e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000929000/0x3000)=nil) clone(0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x40045}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2d40, 0x0) clone(0x18840000, &(0x7f00000002c0)="47cde3ff3f4a6eb640acf29263e4490842acfbe0ac15d36f927917c38c6a35c8c302ac09629a96d50f1a6e50b69563975ef7e468d50d04b29e544d387a59fa624e7faaa5a68e9fb43902021485fbc66649ddc024f85654078b1cd1d66701ac74f839ed5b6d2c5efcce4f665f7e2007fbeeac3d377be84177de51e063aa25ebd5cfe5ad64594fbc0ef1d9fa5b55310d83fcb03e062ebaccd1245f51e89fd8fc07364f8bdafea606bea3a7fbd2ad6ed04a19864ff71cdf4df0b06cb16b90914b13db9bdf479412", &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000011c0)="b2aba2aaf30636f1dfb41aef7c7ec4c104f0bde5d6e69fe29ba7b55f03778032daa188ff9f3c098f312c4349724f5195d865d06318eaab51974c9612318b1f20e2a5c18867ea8e855532d69763e7b3b9cd49c81b3987282e2430fbfe7c4e3c893c0f9b1e916acc8371511ccd1c07a5148fef5dd75abff607dde5f46be695aff5392e14109190468e9aa55a76d80b9fb29286342d3a9e87c213eed2b9f6fda6aadf256cb0d52a06ff6d95e60f9264c0f71ea5ea87332fa3b3e59c876beed58e62b2b8f6d0ab82ef596df1e49a095b2270655c8e5cb347ab89e46d6336529e1a30c20be2881cffd142d3c2624811147d0d6aadf140150623ffed797a4a8c4241e60967c008ffd4d049a35d31a714ffd39908f23045f5eedbda9fdd148f3e10536fe525b220a3af7fdd0d4598b22bf295793af9680530c5152b007e2be844df8fa50466d6223680b019c6f2a4f0e554bfff3c086e485e45338f627d767b501748df1c8bba5742b9e301cc52356ab033761f21fefcc8488e395f63de44803b267089fb772e0e400a2db31c140688643bc8c106ef97da585e7345cee41310b684fe311677d03d70e69a676f29c1424c6f1469374a5a3474d7d61062072bbb1eadd311adb30981e62b130c88f3a03a0a4323c7dd0bb3581f2a2c95fffc9199d30b5d37f56022f5a69007d0813bc26bc16e70f198c4b8568156ec2db0ff205e17607adc8b8ab4ec2ec2445b7bd6baf228de22a5912e5395d7e48234a2f21a3f98edfa2fef3affb342a52de20959aae6b39e623c0fbe21b957f33a59dbb34c5656d2ee6727a8cab31fb6140d47dfcb1b99b191fb3596b1eafdd160f7add960b4319ac272aadeb3624e953613437c6df3f915d94dd0da71913de19c7fa981b238e1316551c1aafd9b04521e6b8ba627b6d08dbc49efcbda47f9ec5bc4ffb2273814835caa67c878ffc5e6e4c978a47c77f76a3ecb7adf9309c49915bf986a273e9188f95178d269eb9f405b48617fd548c3c3c162010b8b6341dd32f1f17d5f87cfba385cf6f11c44e865b9c73a5a7269a473bef0bd2a8e5c942d521bbe54f5b8686719501604758d80875559c2960eb3c3d85799827612e81bd2752af70241a8c7b741d45e87fffe17c73eef25878c239bbb5e5f8b7d97b2faed2f124f6c8ffc85cece2548f1463eb928360e1c3efc5d6bd3e0581518e9dfb943b60286c22a585ddb989a63f69eb1bfce1b0354de8075b40534cb64da24a8512a70d6f1580cac034d84be7283fa1540bdbeaac44134dd2b77ab9f4b2ab02e61197e1ee9b78f6c956032c0afc6ed10c8a90522b7a4a30c8cd48398b3d611d744f9764647ee20cd8e404a5a573536d5c2a79ae112cdd4d87207a81b4f749ab179d9a0be26a600106f334dbcd92f1acc6d6f904e05f806c4c2987b3f4c8dcc75a35cab87ac4e6a29eda2a4d4678d67fe432f95c1447f9641287dd0509a7039e9655798b861ee522d6096e9044d8bf7f8132fdefe1d983d4becea7e1ee011df1f29445c3eebb620602ef8f254c0ae733e4201bdb14e11d8516bf5bf66e90047c794a556e60d3d9d13bde6b06ce3ca0417a2fd9e31d841b45236808129c9b68b75964102bef66f1e1863ae342305638d664d7e0c79309b3fbf4a658a937c943c51087b169a5d10988ab019dfd24815ddcfe57526c6feb4d3281e265c685661b1ebe228a1b3fb1858d5a74e462e776638606c7b0cbac3b4e11ae2688e1b34c8c674b65f264362c405b60ad75969c54c109e0497442c654e5cd19e2b7c3d88b47713b8c93390012d301a471f42e307c48c915b8725242c28c562942c6e1fb4fa972c9758ee2d2c6cbe27c922ce4923045bd82ac09ffa38363615f122f9ea0fd8ef39d54620d07b7d1f0d062447740ffd56c885e20b97985e1fc5d3ece9b07e4e0b076c951c7c0543ca40b98445d66b5e8ec74feaff197d1cf060ec157f33e2f5b220e91727963419e97c0a7855dfb1c8b5a33dd43128458392b9d3c10ec0a19d1688547d915ce6c098c48e198bd285c3d3f57a3e8933d95a6e035d9071f5eb32f597129b77ad88280c3004b7c0c05ef51370bafd2bf6917b8e0ddbdc1aab089b0e898add52fd13cf60e5676627009e2fdd07317509eb8596a2302eb577a493757b71b882b62ee3f4bbf132d0eb2c0376c53fbdbeeceb34a43abdeecbb8f5b9189bd18ad2ce6d134cf554a2de87c654ebd05ad3323a00fb0144302f723d1dbdbeb6d5b2ca7fc6a03847a5493fdfd21a29a45da8669426c88241e2a582639402db72f924306ab7e602870d6878c1513ee64d4f37025761fc9c85f3be8ad5e046a448f31ee7a36007cf4951f7d619ccbedaeec64fc815452e7165d667899636f090e8dee799121ddf66e3c1b2c615ce6e14db5989122edf6dbe1103ba4d8074d2cc8a679bd1249770766e2ce90efc55bfef499794b0cd50ee3d7b43b185e08a77ea6aa9b2bdbb2165b094f1bb0f001f0e96025c0897568299528eab4bf1faa395db81e683481067fc1d20524a0e88c0b9714460e7df48b5e2b61dd9188e39428eb462a7675f71e8048c7ae20c35f92f5cf179084d968d9121f567d7bd31f9bb8e1b5f86b9fa769cc501b84e0889db026ace5cba6df7f6e414fc09e6d0c67c6887913d5d27dcf69653f89d8901e8656b588f6dce80495596e0ac641b3ad697764cd512e5a8252f84cdbac34f158dd3f9e5a27d72b4bee2db973de53b73f0c129a5ae13c40c709891c34e7e6bfaaffea63346586dc1f331aa7bff2bb7ae9c76941d7a1c47eea68e332338ffca880023ebd36194da529aeaa1b360d75a416941de4b710f33aebc470169d8ba86bb066492522c8da77de4e500a4f76a67b2cad0a1bd251e56d99af33d4231171dc4d6c47f6768d1fc240d7be9c16a207ee3bc0373f2af0856fc5e8cd1deefe72190d94e9837a1251ca493550264929955be26e002cb6a7b03e59f94a06082dbcf3ee43197eb6c2391fcc3e5fb336731e6047f2d6f78e63f153c2325dad8cfee3bb6bcf280de4cd1fb1b14c72a3b8db58b54b9de1e84f460f7a14fb769e3d50107fac19ceb611c2fe617e2262b8612eaf3c153ab91b79b772f3c33848213dfe22e7a53c3dc534a0bbb2aa1966014053024ed5e430082a63f7d9e2bab18ad030c94306fedb47a6ac9544a46088bcfa82bbe545de16a8f1c54b3c2f5fbf171fdb2ce315b36ffb839385ffcc4027672cfae210f513c54233b0b75419001c56788b81c2ec8983fb6987ea869077961fc5435d26a444b974cf1d06ccd49a4eb602f960a8ce011c2633c469d07c9af7a0e593398a67163c682a24ad8d960b4bab3f8835565be45ef98cdc6849b3c212ef3ef2d26c13988c7736c52a6d90d2ae11954ba7cf58d40e7e0bd4726f485d80790f5a907caf0fe813440f4385a8cfccbb7b56fc1c14de83a10fdfcae8e2ee0d85e4aadbe38f37d2b07c1a3e8e18e7fec2c3e61f37c9c56155f1455e4263317997f1dc5b3f4f7bb4a6e91a733972037ea59b18e310c52c99c8fef75c0c7f3c28bc4121e476ac7e5398a8d4f717979cad64593f7414b2856c60c0c8e0871a4d0922f563825bef285dcaeccfd44d09455c6c4f13aa8d10df8709b7ca8cc68733b7cc4924067b8a45cb5b9d3e06d4ff73b9c9afb1ebdd28e2f1ff8e0cc2207b8eb584c3789d873cdbf5c347370f45a4fca1852c8dfee9e0b03b6f20f4ac8bcbe6159b21d60361f35600314b724a01e8f7a645f0a0cf2fd85b8ef2f446977b355f7eb4c3ad29d38f8003396e81343858056b6f7781739e0198835225a5c98cbaf8f615e510a2ee7a14fb4a48c01e24d23cf405b3919eba26a8b68982a529facc78ab2535e256672a90bcefc9e2992084b0df0696e597c6fe7779a963f8dc3475f4a72780e3ce3ebea714d90f0e7170f7e5ca661c51a190807b34755b9746754a0a451e93086b894f6b90e61833ccb3bf627e4711284b37981ced926b98727e566f569cbf5152806150d7a17dbf947f8148be980d12670d6a659d72082272ab357820a45c5b9731ab4f9bf3b4c938e1702aa5c55fe05ba33a9cd78966cd26cb95cc53de800eaef40db5f26f1fe848b59bd83c8e26b398efeb874169c92608da797f076b894dc7736491c05e1ffb036c05840571ae3445f7e4aba636fdc851b0c34fa65102a10bdaa44df0ad86c3235f9806a4259e1a66fec2d90e8816b109c1f6f51c2308960da242b32fed5ead12badd6a9a3060eda1af3b391ec8b43c51e17e1539ee51275236c6d68acda8a78e74f432b0227e7d0fe31d325824a8d9e7645f057bbf10e84520c8533bb08f9a255f5d38cd18f4a230355ea0c1922b66862fe538fa60236c579aa34cb3c6aceed1f481d514e1b5a27217bcfb19d6a8c9cc03abb9f4ffb9e189138bcdfe3646ff4a1a47e2ec89e3d06049c717a05ccc9550532e895d9b28e24c4adb9857c4493b0a2010f238a2e22a9bcfc384bfba29acbedff943a485b23d2f2335a6e2ee97cffb085e3348a72d752af06666814e5ad22b7efabb08d8fa4bbb82d3da6eed6dfd1df6bd74d4d2ef019afc9aefbd21a2235eef45ada1c5fba17c6a54d30a5a0a60c2e2b99d3b1cc3c7b5e60dd1a61423e628580a4c2f5ddd8ac1212f3e628d49f864a9e6e984b16fd4c563df4a38a0637234497dea489533216b89f8187ca0f4b6fec991431b3f50afa27bd98edcbe55a994e1d7f85e02fb5b196ac61b808b74b4971ad0c43f9145bb2346022cf627cf791347e9290c95d573d120ced1d428e51a4ac3f9762011515b82099ec04359dd9d6484149cf17f924f59afb557fdb89089591fb59cc07eb37419e457b92ac36ccbb9609f779ee80434bb0d10ab362d69be1c4018a7eba198294a9988d318eb011a7b30708ed7a502b4b6c63ff26a361793c39ba9908058c955fef62fbb53d5ba94c8a3c3014354d19df598b29d4edd09fae8eac7823bd879949167f1963cc380134b3c61c0f8b46a9b4b2a77ce3fc61f37522ddc1fbddd822382a5ccd5756055abb937f99d4a97527bbf79b1cff7bf7396d1dc50221fe6bfaa203e6306a09351fe78f5bead7613c56e51f52ef97c2b6b6854625c6238bee09cfa44a3e4d444b7d69615201aa290b8a7f1fa2c9ceaaedf4dfe178a994b8b12e556fe6316f67cf2dc7ea9c965353109a68c4a6cda70c2e3f2fcc1bce1a5e611c274b84076fa192f26b94e48a00ce3eb1b0ecd311b8fc7b23eb03b45b469449a765c68082a81def725c1c7fa1da79593114cd65787096fda5b24c3136d18cb75730e7dede04f26db67e6e214f73ba93b1590da8e877fad00c4c4e9a60bb4358f7d5dc92d62477879b8dad23e6c17ee1598c7c70ed484d4937b1b996fba781629859ba191091c9aa83ab64ce8d4f8b8293db656703bc2e36d639266bcce602998fd784a596ee199e2d276277a01e80b983c1475017d50ab0414e13282e9ca39eb8b445fd6d51da01183c06eae7bb00649a1ce298306621e3d2c708cfeb4cc12657e1bc144554d5e1113876bf1d32e8eac7e7f5f06efc7eb33f1961ffcd49485e0ac1265d94998c66c78d4c4ba1ae491312b3d4ac3d0f27eddc6319a02883152af1e5110ea27334f40c5769964424a3ec87ba72b39dc4366f931f9bb4e2a3f08f1152aeb96aad0e70d4edf496004dcab1adf12b3d5dba8efb034779c8ee575ff2d54f9f883a94adc68ca25645134f3b87a3a7a6e64639fb13695f8f37a1a0da017502240aa27bf85ef1eab9c28475f7adae05bdb93fb4f342e6bd65fed693db20e1823d601d4017") [ 1762.151629][T30910] usb 2-1: USB disconnect, device number 30 [ 1762.597529][T29448] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1762.606993][T29448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1762.615150][T29448] usb 6-1: SerialNumber: syz 21:14:36 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 21:14:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:36 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff"], 0x0) [ 1762.709635][ T2485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1762.795549][ T2485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1762.830054][T29448] hub 6-1:250.228: bad descriptor, ignoring hub [ 1762.836717][T29448] hub: probe of 6-1:250.228 failed with error -5 [ 1763.050545][T29448] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 21:14:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1763.220097][T29448] usb 6-1: USB disconnect, device number 10 [ 1763.260617][T29448] usblp0: removed 21:14:37 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000473d, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x3bf3, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xbf, 0x4) sendto$inet(r0, &(0x7f00000007c0)='\a', 0x1, 0x0, 0x0, 0x0) 21:14:37 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1763.416798][T26475] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1763.619677][ T19] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1763.656459][T26475] usb 3-1: Using ep0 maxpacket: 8 [ 1763.785654][T26475] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.796151][T26475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1763.807676][T26475] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 21:14:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1763.881095][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 1763.972244][T29448] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1763.978007][T26475] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1763.989382][T26475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.997880][T26475] usb 3-1: Product: syz [ 1764.002174][T26475] usb 3-1: Manufacturer: syz [ 1764.007153][T26475] usb 3-1: SerialNumber: syz [ 1764.026915][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1764.149755][T26475] usb 3-1: config 0 descriptor?? [ 1764.192273][T26475] adutux 3-1:0.0: interrupt endpoints not found [ 1764.206719][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 1764.217239][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.228072][ T19] usb 2-1: Product: syz [ 1764.232370][ T19] usb 2-1: Manufacturer: syz [ 1764.237755][ T19] usb 2-1: SerialNumber: syz [ 1764.256748][T29448] usb 6-1: Using ep0 maxpacket: 8 [ 1764.396128][T29448] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1764.401903][T29028] usb 3-1: USB disconnect, device number 41 [ 1764.404734][T29448] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1764.404860][T29448] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1764.404985][T29448] usb 6-1: config 250 has no interface number 0 [ 1764.438446][T29448] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1764.450241][T29448] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1764.460956][T29448] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1764.471681][T29448] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1764.475764][ T19] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1764.485484][T29448] usb 6-1: config 250 interface 228 has no altsetting 0 21:14:38 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0xc8, 0x0, 0x1d0, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 21:14:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1764.686527][ T19] usb 2-1: USB disconnect, device number 31 21:14:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1764.836434][T29448] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1764.846185][T29448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 21:14:38 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:38 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff"], 0x0) [ 1764.948898][T29448] usb 6-1: can't set config #250, error -71 [ 1764.968699][T29448] usb 6-1: USB disconnect, device number 11 21:14:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) unlink(&(0x7f0000000280)='./bus\x00') [ 1765.348582][ T2581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1765.803903][ T2588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1765.874174][ T2602] loop5: detected capacity change from 0 to 16 [ 1765.887283][T29028] usb 3-1: new high-speed USB device number 42 using dummy_hcd 21:14:39 executing program 1: getpid() r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x40, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x0, 0x0, 0x400]}) [ 1766.064921][ T24] audit: type=1800 audit(1638911679.675:853): pid=2607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15028 res=0 errno=0 [ 1766.108647][ T2602] loop5: detected capacity change from 0 to 16 [ 1766.135618][T29028] usb 3-1: Using ep0 maxpacket: 8 [ 1766.249373][ T24] audit: type=1800 audit(1638911679.875:854): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15076 res=0 errno=0 [ 1766.275983][T29028] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.286392][T29028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1766.297912][T29028] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 21:14:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000780)={0x0, 0x0, 0x25}) 21:14:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @ct={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @ct={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) [ 1766.556314][T29028] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1766.565780][T29028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.576694][T29028] usb 3-1: Product: syz [ 1766.580982][T29028] usb 3-1: Manufacturer: syz [ 1766.586197][T29028] usb 3-1: SerialNumber: syz 21:14:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:40 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1766.787934][T29028] usb 3-1: config 0 descriptor?? [ 1766.831796][T29028] adutux 3-1:0.0: interrupt endpoints not found [ 1766.852479][ T2621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1767.033560][T29028] usb 3-1: USB disconnect, device number 42 [ 1767.311629][ T2648] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 21:14:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/shm\x00', 0x0, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000340)=""/200, 0xc8}], 0x1) 21:14:41 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff000009"], 0x0) 21:14:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) [ 1768.057481][ T2657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:42 executing program 5: r0 = add_key$user(&(0x7f0000002680), &(0x7f00000026c0)={'syz', 0x3}, &(0x7f0000002700)="f0", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="5e6e67fa465ffdf8517e857dc67b927b937891d9563b33d51a45b5baec28a1db154bd2a04a8e49705973e0d735d7f89cba9e1fcabbd63d41877d50eb7720f972d18df91db712ae5281ffd01529a6d8a4154c19d1a1ff0ae985c726779310902fdbb4fbc15be80bfdbef158b51880cb6e4909e3d6015c6b34679100f6f54355f1a0d8d7e4dfb3554dee5d63f94a9a49685de0a69ee3175aea8d290ad5c3fe95af6a0d181900d8cf17a27a29158af67bee68c494c07722c48a94587f8ebc5e363c", 0xc0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="b5", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/95, 0x5f, &(0x7f0000000440)={&(0x7f0000000400)={'wp512-generic\x00'}}) 21:14:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:42 executing program 1: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0x3) [ 1768.815959][T30910] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1769.075593][T30910] usb 3-1: Using ep0 maxpacket: 8 21:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001d00)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0xffffffffffff8001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000140)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file0\x00') [ 1769.207863][T30910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1769.219824][T30910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1769.283224][ T2696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) [ 1769.497743][T30910] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1769.507166][T30910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.515535][T30910] usb 3-1: Product: syz [ 1769.519841][T30910] usb 3-1: Manufacturer: syz [ 1769.524631][T30910] usb 3-1: SerialNumber: syz [ 1769.735375][T30910] usb 3-1: config 0 descriptor?? 21:14:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1769.785012][T30910] adutux 3-1:0.0: interrupt endpoints not found [ 1769.934282][ T2719] loop5: detected capacity change from 0 to 264192 [ 1769.987861][T30910] usb 3-1: USB disconnect, device number 43 21:14:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:43 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1770.322038][ T2731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:44 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff000009"], 0x0) 21:14:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 21:14:44 executing program 1: syz_80211_inject_frame(&(0x7f0000002a40), &(0x7f0000002a80)=@ctrl_frame=@pspoll={{}, @random, @from_mac, @broadcast}, 0x10) 21:14:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:44 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380), 0x10) listen(r0, 0x0) [ 1770.932026][ T2755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:14:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1771.338068][ T2761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1771.359224][ T2755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:14:45 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1771.497352][T29028] usb 3-1: new high-speed USB device number 44 using dummy_hcd 21:14:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:45 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1771.745958][T29028] usb 3-1: Using ep0 maxpacket: 8 21:14:45 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) [ 1771.867594][T29028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1771.879007][T29028] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.095914][T29028] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1772.107727][T29028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.116527][T29028] usb 3-1: Product: syz [ 1772.120831][T29028] usb 3-1: Manufacturer: syz [ 1772.125702][T29028] usb 3-1: SerialNumber: syz 21:14:45 executing program 1: semctl$SETVAL(0x0, 0x3, 0x10, 0x0) [ 1772.306537][T29028] usb 3-1: config 0 descriptor?? [ 1772.379821][ T2787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1772.415041][T29028] adutux 3-1:0.0: interrupt endpoints not found 21:14:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1772.574838][T29028] usb 3-1: USB disconnect, device number 44 21:14:46 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff000009"], 0x0) 21:14:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) [ 1773.330712][ T2820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:47 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:14:47 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1773.857876][ T2836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:14:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1774.186104][T30910] usb 3-1: new high-speed USB device number 45 using dummy_hcd 21:14:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1774.426403][T30910] usb 3-1: Using ep0 maxpacket: 8 [ 1774.563006][T30910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1774.574470][T30910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1774.614550][ T2836] KVM: debugfs: duplicate directory 2836-4 21:14:48 executing program 3: io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1774.827678][T30910] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1774.837161][T30910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.845905][T30910] usb 3-1: Product: syz [ 1774.850200][T30910] usb 3-1: Manufacturer: syz [ 1774.854930][T30910] usb 3-1: SerialNumber: syz [ 1774.987116][ T2866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1775.000517][T30910] usb 3-1: config 0 descriptor?? 21:14:48 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:14:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0x5, 0x0, 0x1, [@CTA_TUPLE_IP={0x9, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x3, 0x2, @multicast2}}}]}]}, 0x7c}}, 0x0) [ 1775.072388][T30910] adutux 3-1:0.0: interrupt endpoints not found [ 1775.253002][ T19] usb 3-1: USB disconnect, device number 45 21:14:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:49 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff0000090584"], 0x0) 21:14:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:49 executing program 3: io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1775.830745][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:14:49 executing program 1: process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/49, 0x31}, {0x0}], 0x2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) [ 1776.184136][ T2903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:50 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:14:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_delrule={0x1c}, 0x1c}, 0x300}, 0x0) 21:14:50 executing program 3: io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1776.855561][T29448] usb 3-1: new high-speed USB device number 46 using dummy_hcd 21:14:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1777.131807][T29448] usb 3-1: Using ep0 maxpacket: 8 [ 1777.280411][T29448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1777.291980][T29448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 21:14:51 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f0000000340)) [ 1777.536207][T29448] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1777.545834][T29448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.554008][T29448] usb 3-1: Product: syz [ 1777.558525][T29448] usb 3-1: Manufacturer: syz [ 1777.563253][T29448] usb 3-1: SerialNumber: syz [ 1777.643554][ T2942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:51 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1777.734738][T29448] usb 3-1: config 0 descriptor?? [ 1777.821114][T29448] adutux 3-1:0.0: interrupt endpoints not found [ 1777.983216][T29448] usb 3-1: USB disconnect, device number 46 21:14:52 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff0000090584"], 0x0) 21:14:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:52 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x8402) write$UHID_DESTROY(r0, &(0x7f0000000180), 0xfdc0) fsopen(&(0x7f0000000240)='logfs\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:14:52 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) 21:14:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:52 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1778.959848][ T2980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:53 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1779.746487][T29028] usb 3-1: new high-speed USB device number 47 using dummy_hcd 21:14:53 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) 21:14:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1779.996406][T29028] usb 3-1: Using ep0 maxpacket: 8 [ 1780.118436][T29028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1780.129867][T29028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 21:14:53 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x8402) write$UHID_DESTROY(r0, &(0x7f0000000180), 0xfdc0) fsopen(&(0x7f0000000240)='logfs\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1780.333838][ T3012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1780.379434][T29028] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1780.388955][T29028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.400254][T29028] usb 3-1: Product: syz [ 1780.404549][T29028] usb 3-1: Manufacturer: syz [ 1780.409992][T29028] usb 3-1: SerialNumber: syz [ 1780.652724][T29028] usb 3-1: config 0 descriptor?? [ 1780.764775][T29028] adutux 3-1:0.0: interrupt endpoints not found [ 1780.973419][T26475] usb 3-1: USB disconnect, device number 47 21:14:55 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100005c6f4408070a64006e00010203010902240001000000000904000002ca743700090503032000ff0000090584"], 0x0) 21:14:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 21:14:55 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:55 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:55 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) 21:14:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 21:14:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:55 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:55 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:56 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 1782.575493][T29028] usb 3-1: new high-speed USB device number 48 using dummy_hcd 21:14:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1782.823620][ T24] audit: type=1800 audit(1638911696.445:855): pid=3069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15513 res=0 errno=0 [ 1782.846113][T29028] usb 3-1: Using ep0 maxpacket: 8 [ 1782.967292][T29028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1782.979054][T29028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1783.205660][T29028] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1783.214933][T29028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.223449][T29028] usb 3-1: Product: syz [ 1783.227975][T29028] usb 3-1: Manufacturer: syz [ 1783.232731][T29028] usb 3-1: SerialNumber: syz [ 1783.374876][T29028] usb 3-1: config 0 descriptor?? [ 1783.421562][T29028] adutux 3-1:0.0: interrupt endpoints not found [ 1783.627718][T29028] usb 3-1: USB disconnect, device number 48 21:14:57 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:57 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:14:57 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:57 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x54ec0, 0x0) 21:14:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:58 executing program 2: bpf$MAP_CREATE(0x22, 0x0, 0x0) 21:14:58 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:14:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:14:58 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:14:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:58 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x183f40ba0b4ac911, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) 21:14:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2, &(0x7f0000000580)=@raw=[@map_val], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:14:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1785.631152][ T3112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:14:59 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:14:59 executing program 2: clock_getres(0x0, &(0x7f0000000180)) 21:14:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:14:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:14:59 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) perf_event_open(&(0x7f0000002b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 21:15:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:15:00 executing program 5: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:00 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x8, @pix_mp}) [ 1786.783539][ T3138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3729836f774f92b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:15:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:15:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:01 executing program 5: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn}) 21:15:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_delroute={0x1c, 0x19, 0x183f40ba0b4ac911}, 0x1c}}, 0x0) [ 1787.708949][ T3166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:15:01 executing program 5: read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000140)}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x213, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x26686fd09c5e1235) getsockopt$inet_opts(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000000c0)) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="57bf00000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099ebb232e7b4ea35"], 0x30}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='scalable\x00', 0x9) 21:15:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) 21:15:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:15:02 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) [ 1788.874223][ T3196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0) 21:15:02 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:02 executing program 1: syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc}, {}, @device_b, @device_a, @device_b, {}, @device_b}, {0xc}}, {@type10={{}, {}, @from_mac, @broadcast, @random="d748a4555692"}}}}, @a_msdu}, 0x3e) 21:15:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) 21:15:02 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1789.587769][ T3222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:15:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0) [ 1789.919338][ T3232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:03 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) [ 1790.025572][ T3222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:15:03 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x80}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004000) 21:15:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x0, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @dev, [], [], 'bond_slave_0\x00', 'vlan0\x00'}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@dst={{0x48}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @loopback, [], [], 'gre0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'syzkaller0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) [ 1790.675653][ T3257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x81f4, 0x0, 0x0) 21:15:04 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:04 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:04 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xff92) 21:15:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:04 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x81f4, 0x0, 0x0) 21:15:05 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:05 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fork() pipe(&(0x7f0000000340)) [ 1791.652177][ T3288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:05 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x81f4, 0x0, 0x0) 21:15:05 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 21:15:06 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) [ 1792.694918][ T3317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:06 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x0, 0x0, 0x1f4) 21:15:06 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f000000cac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)='G', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB='x'], 0x78}}], 0x1, 0x4000001) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) recvmmsg(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/54, 0x36}], 0x1}}], 0x1, 0x0, 0x0) 21:15:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:06 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:07 executing program 1: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) [ 1793.881630][ T3345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:07 executing program 2: clock_gettime(0x0, &(0x7f00000001c0)) 21:15:07 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:08 executing program 1: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x0, 0x0, 0x1f4) 21:15:08 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:08 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x163042, 0x0) r0 = syz_io_uring_setup(0x4a3a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:15:08 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:08 executing program 1: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:09 executing program 1: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:09 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x0, 0x0, 0x1f4) 21:15:09 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x73a2d5278562e95f) 21:15:09 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:09 executing program 1: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:10 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0xe}}, 0x1c}}, 0x0) 21:15:10 executing program 1: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x11a}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 21:15:10 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:11 executing program 1: syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) [ 1797.551080][ T3415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:11 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:15:11 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:11 executing program 1: syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8929, &(0x7f0000000080)) 21:15:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x1e}}) 21:15:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xc, 0x0, &(0x7f0000000300)) [ 1798.756487][ T3447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:12 executing program 1: syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x0, 0x7}) 21:15:13 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @local}, @sco, @l2={0x1f, 0x0, @none}, 0xc}) 21:15:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f00000000c0)=@ethtool_eeprom}) 21:15:13 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) [ 1799.940724][ T3477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:13 executing program 2: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000011c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70ff40cd95b1502dce2c3e138d33e6ae6ea71fc46a3312c9c719ef79879e1d98"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x8c}}, 0x0) 21:15:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x2, &(0x7f0000000640)=@raw=[@initr0], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 21:15:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 21:15:14 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000000, 0x8) 21:15:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x1d, 0x0, &(0x7f0000000300)) 21:15:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 21:15:14 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) [ 1801.286084][ T3503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:14 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 21:15:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:15 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000000)=@generic={0x0, "c939564e80880fec5c5cc771133b8764b9382224ef98d2f8203af26dac9bc9675cdeac5b944fb48bf15bd11dd7889dadc57bede7f88e455e4e6e1d36788623f5dc54ff2fb0ad8e2f1feac408ff8153912ccff408b2511850a2dce76ea850a3656a623dfd10c0289237b4f9c1161e6f18da8ffccd442b454521033c0816c9"}, 0x80) 21:15:15 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)) 21:15:15 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, 0x0, 0x0) 21:15:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x43}}) 21:15:16 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x89a0, 0x0) [ 1802.807469][ T3534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, &(0x7f0000000300)) 21:15:16 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4068aea3, &(0x7f0000000240)={0x0, 0x0}) 21:15:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 21:15:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x8208ae63, 0x0) 21:15:17 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, 0x0, 0x0) [ 1804.038232][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae78, 0x0) 21:15:17 executing program 1: socket$inet(0x2, 0x3, 0x1) 21:15:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xffffffff}) 21:15:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x12}}) 21:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x60, 0x0, &(0x7f0000000300)) 21:15:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(0xffffffffffffffff) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1805.134837][ T3606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:18 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1182040, 0x0) 21:15:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x15}}) 21:15:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x34}}, 0x0) 21:15:19 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, 0x0, 0x0) 21:15:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, r2, r3}}, 0x18) 21:15:19 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000040)) [ 1806.039394][ T3637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8919, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @local}, @sco, @l2={0x1f, 0x0, @none}}) 21:15:20 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80) connect(r0, &(0x7f0000000240)=@generic={0xa, "6b4554e64acea32a304cf1a05856db4271589a74ef1117ec2847e851c15f66547c66f1ae52bc3f1856d10eeb5a27a91164287d8800329289d7b5be73b14589fa64bfa0a30facce1d1605c26109bdb7d1a8ea3b84a5bd1910e1fdc89f12c2e636394e1fe4332a084d71d44d8a0e0de6529e385a6da53724cdcaf555b51e74"}, 0x80) 21:15:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(0xffffffffffffffff, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x0, 0x0, 0x4, r2}) 21:15:20 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040), 0x8) 21:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000300)) 21:15:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1807.063763][ T3670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:21 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x80001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x61bd, 0x0, 0x0, 0x0, 0xfffffffffffffdae) 21:15:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040), 0x4) 21:15:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)) [ 1808.298088][ T3708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:21 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040), 0x8) 21:15:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(0xffffffffffffffff, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x44}}) 21:15:22 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_regs}) 21:15:22 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6(0xa, 0x80001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x61bd, 0x0, 0x0, 0x0, 0xfffffffffffffdae) 21:15:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 21:15:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0xf}}) [ 1809.401732][ T3738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:23 executing program 5: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) write$eventfd(r0, &(0x7f0000000040), 0x8) 21:15:23 executing program 1: r0 = socket(0xa, 0x6, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)={0x0}}, 0x0) 21:15:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8905, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x38) 21:15:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:23 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(0xffffffffffffffff, r3, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a1, &(0x7f0000000080)={'veth1\x00', 0x0}) [ 1810.398631][ T3770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae41, 0x0) 21:15:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0xa}}) 21:15:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x600, 0x29, 0x0, 0x0) 21:15:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x0, 0x0, 0x1, r2, 0x3}) 21:15:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x890c, 0x0) 21:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x31, 0x0, &(0x7f0000000300)) [ 1811.411822][ T3801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000380)=@ethtool_per_queue_op}) 21:15:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 21:15:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x22, 0x0, &(0x7f0000000300)) 21:15:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x2f}}) 21:15:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:25 executing program 1: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 21:15:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8902, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @local}, @sco, @l2={0x1f, 0x0, @none}}) 21:15:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1812.443381][ T3841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x25, 0x0, &(0x7f0000000300)) 21:15:26 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:26 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:26 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{0xffffffffffffffff}], 0x1, 0x0, 0x130}, 0x0) 21:15:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x0, 0x2, 0xfffffff8}) 21:15:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 1813.327438][ T3869] binder: Bad value for 'max' [ 1813.345996][ T3869] binder: Bad value for 'max' 21:15:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x19, 0x0, &(0x7f0000000300)) [ 1813.494250][ T3872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001440)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 21:15:27 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003500)={&(0x7f00000024c0), 0xc, &(0x7f00000034c0)={0x0, 0xffffffffffffff4a}}, 0x0) 21:15:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x3) 21:15:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1814.118689][ T3897] binder: Bad value for 'max' 21:15:27 executing program 4: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@stats}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) [ 1814.546125][ T3903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1814.693342][ T3911] binder: Unknown parameter 'smackfsfloor' [ 1814.754259][ T3911] binder: Unknown parameter 'smackfsfloor' 21:15:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) dup(r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80006) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:28 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 21:15:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000007c0)="f4") 21:15:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1815.187687][ T3920] binder: Bad value for 'max' 21:15:28 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8991, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) [ 1815.462575][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 1815.469314][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 21:15:29 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) [ 1815.870770][ T3932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x15, 0x0, &(0x7f0000000300)) [ 1816.001078][ T3938] binder: Bad value for 'max' 21:15:29 executing program 2: mount$binderfs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:29 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000080)) 21:15:30 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x1e, 0x0, &(0x7f0000000300)) 21:15:30 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) 21:15:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000000)) 21:15:30 executing program 2: mount$binderfs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:30 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'vlan1\x00', {0x2, 0x0, @local}}) [ 1817.119177][ T3956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:31 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 21:15:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@dev, @private, r1}, 0xc) 21:15:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:31 executing program 5: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f00000000c0), 0xfffffffffffffd9b) 21:15:31 executing program 2: mount$binderfs(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) [ 1818.091973][ T3983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:32 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x40010) 21:15:32 executing program 5: socket(0x2c, 0x3, 0x0) 21:15:32 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 21:15:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 21:15:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0xe}}) 21:15:32 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) [ 1819.206384][ T4012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 21:15:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x8010aebb, 0x0) 21:15:33 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4038ae7a, 0x0) 21:15:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:33 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:15:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x8010aebb, 0x0) [ 1820.321740][ T4044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:34 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x1c}, 0x0, 0x0, 0x0) 21:15:34 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, 0x0) 21:15:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:15:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3}) 21:15:34 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, 0x0) [ 1821.412163][ T4084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:35 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:15:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0) 21:15:35 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 21:15:35 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, 0x0) 21:15:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 1822.273892][ T4105] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1822.294467][ T4105] CPU: 1 PID: 4105 Comm: syz-executor.4 Tainted: G W 5.16.0-rc3-syzkaller #0 [ 1822.301589][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.301589][ T4105] Call Trace: [ 1822.301589][ T4105] [ 1822.301589][ T4105] dump_stack_lvl+0x1ff/0x28e [ 1822.301589][ T4105] dump_stack+0x25/0x28 [ 1822.301589][ T4105] warn_alloc+0x4cd/0x680 [ 1822.301589][ T4105] ? kmsan_get_metadata+0xa4/0x120 [ 1822.301589][ T4105] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1822.301589][ T4105] __vmalloc_node_range+0x12bc/0x17f0 [ 1822.301589][ T4105] __vmalloc+0xf8/0x110 [ 1822.301589][ T4105] ? kvm_dev_ioctl+0x295/0x32b0 [ 1822.301589][ T4105] ? kvm_dev_ioctl+0x295/0x32b0 [ 1822.301589][ T4105] kvm_dev_ioctl+0x295/0x32b0 [ 1822.301589][ T4105] ? kmsan_get_metadata+0xa4/0x120 [ 1822.301589][ T4105] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1822.301589][ T4105] ? kvm_reboot+0xb0/0xb0 [ 1822.301589][ T4105] ? kvm_reboot+0xb0/0xb0 [ 1822.301589][ T4105] __se_compat_sys_ioctl+0x876/0x1150 [ 1822.301589][ T4105] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1822.301589][ T4105] __ia32_compat_sys_ioctl+0xd9/0x110 [ 1822.301589][ T4105] __do_fast_syscall_32+0x96/0xf0 [ 1822.301589][ T4105] do_fast_syscall_32+0x34/0x70 [ 1822.301589][ T4105] do_SYSENTER_32+0x1b/0x20 [ 1822.301589][ T4105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1822.301589][ T4105] RIP: 0023:0xf6f4e549 [ 1822.301589][ T4105] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1822.301589][ T4105] RSP: 002b:00000000f5f485fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1822.301589][ T4105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 1822.301589][ T4105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1822.301589][ T4105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1822.301589][ T4105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1822.301589][ T4105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1822.301589][ T4105] [ 1822.508926][ T4105] Mem-Info: [ 1822.512133][ T4105] active_anon:414 inactive_anon:135987 isolated_anon:0 [ 1822.512133][ T4105] active_file:5684 inactive_file:61372 isolated_file:0 [ 1822.512133][ T4105] unevictable:770 dirty:55 writeback:0 [ 1822.512133][ T4105] slab_reclaimable:9346 slab_unreclaimable:46186 [ 1822.512133][ T4105] mapped:21093 shmem:8018 pagetables:2641 bounce:0 [ 1822.512133][ T4105] kernel_misc_reclaimable:0 [ 1822.512133][ T4105] free:237794 free_pcp:23521 free_cma:0 [ 1822.554355][ T4105] Node 0 active_anon:1628kB inactive_anon:527968kB active_file:22488kB inactive_file:242532kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:76900kB dirty:172kB writeback:0kB shmem:30416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB kernel_stack:4992kB pagetables:7688kB all_unreclaimable? no [ 1822.586414][ T4105] Node 1 active_anon:28kB inactive_anon:15980kB active_file:248kB inactive_file:2956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7472kB dirty:48kB writeback:0kB shmem:1656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:928kB pagetables:2876kB all_unreclaimable? no [ 1822.617319][ T4105] Node 0 DMA free:4096kB boost:0kB min:156kB low:192kB high:228kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.644888][ T4105] lowmem_reserve[]: 0 905 1218 1218 1218 [ 1822.651013][ T4105] Node 0 DMA32 free:35860kB boost:0kB min:36008kB low:45008kB high:54008kB reserved_highatomic:0KB active_anon:560kB inactive_anon:457032kB active_file:772kB inactive_file:201044kB unevictable:0kB writepending:144kB present:3129332kB managed:932648kB mlocked:0kB bounce:0kB free_pcp:37968kB local_pcp:18152kB free_cma:0kB [ 1822.683105][ T4105] lowmem_reserve[]: 0 0 313 313 313 [ 1822.688823][ T4105] Node 0 Normal free:15564kB boost:0kB min:12452kB low:15564kB high:18676kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:70936kB active_file:21716kB inactive_file:41488kB unevictable:1544kB writepending:28kB present:1048576kB managed:320516kB mlocked:8kB bounce:0kB free_pcp:6640kB local_pcp:4792kB free_cma:0kB [ 1822.719664][ T4105] lowmem_reserve[]: 0 0 0 0 0 [ 1822.724664][ T4105] Node 1 Normal free:895656kB boost:0kB min:41488kB low:51860kB high:62232kB reserved_highatomic:0KB active_anon:28kB inactive_anon:15980kB active_file:248kB inactive_file:2956kB unevictable:1536kB writepending:48kB present:4194304kB managed:1067980kB mlocked:0kB bounce:0kB free_pcp:49372kB local_pcp:24932kB free_cma:0kB [ 1822.755461][ T4105] lowmem_reserve[]: 0 0 0 0 0 [ 1822.760450][ T4105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1822.773317][ T4105] Node 0 DMA32: 1*4kB (M) 314*8kB (ME) 168*16kB (UM) 178*32kB (UME) 46*64kB (UME) 8*128kB (UM) 8*256kB (ME) 9*512kB (UME) 2*1024kB (ME) 6*2048kB (UM) 0*4096kB = 35860kB [ 1822.791577][ T4105] Node 0 Normal: 83*4kB (UME) 420*8kB (UME) 124*16kB (UME) 69*32kB (UME) 28*64kB (UME) 8*128kB (UE) 5*256kB (UE) 7*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 15564kB [ 1822.809143][ T4105] Node 1 Normal: 242*4kB (UME) 222*8kB (UME) 89*16kB (UME) 33*32kB (UME) 17*64kB (UME) 6*128kB (UME) 7*256kB (UE) 6*512kB (U) 1*1024kB (U) 1*2048kB (U) 215*4096kB (UM) = 895656kB [ 1822.828357][ T4105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.838342][ T4105] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=3 hugepages_size=2048kB [ 1822.848169][ T4105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.858065][ T4105] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 1822.867711][ T4105] 24787 total pagecache pages [ 1822.872482][ T4105] 0 pages in swap cache 21:15:36 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) [ 1822.877285][ T4105] Swap cache stats: add 0, delete 0, find 0/0 [ 1822.883464][ T4105] Free swap = 0kB [ 1822.887475][ T4105] Total swap = 0kB [ 1822.891269][ T4105] 2097051 pages RAM [ 1822.895144][ T4105] 0 pages HighMem/MovableOnly [ 1822.900085][ T4105] 1515741 pages reserved [ 1822.904432][ T4105] 0 pages cma reserved 21:15:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000c00)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl, 0xfff, 0x0, 0x0, 0x0, 0x4}) [ 1823.084050][ T4118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1823.584113][ T4135] binder: Unknown parameter 'smackfsfloor' 21:15:37 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891c, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 21:15:37 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1823.958602][ T4139] binder: Unknown parameter 'smackfsfloor' [ 1824.245337][ T4146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080), 0x4) 21:15:38 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8914, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @local}, @sco, @l2={0x1f, 0x0, @none}}) 21:15:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 21:15:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 1824.641457][ T4163] binder: Unknown parameter 'smackfsfloor' 21:15:38 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:38 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:38 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020aeb2, 0x0) 21:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4a}}) 21:15:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 1825.274952][ T4175] binder: Unknown parameter 'smackfsfloor' 21:15:39 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x1a, 0x0, &(0x7f0000000300)) 21:15:39 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x0, 0x0) 21:15:39 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x3, 0x4) 21:15:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae45, 0x0) 21:15:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 1826.023329][ T4197] binder: Unknown parameter 'smackfsfloor' 21:15:39 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}]}) 21:15:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8902, 0x0) [ 1826.524415][ T4214] binder: Unknown parameter 'smackfsfloor' 21:15:40 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:40 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80000000}}]}) 21:15:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:40 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x0, 0x0) 21:15:40 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)) 21:15:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8930, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) [ 1827.044841][ T4224] binder: Bad value for 'max' 21:15:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 21:15:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)=';', 0x1}], 0x1}}], 0x1, 0x0) 21:15:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:41 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x0, 0x0) 21:15:41 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000100)={0x40, 0x8, [0x0, 0x0]}) 21:15:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xaec7, 0x0) 21:15:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:41 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r2}) 21:15:42 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x0, &(0x7f00000000c0)) 21:15:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xaec7, 0x0) 21:15:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:42 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="a809c6fd71de6132f1585bc50f97d8e260ba76b12b4e243547d1f1bc25eb55901f9c16d864a991fbc85da472f0151b5fec7e43bc108140296884e4b413b2c087dc2587699632b192b527550216f5a3738738e36fa68147216a46b6dbeebc799bd5d42235860ada03625d6e12066a1cb467fe76a36d95105f35b6fede18193012e9be491fecd594ee5a1b5d017efecad5218a2e9a2eda875082e80e695456245c03fdc4110c72a0e94908561e076bacd44117c3f307d6ecc6d05cf2cd66840336e9c5f0fccd4f58514dfb7d10616fa1c760aa1021813b8cf7d73436f7ab8c68f16dea32bc26db32c4899f4edd27dadd431e73c8a9cc783ab3f44c5f918da997e71950b9721dc936002d40416a23c16cc2513a516f8c0bfefa2cd7b381e1e2dda8412e1cccdc8d64d1d8c6a9a5ac845094fd0007cebc6a90788354e62663d74e457c93090123b7cd560228b70509220145f50cea6629fd01e931b46b8c2a5fd8e0b3574b45ba2e4aa2338291c19b45525128b5536874f5db2a9aaa029048e81fb07f246b730353aef7b128a72585fcd6f84c50b3638439a17a8452d5bea753805f1cbf9d4d8ec79d46e4f8ec3148c78048708a9368f7f3e2a867cbf0c793f271557fe9228470678e8dbb4f191d34c75fc879df7aac08d496d22e27267b6030f7d56dbd08ce7ab2870c3bc4162bdd46a8f54011693540ba489bbc44f964424dc6ee280198d889bb348af74e87859296b0464a6798063cd1f68d67633e1f774bec4c2d7fbdf8b43d5508c689df94f29401a9819dcb97c00089ff47deb49b9ff41eda603db9a36ccd1e22589a8c3ca7c5b104eef6c59581c10460a3e108808fbdd8a94fbc095c458b2ff2428d797a240342399a29097694de649273243eb6acf0d671ee3e8eb81106f1a3873e1cf3a664470b2fc2e07bf4447d167c96dcbbd84583b31ed3b94a9635cb56a2da54ecb44bc70898002e44cfd6e9078c9ad4dbedc162551c92c01a72d1f74505d6ddf732b0a6d853f68d901980c7c444b92e313764da4986c2ff67819dc3f1ed8c28a4792b0519609c5737a9010309f5492d6b8101a2acf2042376a7e1a391a4136300cfee210805ebf59faf758105e7e91bed0996cc9a0c3a63655595234388e474a08f19124df63da13f3340352c3dfc808b205b856e93b459f273f2c5129e96bcdb767d383d4e28e7861ca681136eb82b1ae53facca54a769e25fb7c232a0e54b2b42fc7f2ae4a02c956743855bcaf60e5b5d02ac8468b7f6e504f8af3c581dcaeb3bfd85d372f60d4b23a27e74f86e647fcaf4a9c39f38c40433c29a803f339ce5ded98a79bf093ae347971efc0b0e677e4c8c2b7a60e445e97219781d8a1d5c6f2040138a0b6ffa35104dfc91ef086625df516025fdbe6990e4c87779ececdfb32e0e5c2699392583a023184743c34acff8fa8b22d8feeae6ff4647e702e17b763201491337866d1b6a8a890a5d95daf6f34043a0f2277065073e023c5500074fb5695e457a87e76c39ec67526aaf60d4d086ef800aff0c1bf1bb4d70f053285ed1c950c580fdea9aacbb8e815798fafe283c6b603fe701704151317861f53dbeb09686f731ecada6b455442996df04c3762e48ada9a298e0d3bd4c4ce4a98a01ef5fab2d21334fb6e58df7f71b0db86adf59d8e6112b99791841c5d60f84ab0c457bf898ba65ce46c638223e6148b42ba2b682d936c9657f6e7689618984898b828ec6c6a4695bd9c7d7abec41c9d30960f6b202c99a280c3b01f183d00bfb0d89265d90e8dd3a5ed561def40fc8a7b7f8b2c17bfa5383bbb96b7aba2197b0ff1abf0223220742b9bce94ed482d6bc6837955766a5f7a0dfed61d08ee13a8c0ca79a1997967fb78ae5ce0247f683323eb490b2e40879ee6809fcdd55de9254daffd69f4f1c6137b51df4c542ba1ebfa95f747543caa473927b4f4d3294ba99caed4944704c3486b1e5c25618617ce347547d3093319551023bd898cd0e0a7f93dc897b3feb4ae1cc2109ea89496534aa5c75ce3fe27a25c3a8aba0968ed7e82ee71797260ff9b1b5209954338f3b9f904cf1464d3f23472dfd886ac323ad73f62822e1667a625fccc3f4d1545798e0e68d2e132e7e9a4f5fd2771304090cb40f06e6ca24f8d6e54bafb976e9f2358bc60233eafdc8ade16d216fe11e27acae8590832b81843436ca53d86885c88816fc8c463a630867f0b5d23506d8f1de46dda94b2062d6a02cb02de9f3bf9748606b5e07c0165600109b525d47ee33d536604d10b74c1e2efd8e8c2144211929624cd48af8784e064837fc64dbc7233594f2aba987acc937bfdd1c045aaac76fb18c0a31ea3698bc998eefe8ffab1968cc99b1b3c3aa1a18018befa32b037c6edf4f1acb09853ef866d2876e7adbdd71c30673ad3a4e3ccc15d17f362cf72f89d5116b5278d60d1069f2065111b629ccfa4f27d2e8773aedc9fc8242b100a22770ea2471cf8a081343338a1040b6fde19acf45385c3462cd5135edca6f2f11c2769469deccdc4f9250fd8d7490856e9d42d042fbcba56297f3a7a544ad4366dbd7513c135d624be9b3a541dc39f20a5114988b520ddfcd6341b88c7e2248a2c5e7a6d45b4ee9fdfeac68b21f6cc4cb9355ea92bb97a8f3915fe5fd315157b7db8d2f120e8cb29fa2eab6fa06dc66b8c9287d0cd7ae1b7f91c005204a385d9ee09ecc87020f2da46a17ac3fec933be5537c582623c881b650467f5df130f62f4ba7802a6498cb2408810a88ccf90995d148de26ba1b26e776ae83c74db135f99c1b237be9f005f3b05e9021cc68c1b2c853c35bb0c3c50b94c14fb55d6972320c144ecd57651a0c8bf005d51b10bf0b21bb4c73a0b0bbd5eae0653d7499891b328cf64414773eaf8791fae08d61fe06f9f15dac0005dcd501487096e2a81fc10d2e8ec288480bc8aac4f1301007d0f0d9d100741d7ad8c5aab677991231918bea38a1c69e818b791cc31430a0822b5456d4ed8d9e7f47c0e24a5c2228095ff95659571d7cb86056d5fe8055df4f790366601db33e9010e6d66d3d8e628ba4efcfc5b5c4463ab6837046933a26232a3ce4be4817a865e5cdd11b459533ac2a8345beda60e7391f81c6eb99dda5e063cc65acf491e1b0b7f921960e2ccced1233f81d1d691e32692d30adaae8a214d56a8d8fc6cc0295ba3cb28e7b957b772f3164545ef445e75b81a523b138b50983dbffa6c50290027f330e17dfa9001e8d2eea71d5187d26efb33cbc68d4b74f76fadf3800a47f63b40ac55910300c849087dc0b5cb024d712ec3ef44fc1a798d1ecbb5d5660ab0082f892a64734e111a9f860c4f67144a882ec08de4087d9c92e7325b97eda23d3e359cb51b0de9fcf93eecbea3dcc5a7bcfd911e0d7d0b2ae78fd3b279c52e8221bf74a7da4c50222b555dbb79d3011a0dbf99a7bae1ac85595f603675108d126071ac528d2115d6ec5ef238b92a3669163e47a39cd6402f777bdd92f5096f8902db0e1abe9ca2ffd983f5995bf031d935059e3d791140832a6dc5c7529f4183ab2faed35cdf52100b2b5095916c9dc303925545fce6828b65c83aebc7b82bcc79dabc82480a268ab38ce837fd02a9a5b2688b5199faca20ab45e76c8979033a30e6561bf83b585ed48131502b3ea9484566469557bdc99ce3758db9f660d73eae2a7ae8ea9ac2b1acbdd000a2aaec6c50d0ee8987c6244a11ccbb3ad389722ff7e6ccc6e1bb42163e461ff1bfe925161836beac5313d409dd68ddf29973ed13650d1218176ba78d26f852bcaea259bf4eac5bc3badb5ccd3128f27db2bbaaae96585b01114c14b59e07f2ea42ef0895ca024ddd958739389c31cc411183123ad52452ed65bf66e62f1ce17314dcd4f59e603af6100c819a900fe9f7649fd932d7a26c72166f4a0ad2275a1113a702fcfbd22418070f4184b3c96735171bf2fc2fd0a4099f50114533aa241891d62bcdc48649761022582cc779e7b7810b2da5155481fc3456c9ab53dac7b9432b6c29dd03e130ba726ca5a58d6a2dccfb67f4fc109f2e4ebf654c9009bad3a94acf4ce6b87ca5fc65fb5aef6ca84c60cbbb046f91b25c7417c80d2cf063c89c5b5bd11b2ba293542d303985ec39a00c07df5066c48c5faf63ec2d025b2983bdabb15e4228ec571421e524abe2ae3822b95251eec7d6c03708fc676cb73541e4d70632dd56e64f099ee8a79cc0539ad7e51c36cb56b768db8f84227778f0702dd72acf386632506a60ea4e65f2df6b48436ef6a503081542603eacffedcb63ca75a9e6e2714a2763b2f4935a325ddf3190b9637e9824b1492cd62de3b602206f5d75192a677440dfef8f98c1014d1921f15f2ea8c2a10802b31231a0bd0333a7b2e462bab391fb0d84e9f40919922a5894bf07598be73e100c8267c10612fb9a5abe6b9741569c04c13adb14cae5728bc5073927a34ac4b022e0aed7d794954f1a616d7ceaf34c574e486343046cfd31af959cc771379adeac7c04cab74c54dea54024b6ad59e40d78f0df9290152ff484da5f88bd11d6f1d6e391e28bf340e30f15b332cd415e865b530e2417f208cb56f6fe29aa2dc80a5ba526fdbcc21373fd0b347d8a030a7caf89618b456b89e40afa8fcc4a8e59cc01fe0146c8bf7e0d91f2ada2f0d6c2e09f3d7fd5e25b8e2f7524404f4d726b738868829b5d2c90ce3a368365cc75ca487265626fa00713a371884a3d8d54d9f046c5aea5a28451e606e6ed9ed3b8b114945da2419aa477d380e5bc051725a86a478fbc1b633ab5c16b81aae97d93fe4d51914631383b3a178d56ee3c4b4af5ec26167e7538e37748b792dbcf61196ae7185fa828bf8f15a06cbf76c1fed727a310e9ac4e1acda0189dc962a0a8b1f21d3b42118224e5095046aa4c3545db989362b590d94d63be6ac3d1c117f5631e3ced31c2fe8ac8641c9e037544e529c5765e687ffe87d09e5427381219cc4d71e54a852b03375cde1b534d61f909d9a27e68dc9bbcb4d91925a5593cb8b891928ba136a9e3f4f0d2275ff3d16589b10dcbed069a370b24305525b80197358c7bfa5c200552fef7f485da7101da2d254149cc94dcdb501024eade40c0b07fedbf4ada952ba1851dcc95450d8bf096e90b2143314d900cfe7eed7d67d83d4f4e995b5eeae9fe69326c568adf00330e2eed1b138f74fc3358aa978ca67145b09c2ad57bbed78fb2521568a7e63b9e60692c2e094a00553bf336d884cf7a2a53f9e4bc8d04e2b5e0452634c7a522fe97e6c20e9f931317a5208f640eb2419d8be1e069de3dda6bbecfff73720cf97462ca13411d9c19aa9320077e7e0b806038317113cec1bb845b75023de9b3ff8351671c2e615f5fe24f8c3b736b77f41f42ede72b7f486f2bc1e4ddae0004d1f9da8f83796f331925e745e3d14d0326aeb6e847692eeb2aa23913ff975c13d1bbc4fd96c7af832db225026bf1810eee8bed37a1f0c33e202246e9f42fe55e0d0b3ec9a9c148ebdbf450f31b5e97e2b08cc769d99a6ec3173feb9b1df411bdb715afbab211b3e186472b0a00a69d0e44cca8c8775f7085ff1503470c2c2fd6d3feaa8a9c61ab1a648a0414481c5f85751f57217db07bbb8b9b09a3c6b7ce40c491500c542c4c391055f0a60691c6728e90928624239fe5d44b52ef381cbaecfe9ce871ce06705cb3034f2618b7165ddc5a9dddb12b90c5c4d939b8c0743df4dd8f476fd491fd6b0fd6520b9da0075c64a8355374477072e174d758ec722da7ad49eaeb8149d10011bc9f805f917fc12cd75cf8bc70bb3231a3ee5b5281e4c2580bd88c5e95d19ee9b282c76816df6e3d9df946e2d15cda86550ef32dcf3ef307f8558fa60acd5efae4fb600fa9891216c59cd1555b07e2dfd0e5332a6b4269583a4dd525b6a0f8fa22642bf043ac1354eca22bb51e41c944753f2f8fdb179ee871f1fa0243f45d614f352831da6ce08753dc59d57706c6cbe997d0a98d29eb861c085252c0f1c94b88998891442f967e13dfe967b317263779886d0c9170d6b58ccf7fa147b314d207a40d76b4b33c32af29035739c547dc7555549ec09d41ec4cc3b9fbba65911af0dc70815533a81f21792c2c5196e020f01b784065452a5afc9f075213ea839a869566cceb246f45392bdb456f87bb6bd08c9ef3d1ae79358fa16039da0cc4ecc4c3f5c9c08d7522903d59902d578d234537950551dadef19f0515754420bcbcd5e13a76893733024ae64cab15533c8abcd9c90e0fae6b0be145205ab49e1108b716d904677e79180f12853e44a1cbab233653c34c577dcf29ea48f354916f7b79879b1110ea061ac5a993fad572247fa8293948173869ebc62d862b1e52d2bb1cdca33f317fda684d75d1fcb18418f92713b77ca2f1e6bc1dde81fb2b949d6d52838903999fc5a36e5536df21cda229d55eb029969b972add39b574f25429c1e089ad70ee561251436e317a7765f13c249493384f9608397f3ddd58689aa7361196221a06d7d3caed82b32af1f9cedefd75dd8377d812fc2dbaf9e1c5bc4abebb06a5461a2f7ac3c36d529bca9fc19e167d946a07b55af46a0011eb8d8867537540c5351cbe4f7736e2795ce5c70221943ecdbc9430d48cfd3677868c2564f92a3d296a8dd0cb4268da019105f6cfc4f702695af939c674e09b712b1fe38b8e2dfaae7a92ba951bb860cd1a502f27b48a6ca55a5013f1fe70555faec8346d097b0838d2c1395f2f78a772d1230122b3a050071e81aad804a622ab98adba8e3b5d5313fb28b656c36e4983903ce4e9029c8213642b2878379558678ac37f3ee16f0d908a867712fb07370f3c7bc9100359b1333a9ad9dc2e59a5c1027c30b179c5bd35d757e6142c095895806f9ec220ce7e92b39add8d508a6d240aee06dbc682faec8246a41ac225310233a70d98c0141fa565e35c1bb7878d591d016bbab26a870ee9adafd48c6d962c63727db9576efd812a8a37094c063e449d47796198c6fafba8e103761db8c87bd71e37814585b930fb08f7165ae3d913db9dcad39488ecdc39e86e5c66b24a2b9e829d06c0b5b300005561ac2410cdd6114b0cec0d95c4e33e9183263ce4bcf064f204cf29d3341648713c453074a8f2376f4409e9ca89647e9cfac2e7273b50e03a6955b171b1165052a68570ada73ce821ac50528a3793345e21433de129534cfce7fed71a9845a7c2e062e9188d522d8f5e843ce00ce074ba753229943ba282968529d89d8d29d8d93e92320a9b53b124fcfc24b457822c435070fbb5c13c55d88030b1253314832ddddee7fbeaa60497c0df7949b18083bbf5bd5f25c8f7c082f297df570dbf4e8fb5e943ca3aee850e29a3cafd910798025e01e6cec969468706585f0e948e7381040fa3c8a2ba319368f64c4c2b0f5b1a73cae9b84664de6b6f68ea021d56d3ff3352c666c425b926f9f07c117af81cbe94d8d3169a2acbe85d3e803c5371876f760013635c438c8a66fde9670cae94194c7eae1a7639f82e3f08f0fc33d45da8636fb372986660d3b5f783ac103ba90ae7b24de17ac18d175950eacf3f91e348402fb38330c81b7169f169ef436b16e1121feb809b6e752eb202349ce72b622f8279e84c3fc4403d14b0873ba178529f3002007b8e2b90960e0f98b6c7cbad54bb9816542d5bffc507719fbeb5cd9b0a30d8d62efb1721cdb7c4393a8cec2b6d98241704e6db63f1347c6d8c9ce5172493e1f2ac5fbb5e13d05a6249804492759fbe9c53f2c4474d52dceb49fb26c5179bc624d4dae6514f2c291a5bf190f2a7363b42671153664a1621d3710106f483c3cfc06c8337a826d0516f6992a58243c7d0ef116b27724549f5f58b380c628ae583c8ebef2361c41bac73a2a807a78b3fa752773e51d7b2f1c391edc86dbccc04ca21fd9e36f90dea86ad46ac20810ab71bd30bc78c1c9a0356f6afa26e33766e8d047083a5ba103093d4adf59bec432652948472c2cdc9289bdcbdf155b86ce269a123ad200eb992d632384201daf914a0afb7b8765d3cf65089d059fc29ce97e9793fa76a58e7c3ee8c28046d908b6d29f1637118a68051f4b4461af196909fb1b842a76961f92b1d19fab665ce55c6c5ec8df000e04b10051ec9cbbc87f2f68b746d8048acd78e03f22e5e7e44a2f683b21f7adf7e222ea572dbec855cf86485511b6ed1e658e1f588d1305f96ba6d1789fb4b1835c1caab4ef0713ab7e055beafb88aa1be88ad98f49a09ab9d669a895c7b9620c6daca57f8aeb1f3222b46196fa8dc1cbd372bebd5af34ac6cf02ecb20f613475de30e6698284ec8ef15e39a227d36836469c883835a2139cda98671f050c40020211e29fad14c99a528b1c47d0abe6af10cc2299800924f0e1bdca5dc498a1df3c4a116725263fb1cc2bb52921a79458da69dd11fc9724d3469fe5b7cba07c2ebb2e92ddddf931b4ea2ab48aa8cc1f637588286819b618d11291a77fde816f7a686a9a248bb730904fe57d7417ab980a6ee4ab8bbd6856901338b0cdf91b9800da4492dc2a7ebf978857bdca2bd36acad25f657dfffb807e2e51c7b8a47f6d2d31ad55f8215c647842a9c5fb3e9b6a93c062c3ce4df3513a0579ee202928cd1ff015588d2ffc0cec3392ccf5e2751e77ff2f3d4a3ea4fa4aa5856987070fc4256d368ff6cd6b6292020cfef27b42dbb7e3e446dc03addc10ca6f6d2bb9d94b8d8ae5fce1ecb6683c4b32d4f6def8425d43bcd91cca2e8f414d4d0144bab6c862df2c05407507e4f1b02d5fe937a70832bee4b5e5d2e72f505c3de9e6e59a685df80fd8480c227a5b3a2f702cbf05fc1d32c46cddbc36b7f6e74f53fcd2d5f9fbf6ff46f3472f119ea0382cbabab1825a1395cdbea9acd4e0219af078ef9e106bdad4ed49905d2af37a92d043c870c0277d192d545c7057c74e5af6d3023d5dd2cff1aaa9dfaf15ea872a6c4be31a158cbfe27ef4a487b84ad5af078dda3fa96f45c0b3b06b08bbd0696d3134f82db29b97d1547a7316e0571b9bceeded906d0099e9866a0906facad0eddb7b3ef52e2ab38d8e1c09d364cd38d4859ea72cc638d48d9836e416585a15265968b463f4331764754581866f3ea5f3c89baf4005af09e93c6308ea60b2f6afe3fbd27b819cd49ee96034c0cdb4f39ce06f4b6c1ce662a44e376abe7620ae95e010ba4ed0affa81480eea20bf55f4a24e76390007fe2e14641af285d10a81039723a7b98409c81999c7fc6c1ff25b6a96f0525b91bea524fdf2e4e85da00bd7c3121f83f6ebd4b7e6e9e0b43171935f4a9be4449f7c5510f60b4d8e2542f102e59ea022a1d35bf75ac360f780287c2fa94bcd52957df75a070aabd418083052231f3872491853f04c7119c199cf08193b2b4f902e8cdf29ad7ff932ae69aed866fac0585b3f60ff6786668984281b97a67ffaac225fd70885af786e4ba777fdcfc33912c0879b985ce52935505dd4044682908182e5486ff2a4428e72a3d171e9aa11ceb804df47347b08033405386037ea0b96a1efd26394b7cc9652d0c1f18f5bb12723ffcba88151e446cf40901cc199ea05db5b95f66234c4525c0a87c8982c6e7c5e4bbb08312f4881c71f57834851da701b6435cd5a0fcfe15dcf20bb54cd975b8d4fa35a0acfda1438badef4bea9ac88e0effaad00f20c5b106ba1038c09a0e062d140c2edb34205840c9244feb774991d98d3a1eba1f371962160a8e964fd4fada813c518b1b67fb53aa220ca12bd49de23ec413adcce43b51362d85d049b0fb8aba60d7e0af051fafcc3a4ac69371e2a2a310aa946357c740c5388e38a9a1039e24255fd293731b820567f8ba902e38105484e48c7eee505b9cb06383faf421c1ab79dea65bb22e58e3f9f5fd63b7ecf52ee66b13d8102cd05f313db75df39c1547c61809d8a30648aa4468f3788785ff78d63de65673da1e567e98575fddf38f2c00a3ce4bb349001fe4f64486d742b6735f76c3919a834bece3a7e1acd5b0cf0021f2e8ecf9c96516c002a9f39b442eff3f191758e5034e750be0578f77d38da7143bbea12cbb0040def79c50aa8df91e6a5dcdf38140f06102968a670f9a3e6b16c69e80e1264f28cf7983cbf8e0e52cd10b8fd991420c1116633ea95b434b3dbd22b1b91ffb54872ac7441483a8b0dbb9c18cc981593ebfea8434c8bd8f286228cce093eb6a4f03bfdd4b1dc2f8e303d4a60a8fe4f39e9737a9ec41c4cfbd5f694bf618988b50ed3073187d0ddcffc44651ce498698b9466a699202e96be2f5155ec17c7062be99d9992d6220299995d0210f90cd6d7dc887409c94949fffa8fe949089bb89b76e9ae6c15f67fc58162b2af7e732ed86273e7fa761625780bae6972743c4dad6c1e05258ab16e4bdf5496d6fa24216d5742fb5cdcc65db40d98744376bc5e91c5041158ef7ed2d9ced1d478803c6fd538cda61ce84168f49a9917d4246100336789587b42168c5dd9b30b7b38ca6ce184aee0c42f974cddb1add8e09211d2cefeb5d00fdf7376a42f60dbc53776a16a564cffb61422aa0ccccfa94f5bd11c212530fd5fb8e5a970c5280d2ec17bd5d705982561d1018ad8a1f655fb1628b389db093d8c5c0efb6fe81631708da53e9c18e7300ccd978889750ac26f0c3592664f38120fd13e59c0f039fb9c21943b137e7280242ce65be5dbee5b2c482ac4f72e5b141e0cadca4f4749d8b038eea072677c22ee1c58139a7c1e4d186aa159bc1701d3bd35f4e677677160a6f4770a52a07ffa7b04c372c3c840d534612a89ac129dd233e5552654417077daabb35e43f8af898655cfb7c599d90db834b5cd70d48832ee8a5c6dd029910551eecc95be02a10872499e237c60f8e1994ad560bd4e85d97ffee4d93cd0a33e4d6ee346ba1ebdbb49065cac5115731cc6d80227a67846c5c4c0bd013cf272ac88886fe122314f99a3d0b1888f223291f63cd3dfc864fc3062205f0fdda5b1ae53952b48749b423c28221042ae4bba424c028d5a870fc45b71540723964412238f0722c97e65f87c5f9ba931dfe37c0805dad8382b4f7b4632015c748b22264f032a9863ad6aa8fad83a58a9a046dc09393ac1a3af456faeaabefa2810dee13a31b1d42ded23bd9bf3eccbb315c9bd5d786dfba2f3ef3a11d19d075c0b21cb51ce413702663486a79c7d2e5421e42bba7f75644fd42da71b9e7cd59438274c888c2c628d2fe4bb83a804afd5787e9204798e3b7a01dd07c79223b7ea02d1f7cfdcbe6c42b80049e2b5465b98e7d445e7b509cc740bbe2f15aac7d9367a22eaeb9c0247d85f741e63ae0529b19bd50a47d0ea88a349ac8acadcba5c0f61432dadc9c0a8b5647644c060fa6d3dc18a7d91416567f9462a6b511c9c99b5720e278079c2a4f7b1d30e7b7094ff14f066ed617e612443eeaf62583445451af607f0aac980afb03dc474dc18338b3416827821652bde223eb7a83556e635c891b7774d96de795dbb96757b7b4247839e1aa1514766443b7c2536cd6c32468ca34fc4597f0ca90e2066705e3eb7f8ec38fa7cf799f8052e31c148a4b349477e9c6abcdcf36d15d6b6514f9537f7906f", 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:42 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:43 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xaec7, 0x0) 21:15:43 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x0, &(0x7f00000000c0)) 21:15:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1829.771484][ T4302] binder: 4300:4302 ioctl 4018620d 0 returned -22 21:15:43 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1830.053756][ T4302] binder: 4300:4302 ioctl 4018620d 0 returned -22 21:15:43 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:43 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)) 21:15:44 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x0, &(0x7f00000000c0)) 21:15:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1830.716482][ T4330] binder: 4328:4330 ioctl 4018620d 0 returned -22 21:15:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:15:44 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r3, r3) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x10, 0x0) 21:15:45 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:45 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) 21:15:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:15:45 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r3, r3) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000240)={0x0, 0x0}) [ 1832.030278][ T4357] binder: 4355:4357 ioctl 4018620d 0 returned -22 21:15:45 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r3, r3) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:15:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae42, 0x0) 21:15:46 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:46 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) 21:15:46 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x29, 0x0, &(0x7f0000000300)) 21:15:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 1833.187435][ T4393] binder: 4390:4393 ioctl 4018620d 0 returned -22 21:15:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:47 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x3, 0x0, &(0x7f0000000300)) 21:15:47 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) 21:15:47 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="a809c6fd71de6132f1585bc50f97d8e260ba76b12b4e243547d1f1bc25eb55901f9c16d864a991fbc85da472f0151b5fec7e43bc108140296884e4b413b2c087dc2587699632b192b527550216f5a3738738e36fa68147216a46b6dbeebc799bd5d42235860ada03625d6e12066a1cb467fe76a36d95105f35b6fede18193012e9be491fecd594ee5a1b5d017efecad5218a2e9a2eda875082e80e695456245c03fdc4110c72a0e94908561e076bacd44117c3f307d6ecc6d05cf2cd66840336e9c5f0fccd4f58514dfb7d10616fa1c760aa1021813b8cf7d73436f7ab8c68f16dea32bc26db32c4899f4edd27dadd431e73c8a9cc783ab3f44c5f918da997e71950b9721dc936002d40416a23c16cc2513a516f8c0bfefa2cd7b381e1e2dda8412e1cccdc8d64d1d8c6a9a5ac845094fd0007cebc6a90788354e62663d74e457c93090123b7cd560228b70509220145f50cea6629fd01e931b46b8c2a5fd8e0b3574b45ba2e4aa2338291c19b45525128b5536874f5db2a9aaa029048e81fb07f246b730353aef7b128a72585fcd6f84c50b3638439a17a8452d5bea753805f1cbf9d4d8ec79d46e4f8ec3148c78048708a9368f7f3e2a867cbf0c793f271557fe9228470678e8dbb4f191d34c75fc879df7aac08d496d22e27267b6030f7d56dbd08ce7ab2870c3bc4162bdd46a8f54011693540ba489bbc44f964424dc6ee280198d889bb348af74e87859296b0464a6798063cd1f68d67633e1f774bec4c2d7fbdf8b43d5508c689df94f29401a9819dcb97c00089ff47deb49b9ff41eda603db9a36ccd1e22589a8c3ca7c5b104eef6c59581c10460a3e108808fbdd8a94fbc095c458b2ff2428d797a240342399a29097694de649273243eb6acf0d671ee3e8eb81106f1a3873e1cf3a664470b2fc2e07bf4447d167c96dcbbd84583b31ed3b94a9635cb56a2da54ecb44bc70898002e44cfd6e9078c9ad4dbedc162551c92c01a72d1f74505d6ddf732b0a6d853f68d901980c7c444b92e313764da4986c2ff67819dc3f1ed8c28a4792b0519609c5737a9010309f5492d6b8101a2acf2042376a7e1a391a4136300cfee210805ebf59faf758105e7e91bed0996cc9a0c3a63655595234388e474a08f19124df63da13f3340352c3dfc808b205b856e93b459f273f2c5129e96bcdb767d383d4e28e7861ca681136eb82b1ae53facca54a769e25fb7c232a0e54b2b42fc7f2ae4a02c956743855bcaf60e5b5d02ac8468b7f6e504f8af3c581dcaeb3bfd85d372f60d4b23a27e74f86e647fcaf4a9c39f38c40433c29a803f339ce5ded98a79bf093ae347971efc0b0e677e4c8c2b7a60e445e97219781d8a1d5c6f2040138a0b6ffa35104dfc91ef086625df516025fdbe6990e4c87779ececdfb32e0e5c2699392583a023184743c34acff8fa8b22d8feeae6ff4647e702e17b763201491337866d1b6a8a890a5d95daf6f34043a0f2277065073e023c5500074fb5695e457a87e76c39ec67526aaf60d4d086ef800aff0c1bf1bb4d70f053285ed1c950c580fdea9aacbb8e815798fafe283c6b603fe701704151317861f53dbeb09686f731ecada6b455442996df04c3762e48ada9a298e0d3bd4c4ce4a98a01ef5fab2d21334fb6e58df7f71b0db86adf59d8e6112b99791841c5d60f84ab0c457bf898ba65ce46c638223e6148b42ba2b682d936c9657f6e7689618984898b828ec6c6a4695bd9c7d7abec41c9d30960f6b202c99a280c3b01f183d00bfb0d89265d90e8dd3a5ed561def40fc8a7b7f8b2c17bfa5383bbb96b7aba2197b0ff1abf0223220742b9bce94ed482d6bc6837955766a5f7a0dfed61d08ee13a8c0ca79a1997967fb78ae5ce0247f683323eb490b2e40879ee6809fcdd55de9254daffd69f4f1c6137b51df4c542ba1ebfa95f747543caa473927b4f4d3294ba99caed4944704c3486b1e5c25618617ce347547d3093319551023bd898cd0e0a7f93dc897b3feb4ae1cc2109ea89496534aa5c75ce3fe27a25c3a8aba0968ed7e82ee71797260ff9b1b5209954338f3b9f904cf1464d3f23472dfd886ac323ad73f62822e1667a625fccc3f4d1545798e0e68d2e132e7e9a4f5fd2771304090cb40f06e6ca24f8d6e54bafb976e9f2358bc60233eafdc8ade16d216fe11e27acae8590832b81843436ca53d86885c88816fc8c463a630867f0b5d23506d8f1de46dda94b2062d6a02cb02de9f3bf9748606b5e07c0165600109b525d47ee33d536604d10b74c1e2efd8e8c2144211929624cd48af8784e064837fc64dbc7233594f2aba987acc937bfdd1c045aaac76fb18c0a31ea3698bc998eefe8ffab1968cc99b1b3c3aa1a18018befa32b037c6edf4f1acb09853ef866d2876e7adbdd71c30673ad3a4e3ccc15d17f362cf72f89d5116b5278d60d1069f2065111b629ccfa4f27d2e8773aedc9fc8242b100a22770ea2471cf8a081343338a1040b6fde19acf45385c3462cd5135edca6f2f11c2769469deccdc4f9250fd8d7490856e9d42d042fbcba56297f3a7a544ad4366dbd7513c135d624be9b3a541dc39f20a5114988b520ddfcd6341b88c7e2248a2c5e7a6d45b4ee9fdfeac68b21f6cc4cb9355ea92bb97a8f3915fe5fd315157b7db8d2f120e8cb29fa2eab6fa06dc66b8c9287d0cd7ae1b7f91c005204a385d9ee09ecc87020f2da46a17ac3fec933be5537c582623c881b650467f5df130f62f4ba7802a6498cb2408810a88ccf90995d148de26ba1b26e776ae83c74db135f99c1b237be9f005f3b05e9021cc68c1b2c853c35bb0c3c50b94c14fb55d6972320c144ecd57651a0c8bf005d51b10bf0b21bb4c73a0b0bbd5eae0653d7499891b328cf64414773eaf8791fae08d61fe06f9f15dac0005dcd501487096e2a81fc10d2e8ec288480bc8aac4f1301007d0f0d9d100741d7ad8c5aab677991231918bea38a1c69e818b791cc31430a0822b5456d4ed8d9e7f47c0e24a5c2228095ff95659571d7cb86056d5fe8055df4f790366601db33e9010e6d66d3d8e628ba4efcfc5b5c4463ab6837046933a26232a3ce4be4817a865e5cdd11b459533ac2a8345beda60e7391f81c6eb99dda5e063cc65acf491e1b0b7f921960e2ccced1233f81d1d691e32692d30adaae8a214d56a8d8fc6cc0295ba3cb28e7b957b772f3164545ef445e75b81a523b138b50983dbffa6c50290027f330e17dfa9001e8d2eea71d5187d26efb33cbc68d4b74f76fadf3800a47f63b40ac55910300c849087dc0b5cb024d712ec3ef44fc1a798d1ecbb5d5660ab0082f892a64734e111a9f860c4f67144a882ec08de4087d9c92e7325b97eda23d3e359cb51b0de9fcf93eecbea3dcc5a7bcfd911e0d7d0b2ae78fd3b279c52e8221bf74a7da4c50222b555dbb79d3011a0dbf99a7bae1ac85595f603675108d126071ac528d2115d6ec5ef238b92a3669163e47a39cd6402f777bdd92f5096f8902db0e1abe9ca2ffd983f5995bf031d935059e3d791140832a6dc5c7529f4183ab2faed35cdf52100b2b5095916c9dc303925545fce6828b65c83aebc7b82bcc79dabc82480a268ab38ce837fd02a9a5b2688b5199faca20ab45e76c8979033a30e6561bf83b585ed48131502b3ea9484566469557bdc99ce3758db9f660d73eae2a7ae8ea9ac2b1acbdd000a2aaec6c50d0ee8987c6244a11ccbb3ad389722ff7e6ccc6e1bb42163e461ff1bfe925161836beac5313d409dd68ddf29973ed13650d1218176ba78d26f852bcaea259bf4eac5bc3badb5ccd3128f27db2bbaaae96585b01114c14b59e07f2ea42ef0895ca024ddd958739389c31cc411183123ad52452ed65bf66e62f1ce17314dcd4f59e603af6100c819a900fe9f7649fd932d7a26c72166f4a0ad2275a1113a702fcfbd22418070f4184b3c96735171bf2fc2fd0a4099f50114533aa241891d62bcdc48649761022582cc779e7b7810b2da5155481fc3456c9ab53dac7b9432b6c29dd03e130ba726ca5a58d6a2dccfb67f4fc109f2e4ebf654c9009bad3a94acf4ce6b87ca5fc65fb5aef6ca84c60cbbb046f91b25c7417c80d2cf063c89c5b5bd11b2ba293542d303985ec39a00c07df5066c48c5faf63ec2d025b2983bdabb15e4228ec571421e524abe2ae3822b95251eec7d6c03708fc676cb73541e4d70632dd56e64f099ee8a79cc0539ad7e51c36cb56b768db8f84227778f0702dd72acf386632506a60ea4e65f2df6b48436ef6a503081542603eacffedcb63ca75a9e6e2714a2763b2f4935a325ddf3190b9637e9824b1492cd62de3b602206f5d75192a677440dfef8f98c1014d1921f15f2ea8c2a10802b31231a0bd0333a7b2e462bab391fb0d84e9f40919922a5894bf07598be73e100c8267c10612fb9a5abe6b9741569c04c13adb14cae5728bc5073927a34ac4b022e0aed7d794954f1a616d7ceaf34c574e486343046cfd31af959cc771379adeac7c04cab74c54dea54024b6ad59e40d78f0df9290152ff484da5f88bd11d6f1d6e391e28bf340e30f15b332cd415e865b530e2417f208cb56f6fe29aa2dc80a5ba526fdbcc21373fd0b347d8a030a7caf89618b456b89e40afa8fcc4a8e59cc01fe0146c8bf7e0d91f2ada2f0d6c2e09f3d7fd5e25b8e2f7524404f4d726b738868829b5d2c90ce3a368365cc75ca487265626fa00713a371884a3d8d54d9f046c5aea5a28451e606e6ed9ed3b8b114945da2419aa477d380e5bc051725a86a478fbc1b633ab5c16b81aae97d93fe4d51914631383b3a178d56ee3c4b4af5ec26167e7538e37748b792dbcf61196ae7185fa828bf8f15a06cbf76c1fed727a310e9ac4e1acda0189dc962a0a8b1f21d3b42118224e5095046aa4c3545db989362b590d94d63be6ac3d1c117f5631e3ced31c2fe8ac8641c9e037544e529c5765e687ffe87d09e5427381219cc4d71e54a852b03375cde1b534d61f909d9a27e68dc9bbcb4d91925a5593cb8b891928ba136a9e3f4f0d2275ff3d16589b10dcbed069a370b24305525b80197358c7bfa5c200552fef7f485da7101da2d254149cc94dcdb501024eade40c0b07fedbf4ada952ba1851dcc95450d8bf096e90b2143314d900cfe7eed7d67d83d4f4e995b5eeae9fe69326c568adf00330e2eed1b138f74fc3358aa978ca67145b09c2ad57bbed78fb2521568a7e63b9e60692c2e094a00553bf336d884cf7a2a53f9e4bc8d04e2b5e0452634c7a522fe97e6c20e9f931317a5208f640eb2419d8be1e069de3dda6bbecfff73720cf97462ca13411d9c19aa9320077e7e0b806038317113cec1bb845b75023de9b3ff8351671c2e615f5fe24f8c3b736b77f41f42ede72b7f486f2bc1e4ddae0004d1f9da8f83796f331925e745e3d14d0326aeb6e847692eeb2aa23913ff975c13d1bbc4fd96c7af832db225026bf1810eee8bed37a1f0c33e202246e9f42fe55e0d0b3ec9a9c148ebdbf450f31b5e97e2b08cc769d99a6ec3173feb9b1df411bdb715afbab211b3e186472b0a00a69d0e44cca8c8775f7085ff1503470c2c2fd6d3feaa8a9c61ab1a648a0414481c5f85751f57217db07bbb8b9b09a3c6b7ce40c491500c542c4c391055f0a60691c6728e90928624239fe5d44b52ef381cbaecfe9ce871ce06705cb3034f2618b7165ddc5a9dddb12b90c5c4d939b8c0743df4dd8f476fd491fd6b0fd6520b9da0075c64a8355374477072e174d758ec722da7ad49eaeb8149d10011bc9f805f917fc12cd75cf8bc70bb3231a3ee5b5281e4c2580bd88c5e95d19ee9b282c76816df6e3d9df946e2d15cda86550ef32dcf3ef307f8558fa60acd5efae4fb600fa9891216c59cd1555b07e2dfd0e5332a6b4269583a4dd525b6a0f8fa22642bf043ac1354eca22bb51e41c944753f2f8fdb179ee871f1fa0243f45d614f352831da6ce08753dc59d57706c6cbe997d0a98d29eb861c085252c0f1c94b88998891442f967e13dfe967b317263779886d0c9170d6b58ccf7fa147b314d207a40d76b4b33c32af29035739c547dc7555549ec09d41ec4cc3b9fbba65911af0dc70815533a81f21792c2c5196e020f01b784065452a5afc9f075213ea839a869566cceb246f45392bdb456f87bb6bd08c9ef3d1ae79358fa16039da0cc4ecc4c3f5c9c08d7522903d59902d578d234537950551dadef19f0515754420bcbcd5e13a76893733024ae64cab15533c8abcd9c90e0fae6b0be145205ab49e1108b716d904677e79180f12853e44a1cbab233653c34c577dcf29ea48f354916f7b79879b1110ea061ac5a993fad572247fa8293948173869ebc62d862b1e52d2bb1cdca33f317fda684d75d1fcb18418f92713b77ca2f1e6bc1dde81fb2b949d6d52838903999fc5a36e5536df21cda229d55eb029969b972add39b574f25429c1e089ad70ee561251436e317a7765f13c249493384f9608397f3ddd58689aa7361196221a06d7d3caed82b32af1f9cedefd75dd8377d812fc2dbaf9e1c5bc4abebb06a5461a2f7ac3c36d529bca9fc19e167d946a07b55af46a0011eb8d8867537540c5351cbe4f7736e2795ce5c70221943ecdbc9430d48cfd3677868c2564f92a3d296a8dd0cb4268da019105f6cfc4f702695af939c674e09b712b1fe38b8e2dfaae7a92ba951bb860cd1a502f27b48a6ca55a5013f1fe70555faec8346d097b0838d2c1395f2f78a772d1230122b3a050071e81aad804a622ab98adba8e3b5d5313fb28b656c36e4983903ce4e9029c8213642b2878379558678ac37f3ee16f0d908a867712fb07370f3c7bc9100359b1333a9ad9dc2e59a5c1027c30b179c5bd35d757e6142c095895806f9ec220ce7e92b39add8d508a6d240aee06dbc682faec8246a41ac225310233a70d98c0141fa565e35c1bb7878d591d016bbab26a870ee9adafd48c6d962c63727db9576efd812a8a37094c063e449d47796198c6fafba8e103761db8c87bd71e37814585b930fb08f7165ae3d913db9dcad39488ecdc39e86e5c66b24a2b9e829d06c0b5b300005561ac2410cdd6114b0cec0d95c4e33e9183263ce4bcf064f204cf29d3341648713c453074a8f2376f4409e9ca89647e9cfac2e7273b50e03a6955b171b1165052a68570ada73ce821ac50528a3793345e21433de129534cfce7fed71a9845a7c2e062e9188d522d8f5e843ce00ce074ba753229943ba282968529d89d8d29d8d93e92320a9b53b124fcfc24b457822c435070fbb5c13c55d88030b1253314832ddddee7fbeaa60497c0df7949b18083bbf5bd5f25c8f7c082f297df570dbf4e8fb5e943ca3aee850e29a3cafd910798025e01e6cec969468706585f0e948e7381040fa3c8a2ba319368f64c4c2b0f5b1a73cae9b84664de6b6f68ea021d56d3ff3352c666c425b926f9f07c117af81cbe94d8d3169a2acbe85d3e803c5371876f760013635c438c8a66fde9670cae94194c7eae1a7639f82e3f08f0fc33d45da8636fb372986660d3b5f783ac103ba90ae7b24de17ac18d175950eacf3f91e348402fb38330c81b7169f169ef436b16e1121feb809b6e752eb202349ce72b622f8279e84c3fc4403d14b0873ba178529f3002007b8e2b90960e0f98b6c7cbad54bb9816542d5bffc507719fbeb5cd9b0a30d8d62efb1721cdb7c4393a8cec2b6d98241704e6db63f1347c6d8c9ce5172493e1f2ac5fbb5e13d05a6249804492759fbe9c53f2c4474d52dceb49fb26c5179bc624d4dae6514f2c291a5bf190f2a7363b42671153664a1621d3710106f483c3cfc06c8337a826d0516f6992a58243c7d0ef116b27724549f5f58b380c628ae583c8ebef2361c41bac73a2a807a78b3fa752773e51d7b2f1c391edc86dbccc04ca21fd9e36f90dea86ad46ac20810ab71bd30bc78c1c9a0356f6afa26e33766e8d047083a5ba103093d4adf59bec432652948472c2cdc9289bdcbdf155b86ce269a123ad200eb992d632384201daf914a0afb7b8765d3cf65089d059fc29ce97e9793fa76a58e7c3ee8c28046d908b6d29f1637118a68051f4b4461af196909fb1b842a76961f92b1d19fab665ce55c6c5ec8df000e04b10051ec9cbbc87f2f68b746d8048acd78e03f22e5e7e44a2f683b21f7adf7e222ea572dbec855cf86485511b6ed1e658e1f588d1305f96ba6d1789fb4b1835c1caab4ef0713ab7e055beafb88aa1be88ad98f49a09ab9d669a895c7b9620c6daca57f8aeb1f3222b46196fa8dc1cbd372bebd5af34ac6cf02ecb20f613475de30e6698284ec8ef15e39a227d36836469c883835a2139cda98671f050c40020211e29fad14c99a528b1c47d0abe6af10cc2299800924f0e1bdca5dc498a1df3c4a116725263fb1cc2bb52921a79458da69dd11fc9724d3469fe5b7cba07c2ebb2e92ddddf931b4ea2ab48aa8cc1f637588286819b618d11291a77fde816f7a686a9a248bb730904fe57d7417ab980a6ee4ab8bbd6856901338b0cdf91b9800da4492dc2a7ebf978857bdca2bd36acad25f657dfffb807e2e51c7b8a47f6d2d31ad55f8215c647842a9c5fb3e9b6a93c062c3ce4df3513a0579ee202928cd1ff015588d2ffc0cec3392ccf5e2751e77ff2f3d4a3ea4fa4aa5856987070fc4256d368ff6cd6b6292020cfef27b42dbb7e3e446dc03addc10ca6f6d2bb9d94b8d8ae5fce1ecb6683c4b32d4f6def8425d43bcd91cca2e8f414d4d0144bab6c862df2c05407507e4f1b02d5fe937a70832bee4b5e5d2e72f505c3de9e6e59a685df80fd8480c227a5b3a2f702cbf05fc1d32c46cddbc36b7f6e74f53fcd2d5f9fbf6ff46f3472f119ea0382cbabab1825a1395cdbea9acd4e0219af078ef9e106bdad4ed49905d2af37a92d043c870c0277d192d545c7057c74e5af6d3023d5dd2cff1aaa9dfaf15ea872a6c4be31a158cbfe27ef4a487b84ad5af078dda3fa96f45c0b3b06b08bbd0696d3134f82db29b97d1547a7316e0571b9bceeded906d0099e9866a0906facad0eddb7b3ef52e2ab38d8e1c09d364cd38d4859ea72cc638d48d9836e416585a15265968b463f4331764754581866f3ea5f3c89baf4005af09e93c6308ea60b2f6afe3fbd27b819cd49ee96034c0cdb4f39ce06f4b6c1ce662a44e376abe7620ae95e010ba4ed0affa81480eea20bf55f4a24e76390007fe2e14641af285d10a81039723a7b98409c81999c7fc6c1ff25b6a96f0525b91bea524fdf2e4e85da00bd7c3121f83f6ebd4b7e6e9e0b43171935f4a9be4449f7c5510f60b4d8e2542f102e59ea022a1d35bf75ac360f780287c2fa94bcd52957df75a070aabd418083052231f3872491853f04c7119c199cf08193b2b4f902e8cdf29ad7ff932ae69aed866fac0585b3f60ff6786668984281b97a67ffaac225fd70885af786e4ba777fdcfc33912c0879b985ce52935505dd4044682908182e5486ff2a4428e72a3d171e9aa11ceb804df47347b08033405386037ea0b96a1efd26394b7cc9652d0c1f18f5bb12723ffcba88151e446cf40901cc199ea05db5b95f66234c4525c0a87c8982c6e7c5e4bbb08312f4881c71f57834851da701b6435cd5a0fcfe15dcf20bb54cd975b8d4fa35a0acfda1438badef4bea9ac88e0effaad00f20c5b106ba1038c09a0e062d140c2edb34205840c9244feb774991d98d3a1eba1f371962160a8e964fd4fada813c518b1b67fb53aa220ca12bd49de23ec413adcce43b51362d85d049b0fb8aba60d7e0af051fafcc3a4ac69371e2a2a310aa946357c740c5388e38a9a1039e24255fd293731b820567f8ba902e38105484e48c7eee505b9cb06383faf421c1ab79dea65bb22e58e3f9f5fd63b7ecf52ee66b13d8102cd05f313db75df39c1547c61809d8a30648aa4468f3788785ff78d63de65673da1e567e98575fddf38f2c00a3ce4bb349001fe4f64486d742b6735f76c3919a834bece3a7e1acd5b0cf0021f2e8ecf9c96516c002a9f39b442eff3f191758e5034e750be0578f77d38da7143bbea12cbb0040def79c50aa8df91e6a5dcdf38140f06102968a670f9a3e6b16c69e80e1264f28cf7983cbf8e0e52cd10b8fd991420c1116633ea95b434b3dbd22b1b91ffb54872ac7441483a8b0dbb9c18cc981593ebfea8434c8bd8f286228cce093eb6a4f03bfdd4b1dc2f8e303d4a60a8fe4f39e9737a9ec41c4cfbd5f694bf618988b50ed3073187d0ddcffc44651ce498698b9466a699202e96be2f5155ec17c7062be99d9992d6220299995d0210f90cd6d7dc887409c94949fffa8fe949089bb89b76e9ae6c15f67fc58162b2af7e732ed86273e7fa761625780bae6972743c4dad6c1e05258ab16e4bdf5496d6fa24216d5742fb5cdcc65db40d98744376bc5e91c5041158ef7ed2d9ced1d478803c6fd538cda61ce84168f49a9917d4246100336789587b42168c5dd9b30b7b38ca6ce184aee0c42f974cddb1add8e09211d2cefeb5d00fdf7376a42f60dbc53776a16a564cffb61422aa0ccccfa94f5bd11c212530fd5fb8e5a970c5280d2ec17bd5d705982561d1018ad8a1f655fb1628b389db093d8c5c0efb6fe81631708da53e9c18e7300ccd978889750ac26f0c3592664f38120fd13e59c0f039fb9c21943b137e7280242ce65be5dbee5b2c482ac4f72e5b141e0cadca4f4749d8b038eea072677c22ee1c58139a7c1e4d186aa159bc1701d3bd35f4e677677160a6f4770a52a07ffa7b04c372c3c840d534612a89ac129dd233e5552654417077daabb35e43f8af898655cfb7c599d90db834b5cd70d48832ee8a5c6dd029910551eecc95be02a10872499e237c60f8e1994ad560bd4e85d97ffee4d93cd0a33e4d6ee346ba1ebdbb49065cac5115731cc6d80227a67846c5c4c0bd013cf272ac88886fe122314f99a3d0b1888f223291f63cd3dfc864fc3062205f0fdda5b1ae53952b48749b423c28221042ae4bba424c028d5a870fc45b71540723964412238f0722c97e65f87c5f9ba931dfe37c0805dad8382b4f7b4632015c748b22264f032a9863ad6aa8fad83a58a9a046dc09393ac1a3af456faeaabefa2810dee13a31b1d42ded23bd9bf3eccbb315c9bd5d786dfba2f3ef3a11d19d075c0b21cb51ce413702663486a79c7d2e5421e42bba7f75644fd42da71b9e7cd59438274c888c2c628d2fe4bb83a804afd5787e9204798e3b7a01dd07c79223b7ea02d1f7cfdcbe6c42b80049e2b5465b98e7d445e7b509cc740bbe2f15aac7d9367a22eaeb9c0247d85f741e63ae0529b19bd50a47d0ea88a349ac8acadcba5c0f61432dadc9c0a8b5647644c060fa6d3dc18a7d91416567f9462a6b511c9c99b5720e278079c2a4f7b1d30e7b7094ff14f066ed617e612443eeaf62583445451af607f0aac980afb03dc474dc18338b3416827821652bde223eb7a83556e635c891b7774d96de795dbb96757b7b4247839e1aa1514766443b7c2536cd6c32468ca34fc4597f0ca90e2066705e3eb7f8ec38fa7cf799f8052e31c148a4b349477e9c6abcdcf36d15d6b6514f9537f7906f", 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:47 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894c, 0x0) [ 1834.345742][ T4418] binder: 4416:4418 ioctl 4018620d 0 returned -22 21:15:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 21:15:48 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:48 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:48 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x27}}) 21:15:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 1835.187884][ T4434] binder: 4432:4434 ioctl 4018620d 0 returned -22 [ 1835.408301][ T4443] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:49 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:49 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x30, 0x0, &(0x7f0000000300)) 21:15:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:49 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) 21:15:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 1835.929134][ T4449] binder: 4447:4449 ioctl 4018620d 0 returned -22 21:15:49 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:49 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1836.182626][ T4458] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 21:15:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:50 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:50 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x80006) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) [ 1836.759902][ T4467] binder: 4464:4467 ioctl 4018620d 0 returned -22 21:15:50 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:50 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 1837.040680][ T4474] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:50 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1837.462887][ T4483] binder: 4481:4483 ioctl 4018620d 0 returned -22 21:15:51 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:51 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:51 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000}]) 21:15:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 21:15:51 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 1837.886927][ T4496] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:51 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:51 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 21:15:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) 21:15:52 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000}]) [ 1838.776881][ T4518] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:52 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(0xffffffffffffffff, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:52 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) 21:15:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:53 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:53 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(0xffffffffffffffff, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:53 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000}]) [ 1839.829565][ T4546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8912, 0x0) 21:15:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) 21:15:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:54 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(0xffffffffffffffff, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 21:15:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:15:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:54 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000}]) 21:15:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:15:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) 21:15:54 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:55 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000}]) 21:15:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:15:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8917, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:55 executing program 1: syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:55 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:56 executing program 1: syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:15:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003500)={&(0x7f00000024c0), 0xc, &(0x7f00000034c0)={0x0}}, 0x0) 21:15:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:56 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000}]) 21:15:56 executing program 1: syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:56 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1843.407333][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc0189436, &(0x7f0000000240)={0x0, 0x0}) 21:15:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:15:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:57 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:57 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) 21:15:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:15:57 executing program 4: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1844.220323][ T4661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:15:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:58 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) 21:15:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:15:58 executing program 4: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) [ 1845.252565][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:15:59 executing program 1: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:15:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:15:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(r2) sendfile(r2, r3, 0x0, 0x80006) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) [ 1845.929274][ T4700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:15:59 executing program 4: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:15:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 21:15:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) [ 1846.719707][ T4724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:16:00 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x1c}}) 21:16:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:16:01 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) [ 1847.640190][ T4745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:01 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:01 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 21:16:01 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:01 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) [ 1848.432190][ T4769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:02 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x0, @local}, @sco, @l2tp={0x2, 0x0, @local}}) 21:16:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x203}, 0x14}}, 0x0) 21:16:02 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:02 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:02 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) [ 1849.189563][ T4792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:02 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) 21:16:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x203}, 0x14}}, 0x0) 21:16:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:03 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:03 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) [ 1850.032518][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x203}, 0x14}}, 0x0) 21:16:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:04 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:04 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xd, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 21:16:04 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) [ 1850.730022][ T4835] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:04 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:04 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) [ 1851.537497][ T4857] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:05 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:05 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) 21:16:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) [ 1852.302840][ T4877] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:06 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 21:16:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @private=0xa010101}, 0xc) 21:16:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:06 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:06 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x3c89}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 1853.118119][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 21:16:07 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:07 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:07 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x203, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 21:16:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) [ 1854.134505][ T4931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:07 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:07 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4008ae61, 0x0) 21:16:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 21:16:08 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:08 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:08 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private}, 0xc) 21:16:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x18, 0x0, &(0x7f0000000300)) [ 1855.119242][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:09 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:09 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private}, 0xc) 21:16:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x600, 0x0, 0x0, 0x0) 21:16:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:09 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private}, 0xc) 21:16:09 executing program 5: socketpair(0x11, 0x2, 0x0, &(0x7f0000000140)) 21:16:10 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:10 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000000002"]}) 21:16:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:10 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000009c0)={'vcan0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="03"]}) 21:16:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020aea5, 0x0) 21:16:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 21:16:10 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:11 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8901, &(0x7f0000000180)={0xfdfdffff, @in={0x2, 0x0, @local}, @sco, @l2={0x1f, 0x0, @none}}) 21:16:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 21:16:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000040)=@ethtool_stats}) 21:16:11 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:11 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, &(0x7f0000000300)) 21:16:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 21:16:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)) 21:16:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:12 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:12 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3) 21:16:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) 21:16:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, r2, 0x5}) 21:16:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) 21:16:13 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) 21:16:13 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020940d, &(0x7f0000000240)={0x0, 0x0}) 21:16:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'geneve0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="03"]}) 21:16:13 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) 21:16:14 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00'}) 21:16:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="9a", 0x1}, {&(0x7f0000000340)='K', 0x1}], 0x2}}, {{&(0x7f00000005c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c, 0x0}}], 0x2, 0xc020) 21:16:14 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1860.799582][ T5143] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[]}) 21:16:14 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000180)) 21:16:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc048ae65, 0x0) 21:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[]}) 21:16:15 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:15 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) [ 1861.711648][ T5167] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x40) 21:16:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) 21:16:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[]}) 21:16:15 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:16 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2}}) 21:16:16 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmdt(0x0) 21:16:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB]}) [ 1862.619390][ T5192] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:16 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x21}}) 21:16:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @private}, 0xc) 21:16:16 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB]}) 21:16:17 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) [ 1863.536356][ T5212] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 21:16:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x3b}}) 21:16:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB]}) 21:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:17 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:17 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:17 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 21:16:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0xbb0e9d98891e027a}) 21:16:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff"]}) [ 1864.509402][ T5237] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:18 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:18 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 21:16:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x10}]}}, &(0x7f0000000240)=""/235, 0x26, 0xeb, 0x1}, 0x20) 21:16:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff"]}) 21:16:19 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:19 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1865.554059][ T5269] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:19 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x8906, 0x0) 21:16:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff"]}) 21:16:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 21:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:19 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:19 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x23, 0x0, &(0x7f0000000300)) [ 1866.390501][ T5291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:20 executing program 5: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, &(0x7f0000000000)) 21:16:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000"]}) 21:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:20 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:20 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000280), 0x4) 21:16:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a3, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:16:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000"]}) [ 1867.279311][ T5307] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:21 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:21 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x72, 0x0, 0x0, 0x0, 0x0) 21:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x2a}}) 21:16:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:16:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000"]}) 21:16:21 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1868.019639][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:21 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:16:21 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 21:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000900)) 21:16:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000"]}) 21:16:22 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:22 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1868.787233][ T5338] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0) 21:16:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000"]}) 21:16:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc008ae67, &(0x7f0000000240)={0x0, 0x0}) 21:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:22 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:23 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:16:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4008ae48, 0x0) 21:16:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff00000900008000000000"]}) 21:16:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd}) [ 1869.799194][ T5367] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:23 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 21:16:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff000009000080000000000000"]}) 21:16:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_eeprom={0x25}}) 21:16:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891f, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) 21:16:24 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) [ 1870.767045][ T5398] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff000009000080000000000000"]}) 21:16:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001040)={0x4, 0x2, 0x8000}) 21:16:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/235, 0xeb}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x6, @loopback}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)=';', 0x1}, {&(0x7f0000000080)}], 0x2}}, {{&(0x7f0000000680)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000006c0)='\v', 0x1}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000b00)=[@flowinfo={{0x14}}, @hopopts={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@padn]}}}], 0x38}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001800)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) 21:16:24 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'batadv_slave_0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x0, 0x1000000000000}}) 21:16:25 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r3, r3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3d0000000800000000000000ffff000009000080000000000000"]}) [ 1871.753687][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @local}, @sco, @l2={0x1f, 0x0, @none}}) 21:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000300)) 21:16:25 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000080)="78c1f788ec530265bba2dc140407b99eaeb20a8db59b", 0x16}, {&(0x7f00000000c0)="192b27cc92aeeaa15fca10b069975ab696682fd571e37b25714506c3b2b94bd534a681205674be45b4adbfd4bd18f1ec0630ba6f1e977c56a40f2c5455f4219dc47239bf73bc201f63071b8aa53f79b23a8e5df028edf10935b921319e5294a689ac9471be083dba4d8d4ea45f94cdf92edd", 0x72}, {&(0x7f0000000140)="6a542b2d902164feb93072dae812c12842a9405a5cfdd60f52cd6a49e6718b7050dd94e0c47e859b5cb420c314f98917a8ebb58a97db9f50bd238583fdecc98e51c06335ed9dcc3b6cbac684f514cb7e2bbe35cf", 0xfffffffffffffd29}, {&(0x7f00000001c0)="90733572e868d2d45c660102507fc58a0d7a2ffac9950a7ab40837c77644d70a13367c36c822001daf64cd6111ade3a1a982465d8cfd42a4d219dd0d42b732f010fadee1dc0461c10d7714b182c14c99aac8bfdb33b043050e98a6a1047de41a709539e4c2a01f822bae54029499bb6686857e3706d4ec10025def239245390a787559bb391d004a6a8bb11098ba005482ff07054908d788f547fa3a360f59bb5d994bdc842d564fa1a4aa3aa46ddc1693c66189fae43c48d897f9ee24ba6f", 0xbf}, {&(0x7f0000000280)="ed61cc02976ff2cb0f772f0f61ce504aa1cc247d453577597e9160dacd343a9dd56dc8c2e64d7d5d72d19eda271d0a6d37cabc5d40d794222fa703674fe0de7b52076189c777c4688e1866b7cf73116f5ee2874cc906e4199522746bba7d5a5f9fc2ad22f9c1862872af527b6ea033718b4f7fb833b161a7a00a44573269364a41a838c05f1776adef61ba9ab5efd16d0a9157203cf6acf11b", 0x99}, {&(0x7f0000000340)="a983f61fb65239d83d95aa804485991183fb8246b248ff7f77cba4412616f91c860e68eb4021141ad9f4caa00ba22e1ffbd4a7d0e872e761e992f9552c11dba86a6aecdcb69d6d78dd496c716d6c803dd20c74a96f8083064dacc460e95fe76441992f85b268bab5535ae054ee9efd500ec5464237b2d406c10a2b13ea727e4a9a060ef6f86f06b76fb94dcbd669f4be070c1b", 0x93}, {&(0x7f0000000400)="2af2e38fa617e26a98bbdb29502a390672c24dfc6ebc7a0d6f9db7061bba3952ac7b4f40a8600fce6e6c34f1d9193450ca8a2092c5484f5d1fdd245e09d619849b22fbc6fb66242aca4c2aa03ddbb9345e946a989517969e24e80ee4a47b259c6bc2bbe0e558eabfbfb3ca22ca56afdf15c4f0513ea5636532e81eb6fd25197fe84353f29ee147bac9701c9632ff7c7b6b009d272f71a238c4ddbe2f90af48cd1e57bfac0da7ae4e5961100ccf86b1c5774822f70a0e06afd228421432abb7e94eb17eece1131271e9645743a2ad8e3120a388795a1962", 0xd7}], 0x7}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)="95dc23822d7f9f1c0615fc4178dd40640148060d784e7964a56634120480418533515287d874d26ff0b2b434", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="9fc7deeed89f081b065443eb420bb8d73fddcf3ab1370f908dce5cebfb5ff983ec338ca6e744565477f76cc0d5ee18719161950988e01470db640697d1e875f611f12b4998ab1c408e2a842972b0586a591da13a16ebd13ac87537385b0cbbffc305f49541afbfac42f19896cf613e14b84519f0d5cae360241c7545f45999a8ec7a6d167f8ea825f6bc80115a62fd791b59eab83048c633a3e06b20c5581fc029437bab3833e8fef0c2", 0xaa}], 0x1, &(0x7f0000000740)=[@hoplimit={{0x14}}, @hopopts={{0x1028, 0x29, 0x36, {0x0, 0x201, '\x00', [@generic={0x0, 0x1000, "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"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo]}}}], 0x1040}}, {{&(0x7f00000017c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001800)="099c67ac9c819f772c69893d7bb36df256", 0x11}, {&(0x7f0000002240)="06650da5c1c88cfdb50856e6bb3c48ef61decdf60f2447d152ce280720d9ef34bc73c3faee0d0ef82671614491dda23c2d14748d97bb8eb5afaf3129e5f904187d875acc7f58b8d6f981567f58f9096200749048948ecf1761dae50f8087854e0ce7d8b35790db13bd4de668f96ac29f200c18260f8902aa271f696b52b5a5eb343d6080f80f67109ec47e957c379aee81b5fc8abeb897646fec7fceb0f0dc8c1d58978371f88d956f03c4c93cd94f2778ec2658798e3df6ae8b22f99e53d91a69e9f00dfa19917c7702874d96b53e3e9f1adca653a629a12b5c0779fe75e241be4ec8cffe70c5006cdb3c01cb", 0xed}], 0x2}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="0811c8e53dceb15189dd7214650c3afd2a8cacffe53822c37d311e0630", 0x1d}, {&(0x7f00000019c0)="db729161e35742084c87c34707b32c8d08f48d2286dcde1021221fa1071b7f9b8071f9521941525c7b5fd20d60ed8eb5657d82c0bac458348973038834933d1b5fb6c1add24db9b93846", 0x4a}, {&(0x7f0000001a40)="4c85710d31c3a6ccecd63f0480e3d9ea725a3f9c225f5de7f9856852a76c0d9d131b1f4e243cc2a99a4c38887bfb3d17eacd9d93cf68cf7195a25f1105604d7f2e178b9b20292f1aeff3f1af3796de00e27a26c3b3d7b71a7b7c41db91ff7440f349ec4763f8e1462d8ea41db811f4992701473fd9e95b662bd4f1f55756e09f01521b23071bb10bc863459543ab1b93804550344ac0f876ec6b913d2773fbfb7b910a1a5630ad824b64acec8648b8e8c4a2e95770fa321fd4daa216848b2407646caa07c78a3236368f", 0xca}, {&(0x7f0000001b40)="41583814d3128edd773228af85f30e5cf14f5c272de9b514746d154a525cf8e30b6e8f0064ba1eefbbfd7327b7af0ab3600aee4239fee4ebb476b6283474f58136499f9742959554031675f5f4f618f3b5a04cad6c494cab1b85ce493d1645f5e39a2211a1b3daddd9ec72dac431318d", 0x70}, {&(0x7f0000001bc0)="71b64cf54ba66251c814fa591a6760c20f77ab196a378b09fffe73783586a3c6d895d2b69ec7940500e375ab9d302080581959754a0e1f00b098e159c3a44531f9a8fa56a6e98720e5c151288f46d8959c8b10d3ba6c8a9e8a96133571d0c8732b04b749c1e030fc3bb5a86b8d4eebe821d40b98584ddf38a54502ffc5a0b2a1d8d19d02e8ec7234a722705754c32b3ee40bbf503069b68f3db08e2198b200a700e3d18253dee30e64b150d0bc65fe28e04435fa7df9b23cc79bdc3a6bf7717bc9fe8f46cb", 0xc5}, {&(0x7f0000001cc0)="96eb34e128b990242a8d1570754c97cef93180fcb9c83dfccb254a8a237689f2530515193894bcbbcc49edbb46fd34c621a5b8761703", 0x36}, {&(0x7f0000001d00)="c606305d9e94b1cb0e4da53515c80c028d1602b6f878b00a824d4040db32ac478184dddd100477e03e02f45c0e7015211832f515fbaf8d8b68361d18abce339c77687db20cb7ba4de8215c5500bb2ffe973bcabf755b1cc244d25689dcc506ad272631fdea8679917b464acc50d1abed51c76b2079faab787d913a6a018edf320e1b6f9139940cc74962bb11b939d9a31f1076eb44539d099817c8ae34622c91ff2fc76be2747ef28346d1cdb44581ed", 0xb0}, {&(0x7f0000001dc0)="424c55d07af6ef7744b8607abaeb5f8c2b2a7bfda07388628223df36", 0x1c}, {&(0x7f0000001e00)="ff40fd0d75103801b96c4dc1f590d494ddfaa783ce5da5e7f13e120051cfdeb32801569f39774713720b87f1e4e8b6fe022fb4137f187d9e9b82869244ed6ae5f6ec5b12bb697a19000540040a46007101b72cafa0e4", 0x56}], 0x9}}, {{&(0x7f0000001f40)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f80)="a2ae2b01b3cddfd44f5245579e7f927e7f1aaeefcec62ce64a8c867021c62431bc9eedbee99ed47d5840916988f4867805f47bd07016aa40c0086532b47ffb8eee292e6a8a82e6f88b83657eb13a44a5a8a3255f56eb33819e76b7607264395f5ac1a60e86cafeb8a2d3e933f581ff1505b9b7a295277185a49adafc7348918622627cc630a1824ec584b8da0a622142a3734d0234c5b808bcb53fecb332b4978090557c978ca5005024c546b037c17eecc780a33eba0135a1600706e56404ebc818d0d709afd2281eb07b", 0xcb}], 0x1}}], 0x6, 0x80c0) 21:16:26 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r3, r3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 21:16:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8955, 0x0) 21:16:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xae44, 0x0) [ 1872.829952][ T5451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:26 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r3, r3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) 21:16:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:26 executing program 5: set_tid_address(&(0x7f0000004c00)) time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00d37ee74007fbb77661281903007bb430201373264bb6b8c4f156288e89367912c266132afd78c38676a2de1452a9168071c3"]) 21:16:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54, {0x6000}}, "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", "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"}) 21:16:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21:16:27 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1873.744547][ T5487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1874.034772][ T5503] loop5: detected capacity change from 0 to 131456 21:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1874.250707][ T5503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000c01c, mo2=0006] 21:16:27 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = epoll_create(0x9) dup(r0) r1 = syz_io_uring_setup(0x3eda, &(0x7f0000000200), &(0x7f0000001000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:16:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) [ 1874.336503][ T5503] System zones: 1-2, 19-19, 35-38, 46-46 [ 1874.345666][ T5503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1874.356922][ T5503] ext4 filesystem being mounted at /root/syzkaller-testdir402218067/syzkaller.G60Fkh/358/file0 supports timestamps until 2038 (0x7fffffff) 21:16:28 executing program 2: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) umount2(&(0x7f0000000600)='./file0\x00', 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) 21:16:28 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 1874.931776][ T5536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:28 executing program 3: poll(&(0x7f0000000100), 0x1, 0x0) 21:16:28 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000380)=""/225, 0xfffffffffffffc3a}], 0x4, 0x0, 0x0) 21:16:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:29 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1875.485915][ T5556] loop5: detected capacity change from 0 to 16 [ 1875.594213][ T24] audit: type=1800 audit(1638911789.214:856): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15266 res=0 errno=0 21:16:29 executing program 3: setrlimit(0x8, &(0x7f0000000040)={0x30, 0x95}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x7) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)="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", 0x6c7}], 0x1) 21:16:29 executing program 1: faccessat(0xffffffffffffffff, 0x0, 0x0) [ 1875.871938][ T24] audit: type=1800 audit(1638911789.494:857): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15266 res=0 errno=0 21:16:29 executing program 5: setrlimit(0x8, &(0x7f0000000040)={0x30, 0x95}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000180)=0x8) writev(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)="c8bf5999bf353d754384976259e7096efbedaceeda5f34ad3c0e4da7295bd612c14d7f45945d3bb25d0203", 0x2b}], 0x1) [ 1876.049909][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:29 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x40000400000002c2, 0x0) select(0x40, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={0xff}, 0x0) write(r0, &(0x7f0000000240)='y', 0x1) 21:16:29 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(0xffffffffffffffff, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:30 executing program 3: setrlimit(0x8, &(0x7f0000000000)={0x47, 0x93}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="3fbe1a71f80345c095fbe3ffa367fc4eea05cfaa4ce48c38b479aa6918b758bd30c273e9de277e75fba496002f35517c6a2595361b5a40623e0f35278f981535ed0bbd88db2e240a", 0x48}], 0x1) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000000440), 0xff52}], 0x1) poll(&(0x7f0000000100)=[{r0, 0x7}], 0x1, 0x0) 21:16:30 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x8007, 0x828a6) r0 = open(&(0x7f0000000400)='./bus\x00', 0x41, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000900)="000000186004008b0007000000000000000200040000000028000001fee25eff0061209a781ef1b1e4f561b2", 0x2c}], 0x1) 21:16:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000240)=""/228, 0xe4) 21:16:30 executing program 2: r0 = socket$inet6(0x2, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) 21:16:30 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(0xffffffffffffffff, 0x74, 0x0, 0x0, 0x0, 0x0) [ 1876.904768][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 1876.911400][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 1876.940635][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:30 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x1, 0x4, &(0x7f0000000080)=""/23) 21:16:31 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0xfffffffffffffd30) 21:16:31 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) 21:16:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:31 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(0xffffffffffffffff, 0x74, 0x0, 0x0, 0x0, 0x0) 21:16:31 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 21:16:31 executing program 5: mkdir(&(0x7f0000010440)='./file0\x00', 0xb0) 21:16:31 executing program 2: syz_open_dev$evdev(&(0x7f00000006c0), 0x7fffffff, 0x0) 21:16:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1878.036046][ T5649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x200040) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 21:16:32 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_open(&(0x7f0000000040)='-\x00', 0x40, 0x8, &(0x7f0000000080)={0xff, 0x3, 0x7, 0x9f8}) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r1, 0x0) 21:16:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:32 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:16:32 executing program 2: r0 = socket(0x11, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 21:16:32 executing program 1: clock_nanosleep(0x7, 0x0, &(0x7f00000000c0), 0x0) [ 1878.876430][T26475] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1878.954639][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:32 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) [ 1879.247795][T26475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.259474][T26475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.269771][T26475] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1879.283149][T26475] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1879.292667][T26475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:16:33 executing program 2: getitimer(0x1, &(0x7f0000000080)) [ 1879.537848][T26475] usb 4-1: config 0 descriptor?? 21:16:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r0, 0x0, 0x0) 21:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:33 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1880.030279][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.041513][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.049160][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.056276][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.063256][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.070375][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.077494][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.084462][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.091580][T26475] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 1880.169425][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1880.403979][T26475] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1882.840704][T26475] usb 4-1: USB disconnect, device number 18 21:16:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:16:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, 0x0, 0x12102) 21:16:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') write$P9_RXATTRWALK(r0, 0x0, 0x0) 21:16:37 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0xfffffffffffffda5) 21:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:37 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000d00)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1883.887060][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:37 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSYMLINK(r0, 0x0, 0x0) 21:16:37 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x280500, 0x0) 21:16:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x0) 21:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:38 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x539001, 0x0) 21:16:38 executing program 5: pipe(&(0x7f0000001440)={0xffffffffffffffff}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) [ 1884.936434][T29448] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1885.112291][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1885.298905][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.310375][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.320658][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1885.334347][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1885.343752][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.803726][T29448] usb 4-1: config 0 descriptor?? [ 1886.303130][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.310341][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.317641][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.324621][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.331706][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.338917][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.346022][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.352991][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.360232][T29448] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 1886.440344][T29448] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1888.917462][T29448] usb 4-1: USB disconnect, device number 20 21:16:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:16:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 21:16:43 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20) 21:16:43 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 21:16:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 21:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1889.786940][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:43 executing program 5: mq_open(&(0x7f0000000000)='\xc8e\xf5\xddh6\x17l\xa9RJ\xa2\xa0\x9fe\xe3\x02\xb1\x7f\xe1\x8f-\x00\x06X\xb0\x05\x00\xb4\x17r\xa8\x89T\x06\x00\x00\x00\xb7\xabWg\xf7\xa6,\tErf\xdc\xec`\v^\x87\xdd', 0x40, 0x10c, 0x0) 21:16:43 executing program 4: pipe2$9p(0x0, 0x8000) 21:16:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0xfffffffffffffe37) 21:16:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 21:16:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1890.675750][ T5697] usb 4-1: new high-speed USB device number 21 using dummy_hcd 21:16:44 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff}) write$tun(r0, 0x0, 0xfffffffffffffd1b) [ 1890.938101][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1891.048199][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.059427][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.069622][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1891.082871][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1891.092314][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.466607][ T5697] usb 4-1: config 0 descriptor?? [ 1891.972242][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1891.979858][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1891.987134][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1891.994114][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1892.001375][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1892.008508][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1892.019814][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1892.027211][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1892.034172][ T5697] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 1892.102256][ T5697] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1894.628150][ T5697] usb 4-1: USB disconnect, device number 21 21:16:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:16:48 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 21:16:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:16:48 executing program 1: r0 = fork() tgkill(r0, r0, 0x2f) wait4(0x0, 0x0, 0x20000000, 0x0) 21:16:48 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1895.454609][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0xffffffffffffff9b}]}, 0x34}}, 0x0) 21:16:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:49 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1) [ 1896.136137][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:16:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 1896.286430][ T5697] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1896.287362][ T5931] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 21:16:50 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) [ 1896.287669][ T5931] CPU: 1 PID: 5931 Comm: syz-executor.5 Tainted: G W 5.16.0-rc3-syzkaller #0 [ 1896.287802][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1896.287877][ T5931] Call Trace: [ 1896.287917][ T5931] [ 1896.287964][ T5931] dump_stack_lvl+0x1ff/0x28e [ 1896.288129][ T5931] dump_stack+0x25/0x28 [ 1896.288254][ T5931] warn_alloc+0x4cd/0x680 [ 1896.288464][ T5931] ? kmsan_get_metadata+0xa4/0x120 [ 1896.288669][ T5931] __vmalloc_node_range+0x12bc/0x17f0 [ 1896.288906][ T5931] __vmalloc+0xf8/0x110 [ 1896.289055][ T5931] ? snd_dma_vmalloc_alloc+0xbc/0xe0 21:16:50 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x61) listen(r0, 0x8) accept4(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x0, 0x0) [ 1896.289262][ T5931] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 1896.289408][ T5931] snd_dma_vmalloc_alloc+0xbc/0xe0 [ 1896.289547][ T5931] ? snd_dma_iram_mmap+0x220/0x220 [ 1896.289689][ T5931] snd_dma_alloc_dir_pages+0x2da/0x530 [ 1896.289855][ T5931] snd_pcm_lib_malloc_pages+0x7b5/0xe00 [ 1896.290042][ T5931] snd_pcm_hw_params+0xfdb/0x2880 [ 1896.290215][ T5931] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1896.290434][ T5931] snd_pcm_kernel_ioctl+0x21a/0xfe0 [ 1896.290605][ T5931] snd_pcm_oss_change_params_locked+0x5c88/0x8210 [ 1896.290930][ T5931] snd_pcm_oss_read+0x50d/0x1d60 [ 1896.291145][ T5931] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 1896.291310][ T5931] vfs_read+0x6c8/0x1980 [ 1896.291489][ T5931] ? kmsan_get_metadata+0xa4/0x120 [ 1896.291657][ T5931] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1896.291840][ T5931] ksys_read+0x28c/0x520 [ 1896.292005][ T5931] __ia32_sys_read+0xdb/0x120 [ 1896.292162][ T5931] __do_fast_syscall_32+0x96/0xf0 [ 1896.292315][ T5931] do_fast_syscall_32+0x34/0x70 [ 1896.292454][ T5931] do_SYSENTER_32+0x1b/0x20 [ 1896.292588][ T5931] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1896.292744][ T5931] RIP: 0023:0xf6e67549 [ 1896.292827][ T5931] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1896.292944][ T5931] RSP: 002b:00000000f5e405fc EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1896.293062][ T5931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 1896.293149][ T5931] RDX: 0000000000000096 RSI: 0000000000000000 RDI: 0000000000000000 [ 1896.293226][ T5931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1896.293301][ T5931] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1896.293377][ T5931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1896.293487][ T5931] [ 1896.293707][ T5931] Mem-Info: [ 1896.293749][ T5931] active_anon:415 inactive_anon:137587 isolated_anon:0 [ 1896.293749][ T5931] active_file:5686 inactive_file:61391 isolated_file:0 [ 1896.293749][ T5931] unevictable:770 dirty:44 writeback:0 [ 1896.293749][ T5931] slab_reclaimable:9354 slab_unreclaimable:46564 [ 1896.293749][ T5931] mapped:21117 shmem:8015 pagetables:2651 bounce:0 [ 1896.293749][ T5931] kernel_misc_reclaimable:0 [ 1896.293749][ T5931] free:236006 free_pcp:23189 free_cma:0 [ 1896.294054][ T5931] Node 0 active_anon:1632kB inactive_anon:527964kB active_file:22488kB inactive_file:242532kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:76996kB dirty:140kB writeback:0kB shmem:30416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB kernel_stack:4976kB pagetables:7688kB all_unreclaimable? no [ 1896.294365][ T5931] Node 1 active_anon:28kB inactive_anon:22384kB active_file:256kB inactive_file:3032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7472kB dirty:36kB writeback:0kB shmem:1644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:1120kB pagetables:2916kB all_unreclaimable? no [ 1896.294666][ T5931] Node 0 DMA free:4096kB boost:0kB min:156kB low:192kB high:228kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1896.294993][ T5931] lowmem_reserve[]: 0 905 1218 1218 1218 [ 1896.295690][ T5931] Node 0 DMA32 free:35860kB boost:0kB min:36008kB low:45008kB high:54008kB reserved_highatomic:0KB active_anon:560kB inactive_anon:457032kB active_file:772kB inactive_file:201044kB unevictable:0kB writepending:108kB present:3129332kB managed:932648kB mlocked:0kB bounce:0kB free_pcp:37968kB local_pcp:18152kB free_cma:0kB [ 1896.296047][ T5931] lowmem_reserve[]: 0 0 313 313 313 [ 1896.296257][ T5931] Node 0 Normal free:15564kB boost:0kB min:12452kB low:15564kB high:18676kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:70932kB active_file:21716kB inactive_file:41488kB unevictable:1544kB writepending:32kB present:1048576kB managed:320516kB mlocked:8kB bounce:0kB free_pcp:6656kB local_pcp:4808kB free_cma:0kB [ 1896.296620][ T5931] lowmem_reserve[]: 0 0 0 0 0 [ 1896.296829][ T5931] Node 1 Normal free:888504kB boost:0kB min:41488kB low:51860kB high:62232kB reserved_highatomic:0KB active_anon:28kB inactive_anon:22384kB active_file:256kB inactive_file:3032kB unevictable:1536kB writepending:36kB present:4194304kB managed:1067980kB mlocked:0kB bounce:0kB free_pcp:48128kB local_pcp:24624kB free_cma:0kB [ 1896.297181][ T5931] lowmem_reserve[]: 0 0 0 0 0 [ 1896.297382][ T5931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1896.298004][ T5931] Node 0 DMA32: 1*4kB (M) 314*8kB (ME) 168*16kB (UM) 178*32kB (UME) 46*64kB (UME) 8*128kB (UM) 8*256kB (ME) 9*512kB (UME) 2*1024kB (ME) 6*2048kB (UM) 0*4096kB = 35860kB [ 1896.298959][ T5931] Node 0 Normal: 83*4kB (UME) 420*8kB (UME) 124*16kB (UME) 69*32kB (UME) 28*64kB (UME) 8*128kB (UE) 5*256kB (UE) 7*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 15564kB [ 1896.299868][ T5931] Node 1 Normal: 244*4kB (ME) 109*8kB (ME) 40*16kB (UME) 16*32kB (ME) 10*64kB (UME) 5*128kB (ME) 2*256kB (UE) 2*512kB (U) 2*1024kB (U) 2*2048kB (U) 214*4096kB (UM) = 888504kB [ 1896.300860][ T5931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.300956][ T5931] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=3 hugepages_size=2048kB [ 1896.301046][ T5931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1896.301142][ T5931] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 1896.301234][ T5931] 24805 total pagecache pages [ 1896.301276][ T5931] 0 pages in swap cache [ 1896.301311][ T5931] Swap cache stats: add 0, delete 0, find 0/0 [ 1896.301385][ T5931] Free swap = 0kB [ 1896.301424][ T5931] Total swap = 0kB [ 1896.301466][ T5931] 2097051 pages RAM [ 1896.301507][ T5931] 0 pages HighMem/MovableOnly [ 1896.301545][ T5931] 1515741 pages reserved [ 1896.301586][ T5931] 0 pages cma reserved [ 1896.580397][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1896.647138][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.647304][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.647431][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1896.647619][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1896.647755][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.675845][ T5697] usb 4-1: config 0 descriptor?? [ 1897.176603][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.176766][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.176889][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.177009][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.177132][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.177245][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.177364][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.177489][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.177611][ T5697] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1897.240403][ T5697] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1899.811379][T29448] usb 4-1: USB disconnect, device number 22 21:16:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:16:54 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) [ 1901.036259][T29448] usb 4-1: new high-speed USB device number 23 using dummy_hcd 21:16:54 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x29) 21:16:54 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 21:16:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcb, &(0x7f00000005c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 21:16:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1901.398620][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.409842][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.419976][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1901.433140][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 21:16:55 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) [ 1901.444386][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.530859][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1901.960160][T29448] usb 4-1: config 0 descriptor?? 21:16:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:16:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:16:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x80000000}, 0x1c) [ 1902.440558][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.447781][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.454770][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.465623][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.472594][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.479681][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.486852][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.493827][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 1902.500902][T29448] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 21:16:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) [ 1902.924514][T29448] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1902.999768][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1904.753529][ T6047] not chained 680000 origins [ 1904.758330][ T6047] CPU: 1 PID: 6047 Comm: syz-executor.4 Tainted: G W 5.16.0-rc3-syzkaller #0 [ 1904.768229][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.768229][ T6047] Call Trace: [ 1904.768229][ T6047] [ 1904.768229][ T6047] dump_stack_lvl+0x1ff/0x28e [ 1904.768229][ T6047] dump_stack+0x25/0x28 [ 1904.768229][ T6047] kmsan_internal_chain_origin+0x7a/0x110 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? dst_release+0x157/0x300 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1904.768229][ T6047] ? should_fail+0x75/0x9c0 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? kmsan_internal_set_shadow_origin+0x63/0xc0 [ 1904.768229][ T6047] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1904.768229][ T6047] __msan_chain_origin+0xbf/0x140 [ 1904.768229][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1904.768229][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1904.768229][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1904.768229][ T6047] ? kmsan_internal_set_shadow_origin+0x63/0xc0 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1904.768229][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1904.768229][ T6047] ? kmsan_internal_check_memory+0x9a/0x560 [ 1904.768229][ T6047] ? _copy_to_user+0x1ef/0x270 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1904.768229][ T6047] ? kmsan_get_metadata+0xa4/0x120 [ 1904.768229][ T6047] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1904.768229][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1904.768229][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1904.768229][ T6047] do_fast_syscall_32+0x34/0x70 [ 1904.768229][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1904.768229][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1904.768229][ T6047] RIP: 0023:0xf6f4e549 [ 1904.768229][ T6047] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1904.768229][ T6047] RSP: 002b:00000000f5f485fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1904.768229][ T6047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007fc0 [ 1904.768229][ T6047] RDX: 000000000800001d RSI: 0000000000000000 RDI: 0000000000000000 [ 1904.768229][ T6047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1904.768229][ T6047] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1904.768229][ T6047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1904.768229][ T6047] [ 1905.035477][ T6047] Uninit was stored to memory at: [ 1905.040580][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.046165][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.051146][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.056443][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.061203][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.067208][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.072298][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.077411][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.081961][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.088555][ T6047] [ 1905.090886][ T6047] Uninit was stored to memory at: [ 1905.096215][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.101369][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.106581][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.111751][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.116705][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.122511][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.127798][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.132700][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.137465][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.143845][ T6047] [ 1905.146314][ T6047] Uninit was stored to memory at: [ 1905.151403][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.156776][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.161763][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.167149][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.171895][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.177875][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.182948][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.188090][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.192660][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.199244][ T6047] [ 1905.201576][ T6047] Uninit was stored to memory at: [ 1905.207000][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.212161][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.217367][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.222543][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.227422][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.233195][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.238497][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.243416][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.248172][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.254552][ T6047] [ 1905.256531][T29448] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 1905.257047][ T6047] Uninit was stored to memory at: [ 1905.264379][T29448] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 1905.269687][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.269746][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.286547][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.291725][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.296694][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.302471][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.307766][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.312663][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.317441][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.323936][ T6047] [ 1905.326603][ T6047] Uninit was stored to memory at: [ 1905.331706][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.337089][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.342089][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.347526][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.352273][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.358375][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.363459][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.368582][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.373147][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.379780][ T6047] [ 1905.382120][ T6047] Uninit was stored to memory at: [ 1905.387436][ T6047] __get_compat_msghdr+0x6e1/0x9d0 [ 1905.392637][ T6047] get_compat_msghdr+0x108/0x2c0 [ 1905.397862][ T6047] sendmsg_copy_msghdr+0x1e1/0x9f0 [ 1905.403039][ T6047] __sys_sendmmsg+0x815/0xe30 [ 1905.407995][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.413772][ T6047] __do_fast_syscall_32+0x96/0xf0 [ 1905.419068][ T6047] do_fast_syscall_32+0x34/0x70 [ 1905.423969][ T6047] do_SYSENTER_32+0x1b/0x20 [ 1905.428737][ T6047] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1905.435115][ T6047] [ 1905.437660][ T6047] Local variable msg_sys created at: [ 1905.442950][ T6047] __sys_sendmmsg+0xe1/0xe30 [ 1905.447791][ T6047] __ia32_compat_sys_sendmmsg+0x127/0x180 [ 1905.481471][T29448] pyra: probe of 0003:1E7D:2CF6.0012 failed with error -71 [ 1905.572716][T29448] usb 4-1: USB disconnect, device number 23 21:16:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:16:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x868d31e41dfa3351, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 21:16:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:16:59 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:16:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) [ 1905.993278][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:16:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:17:00 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) [ 1906.906192][ T5697] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1907.266503][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.280353][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1907.291054][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1907.304343][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1907.314006][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.508984][ T5697] usb 4-1: config 0 descriptor?? [ 1908.002023][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.009166][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.016439][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.023417][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.030614][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.037765][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.044731][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.051963][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.059152][ T5697] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 1908.345372][ T5697] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 21:17:03 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x20}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) 21:17:03 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:03 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:03 executing program 1: write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) [ 1910.059217][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1910.556303][ T5697] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 1910.563943][ T5697] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 1910.648979][ T5697] pyra: probe of 0003:1E7D:2CF6.0013 failed with error -71 [ 1910.751498][ T5697] usb 4-1: USB disconnect, device number 24 21:17:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:17:04 executing program 1: write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) 21:17:04 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:04 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:04 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5, 0xfff, 0xd7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00c642d, &(0x7f0000000100)={r2}) close_range(r0, 0xffffffffffffffff, 0x0) [ 1911.292122][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:05 executing program 1: write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) 21:17:05 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:05 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000e10000003d0a000000000000630a00ff0000000095000060000000000d630712192171343d1725b57454eac87bad86b6661ff786c291c8caa1b63fcfd378823e31cd31660e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 21:17:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:05 executing program 1: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) [ 1911.958212][ T19] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1912.326945][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.338409][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.348644][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1912.361808][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1912.371212][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.474054][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1912.762051][ T19] usb 4-1: config 0 descriptor?? [ 1913.241346][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.248641][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.255947][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.262924][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.270127][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.277340][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.284332][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.291492][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.298636][ T19] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1913.394815][ T19] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1915.656424][ T19] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 1915.664053][ T19] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 1915.708792][ T19] pyra: probe of 0003:1E7D:2CF6.0014 failed with error -71 [ 1915.746244][ T19] usb 4-1: USB disconnect, device number 25 21:17:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:09 executing program 5: read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) 21:17:09 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:09 executing program 4: perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000080)={0x200000000000000}) 21:17:09 executing program 1: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:17:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1916.409468][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:10 executing program 5: read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) 21:17:10 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:10 executing program 1: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:17:10 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 21:17:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:10 executing program 5: read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) [ 1917.117891][T29448] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1917.497505][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.509059][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.521228][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1917.534712][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1917.544157][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.688878][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1917.879243][T29448] usb 4-1: config 0 descriptor?? [ 1918.370633][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.377851][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.384941][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.392219][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.399528][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.406728][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.413708][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.421115][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.428310][T29448] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 1918.455727][T29448] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1920.786728][T29448] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 1920.797611][T29448] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 1920.838874][T29448] pyra: probe of 0003:1E7D:2CF6.0015 failed with error -71 [ 1920.879607][T29448] usb 4-1: USB disconnect, device number 26 21:17:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:14 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:17:14 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:14 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) [ 1921.642801][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:15 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:15 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:17:15 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:16 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) [ 1922.526102][ T19] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1922.878840][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1922.906481][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1922.917765][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1922.928391][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1922.944519][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1922.954297][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.315635][ T19] usb 4-1: config 0 descriptor?? [ 1923.811817][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.819133][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.826441][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.833409][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.840603][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.847826][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.854807][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.866182][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1923.873168][ T19] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 1924.045701][ T19] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1926.296917][ T19] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 1926.304519][ T19] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 1926.379335][ T19] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -71 [ 1926.430316][ T19] usb 4-1: USB disconnect, device number 27 21:17:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:20 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 21:17:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:20 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1927.009011][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:20 executing program 1: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) 21:17:20 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:20 executing program 2: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1927.696351][ T19] usb 4-1: new high-speed USB device number 28 using dummy_hcd 21:17:21 executing program 1: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) [ 1928.023988][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1928.055816][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.069479][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.079922][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1928.093192][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1928.102655][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.316675][ T19] usb 4-1: config 0 descriptor?? [ 1928.790543][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.797719][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.804777][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.812093][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.819238][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.826391][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.833370][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.840576][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.847759][ T19] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 1928.872478][ T19] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1931.206570][ T19] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 1931.214162][ T19] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 1931.256848][ T19] pyra: probe of 0003:1E7D:2CF6.0017 failed with error -71 [ 1931.272979][ T19] usb 4-1: USB disconnect, device number 28 21:17:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:25 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:25 executing program 2: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:25 executing program 1: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfc) 21:17:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1931.961195][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:25 executing program 2: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:25 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:25 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, 0x0, 0x0) 21:17:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1932.545927][T29448] usb 4-1: new high-speed USB device number 29 using dummy_hcd 21:17:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) [ 1932.937501][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.948801][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.959470][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1932.972784][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1932.984537][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.015418][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1933.166632][T29448] usb 4-1: config 0 descriptor?? [ 1933.681253][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.688376][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.698887][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.706298][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.713274][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.720363][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.727448][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.734426][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.741517][T29448] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0 [ 1933.846704][T29448] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1935.615687][T29448] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 1935.623250][T29448] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 1935.648353][T29448] pyra: probe of 0003:1E7D:2CF6.0018 failed with error -32 21:17:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:30 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, 0x0, 0x0) 21:17:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1936.614512][ T19] usb 4-1: USB disconnect, device number 29 21:17:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:30 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 21:17:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1936.989712][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 21:17:30 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, 0x0, 0x0) 21:17:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1937.497284][T29448] usb 4-1: new high-speed USB device number 30 using dummy_hcd 21:17:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1937.866665][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.878054][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.888266][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1937.903976][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1937.913354][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.007695][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1938.183814][T29448] usb 4-1: config 0 descriptor?? [ 1938.344047][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 1938.351100][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 1938.660644][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.667935][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.674924][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.682250][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.689438][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.696582][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.703550][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.713866][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.721357][T29448] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 1938.826495][T29448] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1940.635822][T29448] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 1940.643406][T29448] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 1940.678425][T29448] pyra: probe of 0003:1E7D:2CF6.0019 failed with error -32 21:17:35 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280), 0x0) 21:17:35 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) 21:17:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 21:17:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1941.635917][ T19] usb 4-1: USB disconnect, device number 30 [ 1941.877812][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:35 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280), 0x0) 21:17:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 21:17:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:36 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280), 0x0) 21:17:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 21:17:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1942.579297][T29448] usb 4-1: new high-speed USB device number 31 using dummy_hcd 21:17:36 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) [ 1942.945924][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.957232][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.967496][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1942.980865][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1942.990260][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.242248][T29448] usb 4-1: config 0 descriptor?? [ 1943.732882][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.741254][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.748499][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.755612][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.762580][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.769735][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.776854][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.783824][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.790925][T29448] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1943.915994][T29448] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1945.735904][T29448] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 1945.743448][T29448] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 1945.772795][T29448] pyra: probe of 0003:1E7D:2CF6.001A failed with error -32 21:17:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:40 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e8077", 0x7e) 21:17:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 21:17:40 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) [ 1946.759427][T29448] usb 4-1: USB disconnect, device number 31 [ 1946.955871][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:40 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e8077", 0x7e) 21:17:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 21:17:41 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 21:17:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1947.578596][T30910] usb 4-1: new high-speed USB device number 32 using dummy_hcd 21:17:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1947.955894][T30910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.967169][T30910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.977343][T30910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1947.990678][T30910] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1948.000209][T30910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.123111][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1948.257846][T30910] usb 4-1: config 0 descriptor?? [ 1948.730300][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.737671][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.748215][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.755727][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.762700][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.769884][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.777023][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.783983][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.791114][T30910] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 1948.851901][T30910] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1950.695773][T30910] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 1950.703418][T30910] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 1950.731077][T30910] pyra: probe of 0003:1E7D:2CF6.001B failed with error -32 21:17:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e8077", 0x7e) 21:17:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 21:17:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1951.694642][T30910] usb 4-1: USB disconnect, device number 32 21:17:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:45 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) [ 1952.005011][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:45 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cf", 0xbd) 21:17:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 21:17:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:45 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/150, 0x96) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 21:17:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:46 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cf", 0xbd) [ 1952.605643][ T5697] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1952.871618][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1952.972632][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1952.984927][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1952.995157][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1953.008468][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1953.018012][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.211754][ T5697] usb 4-1: config 0 descriptor?? [ 1953.694835][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.702632][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.709927][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.717154][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.724122][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.731415][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.738574][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.745887][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.752839][ T5697] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 1953.771987][ T5697] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1955.658849][ T5697] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 1955.666648][ T5697] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 1955.677016][ T5697] pyra: probe of 0003:1E7D:2CF6.001C failed with error -32 21:17:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 21:17:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cf", 0xbd) 21:17:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:50 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 1956.654359][ T5697] usb 4-1: USB disconnect, device number 33 [ 1956.916615][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df", 0xdd) 21:17:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) 21:17:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') 21:17:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df", 0xdd) [ 1957.666140][ T19] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1958.067471][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.078847][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1958.089131][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1958.102283][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1958.111668][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.229265][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1958.438415][ T19] usb 4-1: config 0 descriptor?? [ 1958.921017][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.928514][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.935742][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.942711][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.949876][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.957042][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.963999][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.971071][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1958.978310][ T19] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 1959.074820][ T19] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1960.895848][ T19] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 1960.903605][ T19] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 1960.938899][ T19] pyra: probe of 0003:1E7D:2CF6.001D failed with error -32 21:17:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:17:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df", 0xdd) 21:17:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)='X', 0x1, 0xfffffffffffffffe) 21:17:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 21:17:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1961.916706][ T19] usb 4-1: USB disconnect, device number 34 [ 1962.221034][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587", 0xed) 21:17:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:17:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{}, {0x0, 0x40}, 0x66}) 21:17:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)) 21:17:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:17:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587", 0xed) [ 1962.979172][ T19] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1963.042038][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1963.358691][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1963.370015][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1963.380484][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1963.396312][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1963.406065][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.622081][ T19] usb 4-1: config 0 descriptor?? [ 1964.100770][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.112561][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.120118][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.127239][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.134287][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.141477][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.148693][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.155877][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.162828][ T19] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 1964.195972][ T19] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1965.625987][ T19] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 1965.633620][ T19] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 1965.659475][ T19] pyra: probe of 0003:1E7D:2CF6.001E failed with error -32 21:18:00 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@upd={0xe0, 0x12, 0x201, 0x0, 0x0, {{'xts(ctr-aes-neonbs-sync)\x00'}}}, 0xe0}}, 0x0) 21:18:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:18:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) 21:18:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587", 0xed) 21:18:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1966.636631][ T19] usb 4-1: USB disconnect, device number 35 21:18:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1966.902218][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:18:00 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xf5) 21:18:00 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21:18:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 21:18:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:18:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:01 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xf5) [ 1967.646609][ T19] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1967.779365][ T24] audit: type=1800 audit(1638911881.393:858): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14784 res=0 errno=0 [ 1967.932946][ T24] audit: type=1800 audit(1638911881.523:859): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14784 res=0 errno=0 21:18:01 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000005b000000000019"], 0x14}}, 0x0) [ 1968.045917][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.057166][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.067598][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1968.080950][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 21:18:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) [ 1968.090435][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:18:01 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r1 = syz_io_uring_setup(0x9ee, &(0x7f0000000440)={0x0, 0x300c}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001540)="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", 0xb02}], 0x1}}], 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0xb7, 0x0, 0x0, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) [ 1968.145783][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1968.380977][ T19] usb 4-1: config 0 descriptor?? 21:18:02 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xf5) 21:18:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1968.884958][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.892172][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.899486][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.906608][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.913569][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.924873][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.932274][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.939369][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1968.946458][ T19] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1969.114800][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1969.309638][ T19] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1970.561656][ T19] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 1970.569937][ T19] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 1970.641669][ T19] pyra: probe of 0003:1E7D:2CF6.001F failed with error -32 21:18:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:05 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 21:18:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008000000300000000810"], 0x30}}, 0x0) 21:18:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d73", 0xf9) 21:18:05 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r1 = syz_io_uring_setup(0x9ee, &(0x7f0000000440)={0x0, 0x300c}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001540)="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", 0xb02}], 0x1}}], 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0xb7, 0x0, 0x0, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 21:18:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1971.566736][ T19] usb 4-1: USB disconnect, device number 36 [ 1971.791083][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:18:05 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d73", 0xf9) 21:18:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x50, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0x50}}, 0x0) 21:18:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 21:18:06 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab80ffffff00000008e293210001c0000000000000000008000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d73", 0xf9) 21:18:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) [ 1972.595900][T29448] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1972.924733][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1972.977055][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.988271][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.998497][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1973.013701][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1973.023531][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.458695][T29448] usb 4-1: config 0 descriptor?? [ 1973.470328][ T7246] overlayfs: filesystem on './bus' not supported as upperdir [ 1973.942301][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.949479][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.956936][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.963904][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.971008][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.978067][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.985020][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.992176][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1973.999231][T29448] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 1974.097231][T29448] pyra 0003:1E7D:2CF6.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1975.486049][T29448] pyra 0003:1E7D:2CF6.0020: couldn't init struct pyra_device [ 1975.493646][T29448] pyra 0003:1E7D:2CF6.0020: couldn't install mouse [ 1975.546884][T29448] pyra: probe of 0003:1E7D:2CF6.0020 failed with error -32 21:18:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 21:18:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfb) 21:18:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000240)) 21:18:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:10 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1976.500505][T29448] usb 4-1: USB disconnect, device number 37 [ 1976.711411][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:18:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 21:18:10 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfb) 21:18:10 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 21:18:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1977.318136][ T19] usb 4-1: new high-speed USB device number 38 using dummy_hcd 21:18:11 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000280)="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", 0xfb) 21:18:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1977.707081][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.718417][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1977.731178][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1977.735639][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1977.744647][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1977.762873][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:18:11 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:18:11 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x1, 0x7fff, 0x9a}}]}}}]}, 0x60}}, 0x0) [ 1978.238750][ T19] usb 4-1: config 0 descriptor?? [ 1978.701933][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.709590][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.716862][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.723830][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.730953][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.738129][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.745158][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.756383][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.763726][ T19] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 1978.853944][ T19] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1980.256672][ T19] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 1980.264340][ T19] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 1980.309896][ T19] pyra: probe of 0003:1E7D:2CF6.0021 failed with error -32 21:18:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2}, 0x18) dup3(r1, r0, 0x0) 21:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1981.266414][T29448] usb 4-1: USB disconnect, device number 38 21:18:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:18:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 1981.496445][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:18:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 21:18:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x00 \x00\x00\x00\x00\x05\x00\x01\x02,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') 21:18:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 21:18:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup2(r2, r1) [ 1982.267071][ T19] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1982.560145][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1982.627255][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1982.640957][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1982.651355][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1982.664651][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1982.674024][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.986633][ T19] usb 4-1: config 0 descriptor?? [ 1983.470774][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.478449][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.485728][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.492730][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.499903][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.507041][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.514181][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.521641][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.528754][ T19] pyra 0003:1E7D:2CF6.0022: unknown main item tag 0x0 [ 1983.620918][ T19] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1985.035957][ T19] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 1985.043683][ T19] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 1985.085681][ T19] pyra: probe of 0003:1E7D:2CF6.0022 failed with error -32 [ 1986.037677][ T19] usb 4-1: USB disconnect, device number 39 21:18:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 21:18:19 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x00 \x00\x00\x00\x00\x05\x00\x01\x02,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') 21:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup2(r2, r1) [ 1986.349609][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:18:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 21:18:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup2(r2, r1) 21:18:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xcb, 0x0, 0x0) 21:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1987.025521][ T19] usb 4-1: new high-speed USB device number 40 using dummy_hcd 21:18:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 1987.393599][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.404909][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.415357][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1987.428523][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1987.437898][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.564894][ T7526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1987.682046][ T19] usb 4-1: config 0 descriptor?? [ 1988.181084][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.188356][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.195688][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.202635][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.210126][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.217279][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.224244][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.231466][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.238708][ T19] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 1988.377759][ T19] pyra 0003:1E7D:2CF6.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1989.745923][ T19] pyra 0003:1E7D:2CF6.0023: couldn't init struct pyra_device [ 1989.753723][ T19] pyra 0003:1E7D:2CF6.0023: couldn't install mouse [ 1989.849096][ T19] pyra: probe of 0003:1E7D:2CF6.0023 failed with error -32 21:18:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup2(r2, r1) 21:18:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2], 0x30}}, 0x0) 21:18:24 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcc5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, {0x0, 0x5}}, 0xffffff54) 21:18:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1990.748026][ T6073] usb 4-1: USB disconnect, device number 40 [ 1990.981182][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1991.091830][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:18:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2], 0x30}}, 0x0) 21:18:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x138, 0x4000000, 0x158, 0x138, 0x0, 0x248, 0x240, 0x240, 0x248, 0x240, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'virt_wifi0\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c48a"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c43a3778e4f3e26500"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 21:18:25 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_mount_image$adfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x1f}], 0x1028020, &(0x7f0000000200)={[{'overlay\x00'}, {}]}) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) fstat(r0, 0x0) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380)) mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x400000000000}}, {@mode={'mode', 0x3d, 0x1000}}, {@mode={'mode', 0x3d, 0x7fc00000000000}}], [{@euid_gt}, {@seclabel}, {@hash}, {@smackfshat={'smackfshat', 0x3d, ']('}}, {@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) [ 1991.774216][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1991.805745][ T19] usb 4-1: new high-speed USB device number 41 using dummy_hcd 21:18:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 1991.962488][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1992.061734][ T7625] bpf: Bad value for 'mode' [ 1992.187816][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1992.199065][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1992.209347][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1992.222665][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1992.232129][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.421202][ T19] usb 4-1: config 0 descriptor?? [ 1992.715886][ T7626] bpf: Bad value for 'mode' [ 1992.930945][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.938542][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.945800][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.952757][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.959966][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.967084][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.974034][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.984098][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1992.991551][ T19] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 1993.080698][ T19] pyra 0003:1E7D:2CF6.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1994.025974][ T19] pyra 0003:1E7D:2CF6.0024: couldn't init struct pyra_device [ 1994.033585][ T19] pyra 0003:1E7D:2CF6.0024: couldn't install mouse [ 1994.079421][ T19] pyra: probe of 0003:1E7D:2CF6.0024 failed with error -32 21:18:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:28 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1801, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 21:18:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21:18:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2], 0x30}}, 0x0) 21:18:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:28 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_mount_image$adfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x1f}], 0x1028020, &(0x7f0000000200)={[{'overlay\x00'}, {}]}) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) fstat(r0, 0x0) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380)) mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x400000000000}}, {@mode={'mode', 0x3d, 0x1000}}, {@mode={'mode', 0x3d, 0x7fc00000000000}}], [{@euid_gt}, {@seclabel}, {@hash}, {@smackfshat={'smackfshat', 0x3d, ']('}}, {@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) [ 1995.032449][ T19] usb 4-1: USB disconnect, device number 41 [ 1995.238162][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1995.243860][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1995.306751][ T7671] bpf: Bad value for 'mode' 21:18:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) 21:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 21:18:29 executing program 5: syz_mount_image$exfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 21:18:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b2f8777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 21:18:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 1996.095847][ T6073] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1996.124919][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1996.173363][ T7704] 9pnet_virtio: no channels available for device syz [ 1996.229564][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1996.251166][ T7709] 9pnet_virtio: no channels available for device syz [ 1996.468259][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.479503][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.489690][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1996.502910][ T6073] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1996.512299][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.716507][ T6073] usb 4-1: config 0 descriptor?? [ 1997.193177][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.200469][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.207700][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.214684][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.221833][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.228919][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.236170][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.243127][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.250257][ T6073] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 1997.266418][ T6073] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1998.265943][ T6073] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 1998.273544][ T6073] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 1998.339647][ T6073] pyra: probe of 0003:1E7D:2CF6.0025 failed with error -32 21:18:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) 21:18:32 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201}, 0x14}}, 0x0) 21:18:32 executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x42}, 0x8, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x66, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0x0) 21:18:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) [ 1999.275081][ T5697] usb 4-1: USB disconnect, device number 42 [ 1999.516088][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1999.563672][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 21:18:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:33 executing program 1: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 21:18:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) [ 1999.785524][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 1999.792041][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 21:18:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "96a2af6bf918fbbc", "feb73edb84231939cbe500a48af29962f8f7923557b9c41fecdf9555f10a2da1", "2a74f127", "e62c35b196d7dfc7"}, 0x38) 21:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) [ 2000.155874][T29448] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2000.176270][ T7784] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 2000.222179][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2000.281737][ T7787] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 21:18:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80080000"], 0x30}}, 0x0) [ 2000.516863][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.528512][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.538747][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2000.552128][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2000.563279][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.568644][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2000.860763][T29448] usb 4-1: config 0 descriptor?? [ 2001.357110][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.364284][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.371609][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.382033][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.389396][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.396666][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.403728][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.410941][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.418072][T29448] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 2001.444850][T29448] pyra 0003:1E7D:2CF6.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2002.437476][T29448] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 2002.445080][T29448] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 2002.519456][T29448] pyra: probe of 0003:1E7D:2CF6.0026 failed with error -32 21:18:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:37 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 21:18:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0xd45, 0x4) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000180)=[{}, {0x0}], 0x2, 0x0, 0x0, 0x9cfb}}], 0x1, 0x0) 21:18:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) 21:18:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0884113, &(0x7f0000000040)) [ 2003.438736][T29448] usb 4-1: USB disconnect, device number 43 [ 2003.712029][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:18:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:18:37 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:18:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) 21:18:37 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) r2 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ppoll(&(0x7f0000001c00)=[{r0, 0x45c0}, {r2}], 0x2, 0x0, 0x0, 0x0) inotify_rm_watch(r0, r1) 21:18:37 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) [ 2004.369136][ T6073] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2004.408382][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2004.756960][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2004.768142][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2004.778280][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2004.791410][ T6073] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2004.800745][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.005551][ T6073] usb 4-1: config 0 descriptor?? [ 2005.470784][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.481337][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.488804][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.495883][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.502872][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.509967][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.517024][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.523978][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.531049][ T6073] pyra 0003:1E7D:2CF6.0027: unknown main item tag 0x0 [ 2005.588059][ T6073] pyra 0003:1E7D:2CF6.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2006.555864][ T6073] pyra 0003:1E7D:2CF6.0027: couldn't init struct pyra_device [ 2006.563478][ T6073] pyra 0003:1E7D:2CF6.0027: couldn't install mouse [ 2006.590659][ T6073] pyra: probe of 0003:1E7D:2CF6.0027 failed with error -32 21:18:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:18:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x30}}, 0x0) 21:18:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x0) 21:18:41 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x0) [ 2007.567039][ T6073] usb 4-1: USB disconnect, device number 44 [ 2007.779100][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 21:18:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:18:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 21:18:41 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 21:18:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80"], 0x30}}, 0x0) 21:18:42 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @mcast1}, 0x1c) [ 2008.426377][ T6073] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2008.797882][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.809140][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.819609][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2008.832758][ T6073] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2008.842123][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.027634][ T6073] usb 4-1: config 0 descriptor?? [ 2009.510809][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.518249][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.525457][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.532423][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.539667][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.546774][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.553729][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.560830][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.567917][ T6073] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 2009.707801][ T6073] pyra 0003:1E7D:2CF6.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2010.645822][ T6073] pyra 0003:1E7D:2CF6.0028: couldn't init struct pyra_device [ 2010.653424][ T6073] pyra 0003:1E7D:2CF6.0028: couldn't install mouse [ 2010.688114][ T6073] pyra: probe of 0003:1E7D:2CF6.0028 failed with error -32 21:18:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 21:18:45 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000400)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80"], 0x30}}, 0x0) 21:18:45 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/251) [ 2011.647776][ T6073] usb 4-1: USB disconnect, device number 45 21:18:45 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 21:18:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:18:45 executing program 5: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 21:18:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80"], 0x30}}, 0x0) 21:18:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) [ 2012.485836][ T5697] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2012.851112][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.862361][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2012.872648][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2012.885821][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2012.895069][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.074605][ T5697] usb 4-1: config 0 descriptor?? [ 2013.552282][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.559706][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.570338][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.577828][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.584797][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.591979][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.599137][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.606237][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.613222][ T5697] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 2013.660312][ T5697] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2014.635909][ T5697] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 2014.643501][ T5697] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 2014.711742][ T5697] pyra: probe of 0003:1E7D:2CF6.0029 failed with error -32 21:18:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:49 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c800800"], 0x30}}, 0x0) 21:18:49 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:18:49 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 21:18:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) [ 2015.639500][ T6073] usb 4-1: USB disconnect, device number 46 21:18:49 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:49 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:18:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:18:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 21:18:49 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 21:18:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) [ 2016.559491][ T5697] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2016.928007][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.939556][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.951680][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2016.965082][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2016.974422][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.124032][ T5697] usb 4-1: config 0 descriptor?? [ 2017.653475][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.664283][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.671757][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.678831][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.685895][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.692857][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.699923][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.706997][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.713936][ T5697] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 2017.739783][ T5697] pyra 0003:1E7D:2CF6.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2018.297524][ T5697] pyra 0003:1E7D:2CF6.002A: couldn't init struct pyra_device [ 2018.305123][ T5697] pyra 0003:1E7D:2CF6.002A: couldn't install mouse [ 2018.347567][ T5697] pyra: probe of 0003:1E7D:2CF6.002A failed with error -32 21:18:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:52 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:18:52 executing program 5: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) 21:18:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80"], 0x30}}, 0x0) 21:18:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:52 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) [ 2019.285552][ T5697] usb 4-1: USB disconnect, device number 47 21:18:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:53 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:18:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80"], 0x30}}, 0x0) 21:18:53 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 21:18:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_NAME={0x8, 0x1, '\x94[.\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 21:18:53 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) [ 2020.166058][ T6073] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2020.528014][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.539563][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.549838][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2020.563039][ T6073] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2020.572399][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.846717][ T6073] usb 4-1: config 0 descriptor?? [ 2021.321554][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.329147][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.336407][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.343396][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.353440][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.361072][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.368291][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.375487][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.382478][ T6073] pyra 0003:1E7D:2CF6.002B: unknown main item tag 0x0 [ 2021.413422][ T6073] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2022.006206][ T6073] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 2022.013904][ T6073] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 2022.118148][ T6073] pyra: probe of 0003:1E7D:2CF6.002B failed with error -32 21:18:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:18:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:18:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80"], 0x30}}, 0x0) 21:18:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:18:56 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 21:18:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 2023.005989][ T6073] usb 4-1: USB disconnect, device number 48 21:18:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 21:18:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:18:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:18:57 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x2, 0xe5) 21:18:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 2023.997732][ T5697] usb 4-1: new high-speed USB device number 49 using dummy_hcd 21:18:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 2024.046928][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2024.408003][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.421717][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.432120][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2024.445749][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2024.454983][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.535735][ T5697] usb 4-1: config 0 descriptor?? [ 2025.040948][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.048078][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.055059][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.062320][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.069432][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.076680][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.083632][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.090696][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.097809][ T5697] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 2025.116121][ T5697] pyra 0003:1E7D:2CF6.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2025.765841][ T5697] pyra 0003:1E7D:2CF6.002C: couldn't init struct pyra_device [ 2025.773453][ T5697] pyra 0003:1E7D:2CF6.002C: couldn't install mouse [ 2025.798205][ T5697] pyra: probe of 0003:1E7D:2CF6.002C failed with error -32 21:19:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:19:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000), 0x8) 21:19:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:19:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2026.784186][ T5697] usb 4-1: USB disconnect, device number 49 [ 2027.059462][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 21:19:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:19:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:19:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, r1, 0x85b35f7921e1632d, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 2027.748279][T29448] usb 4-1: new high-speed USB device number 50 using dummy_hcd 21:19:01 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) [ 2027.923008][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2028.157293][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2028.168640][T29448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.179054][T29448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2028.192169][T29448] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2028.201525][T29448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.367264][T29448] usb 4-1: config 0 descriptor?? [ 2028.851576][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.858717][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.865922][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.872888][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.879978][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.887130][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.894090][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.901303][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2028.908390][T29448] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 2029.007182][T29448] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2029.487038][T29448] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 2029.494731][T29448] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 2029.522147][T29448] pyra: probe of 0003:1E7D:2CF6.002D failed with error -32 21:19:04 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) 21:19:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:19:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:19:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:04 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) [ 2030.486603][T29448] usb 4-1: USB disconnect, device number 50 21:19:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:19:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:04 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00004f6000/0x12000)=nil, 0x2) [ 2031.361437][ T8243] warn_alloc: 1 callbacks suppressed [ 2031.361509][ T8243] syz-executor.2: vmalloc error: size 200704, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2031.386706][ T8243] CPU: 0 PID: 8243 Comm: syz-executor.2 Tainted: G W 5.16.0-rc3-syzkaller #0 [ 2031.395228][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2031.395228][ T8243] Call Trace: [ 2031.395228][ T8243] [ 2031.395228][ T8243] dump_stack_lvl+0x1ff/0x28e [ 2031.395228][ T8243] dump_stack+0x25/0x28 [ 2031.395228][ T8243] warn_alloc+0x4cd/0x680 [ 2031.395228][ T8243] ? kmsan_get_metadata+0xa4/0x120 [ 2031.395228][ T8243] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2031.395228][ T8243] __vmalloc_node_range+0x12bc/0x17f0 [ 2031.395228][ T8243] __vmalloc+0xf8/0x110 [ 2031.395228][ T8243] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 2031.395228][ T8243] ? snd_dma_vmalloc_alloc+0xbc/0xe0 [ 2031.395228][ T8243] snd_dma_vmalloc_alloc+0xbc/0xe0 [ 2031.395228][ T8243] ? snd_dma_iram_mmap+0x220/0x220 [ 2031.395228][ T8243] snd_dma_alloc_dir_pages+0x2da/0x530 [ 2031.395228][ T8243] snd_pcm_lib_malloc_pages+0x7b5/0xe00 [ 2031.395228][ T8243] snd_pcm_hw_params+0xfdb/0x2880 [ 2031.395228][ T8243] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2031.395228][ T8243] snd_pcm_kernel_ioctl+0x21a/0xfe0 [ 2031.395228][ T8243] snd_pcm_oss_change_params_locked+0x5c88/0x8210 [ 2031.395228][ T8243] snd_pcm_oss_get_active_substream+0x59e/0x630 [ 2031.395228][ T8243] snd_pcm_oss_set_channels+0x3e5/0x8e0 [ 2031.395228][ T8243] snd_pcm_oss_ioctl+0xc87/0x1e40 [ 2031.395228][ T8243] snd_pcm_oss_ioctl_compat+0x8e/0xa0 [ 2031.525556][ T8243] ? snd_pcm_oss_ioctl+0x1e40/0x1e40 [ 2031.525556][ T8243] __se_compat_sys_ioctl+0x876/0x1150 [ 2031.538545][ T8243] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2031.538545][ T8243] __ia32_compat_sys_ioctl+0xd9/0x110 [ 2031.538545][ T8243] __do_fast_syscall_32+0x96/0xf0 [ 2031.538545][ T8243] do_fast_syscall_32+0x34/0x70 [ 2031.538545][ T8243] do_SYSENTER_32+0x1b/0x20 [ 2031.538545][ T8243] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2031.568553][ T5697] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2031.538545][ T8243] RIP: 0023:0xf6f26549 [ 2031.538545][ T8243] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2031.601543][ T8243] RSP: 002b:00000000f5f205fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2031.601543][ T8243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0045006 [ 2031.615686][ T8243] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2031.615686][ T8243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2031.615686][ T8243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2031.615686][ T8243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2031.615686][ T8243] [ 2031.661463][ T8243] Mem-Info: [ 2031.664673][ T8243] active_anon:416 inactive_anon:136511 isolated_anon:0 [ 2031.664673][ T8243] active_file:5734 inactive_file:61468 isolated_file:0 [ 2031.664673][ T8243] unevictable:770 dirty:93 writeback:0 [ 2031.664673][ T8243] slab_reclaimable:9389 slab_unreclaimable:47519 [ 2031.664673][ T8243] mapped:21184 shmem:8019 pagetables:2420 bounce:0 [ 2031.664673][ T8243] kernel_misc_reclaimable:0 [ 2031.664673][ T8243] free:234079 free_pcp:24185 free_cma:0 [ 2031.709599][ T8243] Node 0 active_anon:1632kB inactive_anon:521292kB active_file:22528kB inactive_file:242492kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:77264kB dirty:332kB writeback:0kB shmem:30416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB kernel_stack:4832kB pagetables:6788kB all_unreclaimable? no [ 2031.742036][ T8243] Node 1 active_anon:32kB inactive_anon:24752kB active_file:408kB inactive_file:3380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7472kB dirty:40kB writeback:0kB shmem:1660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:1104kB pagetables:2892kB all_unreclaimable? no [ 2031.773424][ T8243] Node 0 DMA free:4096kB boost:0kB min:156kB low:192kB high:228kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2031.800806][ T8243] lowmem_reserve[]: 0 905 1218 1218 1218 [ 2031.806888][ T8243] Node 0 DMA32 free:35860kB boost:0kB min:36008kB low:45008kB high:54008kB reserved_highatomic:0KB active_anon:560kB inactive_anon:452644kB active_file:772kB inactive_file:201044kB unevictable:0kB writepending:252kB present:3129332kB managed:932648kB mlocked:0kB bounce:0kB free_pcp:42772kB local_pcp:22040kB free_cma:0kB [ 2031.837464][ T8243] lowmem_reserve[]: 0 0 313 313 313 [ 2031.843156][ T8243] Node 0 Normal free:15564kB boost:0kB min:12452kB low:15564kB high:18676kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:68648kB active_file:21756kB inactive_file:41448kB unevictable:1544kB writepending:80kB present:1048576kB managed:320516kB mlocked:8kB bounce:0kB free_pcp:10164kB local_pcp:3368kB free_cma:0kB [ 2031.874076][ T8243] lowmem_reserve[]: 0 0 0 0 0 [ 2031.879227][ T8243] Node 1 Normal free:880544kB boost:0kB min:41488kB low:51860kB high:62232kB reserved_highatomic:0KB active_anon:32kB inactive_anon:24836kB active_file:408kB inactive_file:3380kB unevictable:1536kB writepending:40kB present:4194304kB managed:1067980kB mlocked:0kB bounce:0kB free_pcp:43844kB local_pcp:21344kB free_cma:0kB [ 2031.909958][ T8243] lowmem_reserve[]: 0 0 0 0 0 [ 2031.914919][ T8243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 2031.928596][ T8243] Node 0 DMA32: 1*4kB (M) 314*8kB (ME) 168*16kB (UM) 178*32kB (UME) 46*64kB (UME) 8*128kB (UM) 8*256kB (ME) 9*512kB (UME) 2*1024kB (ME) 6*2048kB (UM) 0*4096kB = 35860kB [ 2031.946728][ T8243] Node 0 Normal: 83*4kB (UME) 420*8kB (UME) 124*16kB (UME) 69*32kB (UME) 28*64kB (UME) 8*128kB (UE) 5*256kB (UE) 7*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 15564kB [ 2031.964280][ T8243] Node 1 Normal: 306*4kB (ME) 111*8kB (UM) 36*16kB (UME) 15*32kB (UM) 9*64kB (ME) 6*128kB (UME) 4*256kB (UE) 1*512kB (U) 2*1024kB (U) 2*2048kB (U) 212*4096kB (UM) = 880544kB [ 2031.966272][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.982954][ T8243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2031.983056][ T8243] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=3 hugepages_size=2048kB [ 2031.996258][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.003709][ T8243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2032.013394][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2032.022849][ T8243] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 2032.022947][ T8243] 24934 total pagecache pages [ 2032.032628][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2032.045451][ T8243] 0 pages in swap cache [ 2032.045493][ T8243] Swap cache stats: add 0, delete 0, find 0/0 [ 2032.054792][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.059572][ T8243] Free swap = 0kB [ 2032.059612][ T8243] Total swap = 0kB [ 2032.094790][ T8243] 2097051 pages RAM [ 2032.098837][ T8243] 0 pages HighMem/MovableOnly [ 2032.103595][ T8243] 1515741 pages reserved [ 2032.108098][ T8243] 0 pages cma reserved 21:19:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2032.780954][ T5697] usb 4-1: config 0 descriptor?? [ 2033.270540][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.277702][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.284662][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.291909][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.299122][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.306247][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.313201][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.320399][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.330734][ T5697] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 2033.468862][ T5697] pyra 0003:1E7D:2CF6.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2033.956017][ T5697] pyra 0003:1E7D:2CF6.002E: couldn't init struct pyra_device [ 2033.963708][ T5697] pyra 0003:1E7D:2CF6.002E: couldn't install mouse [ 2033.990019][ T5697] pyra: probe of 0003:1E7D:2CF6.002E failed with error -32 21:19:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:08 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b05d25a80738c6394f90224fc601000021b0a000600053582c137153e370748018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 21:19:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:19:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="14000000340005877f4133dea3686a0d0535fc60", 0x14}], 0x1}, 0x0) 21:19:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "84fe22"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2034.963449][T29448] usb 4-1: USB disconnect, device number 51 [ 2035.249665][ T8296] validate_nla: 4 callbacks suppressed [ 2035.249734][ T8296] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2035.263748][ T8296] netlink: 194484 bytes leftover after parsing attributes in process `syz-executor.5'. 21:19:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:19:09 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x9c2, &(0x7f00000001c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000000)) socket(0x29, 0x5, 0x0) getpid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 21:19:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) [ 2035.511721][ T8303] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2035.520252][ T8303] netlink: 194484 bytes leftover after parsing attributes in process `syz-executor.5'. 21:19:09 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x10}], 0x15, 0x480) [ 2035.890051][ T5697] usb 4-1: new high-speed USB device number 52 using dummy_hcd 21:19:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:19:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) [ 2036.257412][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.268818][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.279321][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2036.292762][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 21:19:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000380)=[@cr4={0x1, 0x400a0}], 0x1) [ 2036.304085][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:19:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) [ 2036.658461][ T5697] usb 4-1: config 0 descriptor?? 21:19:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 2037.151859][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.158975][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.166185][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.173157][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.180265][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.187447][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.194415][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.201540][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.208671][ T5697] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 2037.464540][ T5697] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2037.936304][ T5697] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 2037.943922][ T5697] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 2038.030948][ T5697] pyra: probe of 0003:1E7D:2CF6.002F failed with error -32 21:19:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:19:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x20001, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, ["", "", "", ""]}, 0x20}}, 0x4c000) msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/37}, 0x2d, 0x3, 0xc00) 21:19:12 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) 21:19:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:19:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) [ 2038.947870][ T5697] usb 4-1: USB disconnect, device number 52 21:19:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 21:19:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r1, r0) 21:19:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x88,%#[]\f\'\x00') 21:19:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) [ 2039.796069][ T5697] usb 4-1: new high-speed USB device number 53 using dummy_hcd 21:19:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 2040.156982][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.168194][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.178439][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2040.193650][ T5697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2040.203250][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.400706][ T5697] usb 4-1: config 0 descriptor?? [ 2040.901249][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.911859][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.919555][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.926688][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.933700][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.940825][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.947949][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.954917][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2040.962046][ T5697] pyra 0003:1E7D:2CF6.0030: unknown main item tag 0x0 [ 2041.095851][ T5697] pyra 0003:1E7D:2CF6.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2041.155820][ T5697] pyra 0003:1E7D:2CF6.0030: couldn't init struct pyra_device [ 2041.163431][ T5697] pyra 0003:1E7D:2CF6.0030: couldn't install mouse [ 2041.239020][ T5697] pyra: probe of 0003:1E7D:2CF6.0030 failed with error -32 21:19:15 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:19:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:19:15 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) 21:19:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) 21:19:15 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 2042.217175][ T5697] usb 4-1: USB disconnect, device number 53 21:19:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x5, 0x5, "a8"}}}}]}, 0x30}}, 0x0) 21:19:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21:19:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:19:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 21:19:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) [ 2043.075728][ T6073] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2043.477477][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.488852][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.499033][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2043.512577][ T6073] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2043.521964][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.670103][ T6073] usb 4-1: config 0 descriptor?? [ 2044.151518][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.158813][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.166029][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.173003][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.183016][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.190332][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.197407][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.204369][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.211450][ T6073] pyra 0003:1E7D:2CF6.0031: unknown main item tag 0x0 [ 2044.497946][ T6073] pyra 0003:1E7D:2CF6.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 2044.563102][ T6073] pyra 0003:1E7D:2CF6.0031: couldn't init struct pyra_device [ 2044.570913][ T6073] pyra 0003:1E7D:2CF6.0031: couldn't install mouse [ 2044.657780][ T6073] pyra: probe of 0003:1E7D:2CF6.0031 failed with error -32 21:19:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="010009"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0xd, "1cbe009ec2bc4bc128f318c74f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x1, 0xd, "5c4fec7ca7844cde9fa92b9698"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0xd, "227638a07dadeae430acf3c4d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400)={0x0, 0x0, 0xd, "208d8c22a739d60236eff8bf79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:19:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 2045.759554][ T6073] usb 4-1: USB disconnect, device number 54 21:19:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x71, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="de", 0x1, r0) 21:19:19 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FSYNC, 0x5) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 21:19:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 21:19:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x0) 21:19:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x80045301, &(0x7f0000000140)) 21:19:19 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) 21:19:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 21:19:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 2046.751487][ T6073] usb 4-1: new high-speed USB device number 55 using dummy_hcd 21:19:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x10, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x5}}}}]}, 0x2c}}, 0x0) [ 2047.167219][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2047.178453][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2047.188660][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2047.201785][ T6073] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2047.211118][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.532385][ T6073] usb 4-1: config 0 descriptor?? [ 2047.585836][ T8506] ===================================================== [ 2047.592923][ T8506] BUG: KMSAN: uninit-value in fib_get_nhs+0xac4/0x1f80 [ 2047.595306][ T8506] fib_get_nhs+0xac4/0x1f80 [ 2047.595306][ T8506] fib_create_info+0x2411/0x4870 [ 2047.595306][ T8506] fib_table_insert+0x45c/0x3a10 [ 2047.595306][ T8506] inet_rtm_newroute+0x289/0x420 [ 2047.595306][ T8506] rtnetlink_rcv_msg+0x145d/0x18c0 [ 2047.595306][ T8506] netlink_rcv_skb+0x447/0x800 [ 2047.595306][ T8506] rtnetlink_rcv+0x50/0x60 [ 2047.595306][ T8506] netlink_unicast+0x1095/0x1360 [ 2047.595306][ T8506] netlink_sendmsg+0x16f3/0x1870 [ 2047.595306][ T8506] ____sys_sendmsg+0xe11/0x12c0 [ 2047.647467][ T8506] __sys_sendmsg+0x4a5/0x640 [ 2047.647467][ T8506] __ia32_compat_sys_sendmsg+0xed/0x130 [ 2047.647467][ T8506] __do_fast_syscall_32+0x96/0xf0 [ 2047.663495][ T8506] do_fast_syscall_32+0x34/0x70 [ 2047.663495][ T8506] do_SYSENTER_32+0x1b/0x20 [ 2047.663495][ T8506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2047.663495][ T8506] [ 2047.663495][ T8506] Uninit was created at: [ 2047.663495][ T8506] __kmalloc_node_track_caller+0xe0c/0x1510 [ 2047.663495][ T8506] __alloc_skb+0x545/0xf90 [ 2047.663495][ T8506] netlink_sendmsg+0xe93/0x1870 [ 2047.663495][ T8506] ____sys_sendmsg+0xe11/0x12c0 [ 2047.663495][ T8506] __sys_sendmsg+0x4a5/0x640 [ 2047.663495][ T8506] __ia32_compat_sys_sendmsg+0xed/0x130 [ 2047.663495][ T8506] __do_fast_syscall_32+0x96/0xf0 [ 2047.663495][ T8506] do_fast_syscall_32+0x34/0x70 [ 2047.663495][ T8506] do_SYSENTER_32+0x1b/0x20 [ 2047.663495][ T8506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2047.663495][ T8506] [ 2047.663495][ T8506] CPU: 1 PID: 8506 Comm: syz-executor.1 Tainted: G W 5.16.0-rc3-syzkaller #0 [ 2047.663495][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.663495][ T8506] ===================================================== [ 2047.663495][ T8506] Disabling lock debugging due to kernel taint [ 2047.774198][ C1] vkms_vblank_simulate: vblank timer overrun [ 2047.783482][ T8506] Kernel panic - not syncing: kmsan.panic set ... [ 2047.789917][ T8506] CPU: 1 PID: 8506 Comm: syz-executor.1 Tainted: G B W 5.16.0-rc3-syzkaller #0 [ 2047.790532][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2047.790532][ T8506] Call Trace: [ 2047.790532][ T8506] [ 2047.790532][ T8506] dump_stack_lvl+0x1ff/0x28e [ 2047.817371][ T8506] dump_stack+0x25/0x28 [ 2047.817371][ T8506] panic+0x467/0xe03 [ 2047.817371][ T8506] ? add_taint+0x187/0x210 [ 2047.817371][ T8506] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 2047.817371][ T8506] kmsan_report+0x306/0x310 [ 2047.817371][ T8506] ? kmsan_internal_chain_origin+0xf5/0x110 [ 2047.817371][ T8506] ? __msan_warning+0xb8/0x130 [ 2047.817371][ T8506] ? fib_get_nhs+0xac4/0x1f80 [ 2047.817371][ T8506] ? fib_create_info+0x2411/0x4870 [ 2047.817371][ T8506] ? fib_table_insert+0x45c/0x3a10 [ 2047.817371][ T8506] ? inet_rtm_newroute+0x289/0x420 [ 2047.817371][ T8506] ? rtnetlink_rcv_msg+0x145d/0x18c0 [ 2047.817371][ T8506] ? netlink_rcv_skb+0x447/0x800 [ 2047.817371][ T8506] ? rtnetlink_rcv+0x50/0x60 [ 2047.817371][ T8506] ? netlink_unicast+0x1095/0x1360 [ 2047.817371][ T8506] ? netlink_sendmsg+0x16f3/0x1870 [ 2047.817371][ T8506] ? ____sys_sendmsg+0xe11/0x12c0 [ 2047.817371][ T8506] ? __sys_sendmsg+0x4a5/0x640 [ 2047.817371][ T8506] ? __ia32_compat_sys_sendmsg+0xed/0x130 [ 2047.817371][ T8506] ? __do_fast_syscall_32+0x96/0xf0 [ 2047.817371][ T8506] ? do_fast_syscall_32+0x34/0x70 [ 2047.817371][ T8506] ? do_SYSENTER_32+0x1b/0x20 [ 2047.817371][ T8506] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2047.817371][ T8506] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2047.817371][ T8506] ? kernel_text_address+0x1f1/0x2b0 [ 2047.817371][ T8506] ? __kernel_text_address+0x32/0xf0 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] ? nla_find+0x2d1/0x330 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] __msan_warning+0xb8/0x130 [ 2047.817371][ T8506] fib_get_nhs+0xac4/0x1f80 [ 2047.817371][ T8506] fib_create_info+0x2411/0x4870 [ 2047.817371][ T8506] fib_table_insert+0x45c/0x3a10 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_metadata+0x70/0x120 [ 2047.817371][ T8506] inet_rtm_newroute+0x289/0x420 [ 2047.817371][ T8506] ? fib_del_ifaddr+0x29d0/0x29d0 [ 2047.817371][ T8506] rtnetlink_rcv_msg+0x145d/0x18c0 [ 2047.817371][ T8506] ? __local_bh_enable_ip+0xa4/0xe0 [ 2047.817371][ T8506] ? local_bh_enable+0x36/0x40 [ 2047.817371][ T8506] ? __dev_queue_xmit+0x249b/0x32a0 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] netlink_rcv_skb+0x447/0x800 [ 2047.817371][ T8506] ? rtnetlink_bind+0x140/0x140 [ 2047.817371][ T8506] rtnetlink_rcv+0x50/0x60 [ 2047.817371][ T8506] ? rtnetlink_net_exit+0x90/0x90 [ 2047.817371][ T8506] netlink_unicast+0x1095/0x1360 [ 2047.817371][ T8506] netlink_sendmsg+0x16f3/0x1870 [ 2047.817371][ T8506] ____sys_sendmsg+0xe11/0x12c0 [ 2047.817371][ T8506] ? netlink_getsockopt+0x11d0/0x11d0 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] __sys_sendmsg+0x4a5/0x640 [ 2047.817371][ T8506] ? _copy_to_user+0x1ef/0x270 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] ? kmsan_get_metadata+0xa4/0x120 [ 2047.817371][ T8506] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2047.817371][ T8506] __ia32_compat_sys_sendmsg+0xed/0x130 [ 2047.817371][ T8506] __do_fast_syscall_32+0x96/0xf0 [ 2047.817371][ T8506] do_fast_syscall_32+0x34/0x70 [ 2047.817371][ T8506] do_SYSENTER_32+0x1b/0x20 [ 2047.817371][ T8506] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2047.817371][ T8506] RIP: 0023:0xf6e6c549 [ 2047.817371][ T8506] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2047.817371][ T8506] RSP: 002b:00000000f5e665fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2047.817371][ T8506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 2047.817371][ T8506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.817371][ T8506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.817371][ T8506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2047.817371][ T8506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.817371][ T8506] [ 2047.817371][ T8506] Kernel Offset: disabled [ 2047.817371][ T8506] Rebooting in 86400 seconds..