kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1593.797834][T28088] lowmem_reserve[]: 0 0 0 0 0 [ 1593.802881][T28088] Node 1 Normal free:3959240kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:920kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1593.833295][T28088] lowmem_reserve[]: 0 0 0 0 0 [ 1593.863397][T28088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1593.876677][T28088] Node 0 DMA32: 3484*4kB (UME) 1497*8kB (UME) 865*16kB (UME) 385*32kB (ME) 365*64kB (UME) 174*128kB (UME) 49*256kB (UM) 15*512kB (UM) 2*1024kB (UM) 9*2048kB (ME) 95*4096kB (UM) = 527528kB [ 1593.898243][T28088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1593.911447][T28088] Node 1 Normal: 168*4kB (UE) 39*8kB (UME) 35*16kB (UME) 158*32kB (UE) 70*64kB (UME) 21*128kB (UME) 12*256kB (U) 8*512kB (UE) 0*1024kB 3*2048kB (UM) 960*4096kB (M) = 3959240kB [ 1593.929598][T28088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.939963][T28088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1593.950565][T28088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.960735][T28088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1593.970700][T28088] 76712 total pagecache pages [ 1593.975491][T28088] 0 pages in swap cache [ 1593.980202][T28088] Swap cache stats: add 0, delete 0, find 0/0 [ 1593.986278][T28088] Free swap = 0kB [ 1593.990740][T28088] Total swap = 0kB [ 1593.994501][T28088] 2097051 pages RAM [ 1593.998973][T28088] 0 pages HighMem/MovableOnly [ 1594.003662][T28088] 384512 pages reserved [ 1594.008352][T28088] 0 pages cma reserved 20:50:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000300000010"], 0x20}], 0x1}, 0x0) 20:50:03 executing program 5: sysfs$2(0x2, 0x100, 0x0) sysfs$2(0x2, 0xacf, &(0x7f0000000000)=""/237) 20:50:03 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x900}, 0x0) 20:50:03 executing program 1: sysfs$2(0x8700, 0x0, &(0x7f0000000000)=""/124) 20:50:03 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432007a74002d"], 0xa0}}, 0x0) [ 1594.133576][T28127] __nla_validate_parse: 25 callbacks suppressed [ 1594.133599][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:03 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000140)=""/127) sysfs$2(0x2, 0x30000000000000, &(0x7f00000000c0)=""/80) sysfs$2(0x2, 0x2, &(0x7f0000001280)=""/4101) sysfs$2(0x2, 0xa2, &(0x7f00000011c0)=""/164) sysfs$2(0x2, 0x1, &(0x7f0000000000)=""/62) 20:50:04 executing program 1: sysfs$2(0x8701, 0x0, &(0x7f0000000000)=""/124) [ 1594.218497][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1594.219488][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', "3392766decbda0b8a1e204e46560f928", "37079580", "1b0b00"}, 0x28) sendto$inet6(r3, &(0x7f00000005c0), 0xe0ffffff, 0xf00000000000000, 0x0, 0xd8) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000002c0)=0x2c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r4, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1}}], 0x28) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000340)={0x36, @random="e9ed21657ad4"}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c5fe328f", @ANYRES32, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0c005a800400038004000280"], 0x28}}, 0x41) 20:50:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000400000010"], 0x20}], 0x1}, 0x0) [ 1594.359331][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xa00}, 0x0) 20:50:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x5, 0xa, 0x4, 0x2000, 0x8, {r1, r2/1000+60000}, {0x1, 0x0, 0x6, 0x6, 0x4, 0x0, "0defb3ad"}, 0xfffffffa, 0x4, @planes=&(0x7f00000000c0)={0x7, 0x5, @userptr=0x7ef, 0xfff}, 0x0, 0x0, 0xffffffffffffffff}) fchmod(r3, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {0x40, 0x3, 0xffff, 0x4}, 0x50, [0x54, 0x1, 0x0, 0x0, 0x8001, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4cf1, 0x3, 0x0, 0x81, 0x0, 0x0, 0xc1d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0xff, 0x6, 0x1ff, 0xfff, 0x9, 0x0, 0x0, 0x2, 0x890, 0x9, 0x7, 0x0, 0x1, 0x9, 0x7, 0x7, 0x0, 0x2, 0x0, 0x0, 0x4, 0x9, 0x6, 0x1, 0x3, 0x1, 0x6, 0x4fc7, 0x0, 0x0, 0x0, 0x400, 0x8bc, 0x0, 0x8, 0x0, 0xfffffff7], [0xfffffffc, 0x6, 0x1000, 0x3, 0x100, 0x0, 0x2, 0x0, 0x4806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x6, 0x3, 0x0, 0x0, 0x6, 0xc, 0x0, 0x2, 0x5ee0, 0xeb, 0x5, 0x0, 0x32afa8f9, 0x0, 0x9, 0x40, 0x4, 0x5, 0x0, 0x800, 0x4f, 0x4004, 0x101, 0x3, 0x9, 0x5550, 0xff, 0x4, 0x0, 0x0, 0x8, 0xffffff9a, 0x400000, 0xff, 0x8000, 0x2, 0x8, 0x0, 0x0, 0xf684, 0x3, 0xfffff000, 0x7e, 0x0, 0xfffffff7, 0x3], [0x0, 0x0, 0x3, 0x8, 0x4, 0x0, 0xffffff01, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x3f, 0x2, 0x4, 0x0, 0x9e, 0x0, 0x0, 0x101, 0x0, 0x7ff, 0x3f, 0x0, 0x40, 0xc8c9, 0x0, 0x9e9, 0x7f, 0xf22, 0xfb37, 0x8, 0x10000, 0x7, 0x800, 0x0, 0x0, 0x7, 0x200, 0x0, 0x3e, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6f, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x4], [0x101, 0xb7, 0x10001, 0x4, 0x5, 0x8, 0x7, 0x9, 0x0, 0x401ff, 0x0, 0x1ff, 0x0, 0x2, 0x6, 0x2, 0xffffffff, 0xbd9e, 0x9, 0xfffffff8, 0x7, 0x0, 0x2, 0x0, 0x40, 0x7, 0x0, 0x0, 0x0, 0x3, 0xfffffff8, 0x0, 0xffff, 0x400, 0x2, 0x400, 0x9, 0x0, 0x8, 0x80, 0x0, 0x0, 0x328e, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90e, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0xffad, 0x0, 0xd54, 0x0, 0x99, 0xffffffc1, 0x3, 0x5]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) mremap(&(0x7f00000c9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000066f000/0x1000)=nil) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x28, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0xa9, 0x8, 0xe, 0x7, 0x7, 0x65f, 0x0, 0xde}, 0x0, 0xc, r4, 0xa) ioctl$UI_DEV_DESTROY(r0, 0x5502) 20:50:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00043200007c002d"], 0xa0}}, 0x0) 20:50:04 executing program 5: sysfs$2(0x2, 0x1, 0x0) [ 1594.537723][T28154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:04 executing program 1: sysfs$2(0x8800, 0x0, &(0x7f0000000000)=""/124) 20:50:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000700000010"], 0x20}], 0x1}, 0x0) [ 1594.705873][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:04 executing program 1: sysfs$2(0x8801, 0x0, &(0x7f0000000000)=""/124) [ 1594.861023][T28158] input: syz1 as /devices/virtual/input/input6 20:50:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe00}, 0x0) 20:50:04 executing program 5: sysfs$2(0x2, 0x400000007, 0x0) [ 1594.991322][T28177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000003002d"], 0xa0}}, 0x0) 20:50:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000900000010"], 0x20}], 0x1}, 0x0) 20:50:04 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0xffffffffffff1970, &(0x7f0000000000)=""/88) 20:50:05 executing program 1: sysfs$2(0x8900, 0x0, &(0x7f0000000000)=""/124) [ 1595.246695][T28193] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1595.271820][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1595.363166][T28202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1596.064645][T28158] input: syz1 as /devices/virtual/input/input7 20:50:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x5, 0xa, 0x4, 0x2000, 0x8, {r1, r2/1000+60000}, {0x1, 0x0, 0x6, 0x6, 0x4, 0x0, "0defb3ad"}, 0xfffffffa, 0x4, @planes=&(0x7f00000000c0)={0x7, 0x5, @userptr=0x7ef, 0xfff}, 0x0, 0x0, 0xffffffffffffffff}) fchmod(r3, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {0x40, 0x3, 0xffff, 0x4}, 0x50, [0x54, 0x1, 0x0, 0x0, 0x8001, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4cf1, 0x3, 0x0, 0x81, 0x0, 0x0, 0xc1d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0xff, 0x6, 0x1ff, 0xfff, 0x9, 0x0, 0x0, 0x2, 0x890, 0x9, 0x7, 0x0, 0x1, 0x9, 0x7, 0x7, 0x0, 0x2, 0x0, 0x0, 0x4, 0x9, 0x6, 0x1, 0x3, 0x1, 0x6, 0x4fc7, 0x0, 0x0, 0x0, 0x400, 0x8bc, 0x0, 0x8, 0x0, 0xfffffff7], [0xfffffffc, 0x6, 0x1000, 0x3, 0x100, 0x0, 0x2, 0x0, 0x4806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x6, 0x3, 0x0, 0x0, 0x6, 0xc, 0x0, 0x2, 0x5ee0, 0xeb, 0x5, 0x0, 0x32afa8f9, 0x0, 0x9, 0x40, 0x4, 0x5, 0x0, 0x800, 0x4f, 0x4004, 0x101, 0x3, 0x9, 0x5550, 0xff, 0x4, 0x0, 0x0, 0x8, 0xffffff9a, 0x400000, 0xff, 0x8000, 0x2, 0x8, 0x0, 0x0, 0xf684, 0x3, 0xfffff000, 0x7e, 0x0, 0xfffffff7, 0x3], [0x0, 0x0, 0x3, 0x8, 0x4, 0x0, 0xffffff01, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x3f, 0x2, 0x4, 0x0, 0x9e, 0x0, 0x0, 0x101, 0x0, 0x7ff, 0x3f, 0x0, 0x40, 0xc8c9, 0x0, 0x9e9, 0x7f, 0xf22, 0xfb37, 0x8, 0x10000, 0x7, 0x800, 0x0, 0x0, 0x7, 0x200, 0x0, 0x3e, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6f, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x4], [0x101, 0xb7, 0x10001, 0x4, 0x5, 0x8, 0x7, 0x9, 0x0, 0x401ff, 0x0, 0x1ff, 0x0, 0x2, 0x6, 0x2, 0xffffffff, 0xbd9e, 0x9, 0xfffffff8, 0x7, 0x0, 0x2, 0x0, 0x40, 0x7, 0x0, 0x0, 0x0, 0x3, 0xfffffff8, 0x0, 0xffff, 0x400, 0x2, 0x400, 0x9, 0x0, 0x8, 0x80, 0x0, 0x0, 0x328e, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90e, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0xffad, 0x0, 0xd54, 0x0, 0x99, 0xffffffc1, 0x3, 0x5]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) mremap(&(0x7f00000c9000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000066f000/0x1000)=nil) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x28, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0xa9, 0x8, 0xe, 0x7, 0x7, 0x65f, 0x0, 0xde}, 0x0, 0xc, r4, 0xa) ioctl$UI_DEV_DESTROY(r0, 0x5502) 20:50:05 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00043200000a002d"], 0xa0}}, 0x0) 20:50:05 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf00}, 0x0) 20:50:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000f00000010"], 0x20}], 0x1}, 0x0) 20:50:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x410802) syz_io_uring_complete(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) preadv(r3, &(0x7f00000001c0)=[{}, {&(0x7f0000000040)=""/254, 0xfe}, {&(0x7f0000000140)=""/114, 0x72}], 0x3, 0x8, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="0100001d294ccef1fee3abc58cd12da808831c9d387948000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)) 20:50:05 executing program 1: sysfs$2(0x8901, 0x0, &(0x7f0000000000)=""/124) 20:50:06 executing program 1: sysfs$2(0x8a00, 0x0, &(0x7f0000000000)=""/124) 20:50:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000006300000010"], 0x20}], 0x1}, 0x0) 20:50:06 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1298}, 0x0) [ 1596.707503][T28245] input: syz1 as /devices/virtual/input/input8 20:50:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000025002d"], 0xa0}}, 0x0) 20:50:06 executing program 1: sysfs$2(0x8a01, 0x0, &(0x7f0000000000)=""/124) 20:50:06 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0xffffffffffffff66, &(0x7f0000000000)=""/205) 20:50:07 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x81) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setreuid(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32], 0x5c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x1, r0, 0x8) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x437, 0x7, &(0x7f0000000880)=[{&(0x7f00000003c0)="3139f88d677ff0b4ac300e5bd77f6928d0be8f0e5d46e0c53d19d9b53549f1a23ed71bd3f663a9d12535c59a48996d31c25e6110150088708f86e022d0069b1f4496aaf748ab266c3d84296b1b2c90203e0a07f33bccb34f50714cce110384d15fcd72833260b65e000cfb3bfc2b4bdf290d7c2106a1c6afef3bddba6d15741e04ee0f505a44605626f3040d763cb77c7cd4a31f2a5851c85e02bd335290e9f73475a9da5811786d929b5a9278f8ecd397284f08", 0xb4, 0x40}, {&(0x7f0000000480)="c52b60433562407a3a35661b5ec0401c356a241d8252131e36229e8474fafba1f4b0c53a9c95428639b8442f52795b1165eeab2526b4c26147960caa5497019a9b10702f3365b93ae2ace60da94cfdcf37af21a9185667178b8c6ba6e22639529e3f95bca6a0a6e817d70260d64f4b60c7e41189c34f527c45c370f3c4324b8c25d4af37b39b623b071d6c14649d91e6f1c36e4053f5ec02ef280b0dc5bdb4b8b3f28f52ced55df5bcb4aa7ac789f4b1b177e561a60cc9be18b0c4c58e46424194466530fd819660580e9ed64345a747c9bb7267c9c9fba8f683129cc51df91dcca83dd6", 0xe4, 0x7b6}, {&(0x7f0000000580)="8b9dbfd4f6e6e722db4c152b1e5f1fcab65d9d1bb7b8162ad1cd70efe982bdc128ffbef57f155ca563fa7b67803f1eec460e63db04937f2cd14ae01840321fb5fc655b20324b58993c75a2a005d5491ce1327ea0fd464c2293c9181bea3b23673e1cfcb2e7ec0134f2bcb5f88858826b66bbf2db1e6918d5036a40fc7b77c0670bb31152064bb6253f5109569cad006012bd9b616220ae3dd258766fbb056a", 0x9f, 0x2}, {&(0x7f0000000640)="3033e475804ecedcfad7d1d20ba6f4a838e15c6bf3a4d43b1c20943422dcc24de2dd33a4d582f2c4547cbe3ea253b5bc7c7a022c67ead6f98b298fdcafc608c3910d9697e9", 0x45, 0x101}, {&(0x7f0000000300), 0x0, 0x1}, {&(0x7f0000000780)="62c097c6303826adece747dd8c1dc1aba6fdc9c509b08e219033c4596a553c02732c2b5b5ac6e1a87d45c4343831729420df245f782f3e73dcf96d25ac00a85bd18e73442c6382c5e058d9379e572a9ba87642f052088c4f5355a8f532f14eee1032a030db95d91f5138259655c2b62054fa6a11b04b04485df61d4f42ae2df11c14e619c2879b2516f9a1bc2bf3398cde81ef71bc080063d78ca2e1f9ac790a4d86ef265b7277ac478688d4719e1aef831a0f9c6b7c4d9dc36ebdabe96dc722665c7828f7a709822d500dfe9ff8", 0xce, 0x100}, {&(0x7f00000006c0)="73b79869ee88c64a7bd8e2c9139fdd8622b4dd780bcef648f0d8de9a2cd7b5b5b15ffdbc5ef4499db456dd01c1484c07715029", 0x33, 0x1}], 0x806, &(0x7f0000000940)={[{'#+@.\\/]%*@]--'}, {'..$\\&'}, {'system.posix_acl_default\x00'}, {'wlan1\x00'}], [{@subj_user={'subj_user', 0x3d, '\x02\x02\x02\x02\x02\x02'}}, {@permit_directio}]}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000400"/14]) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 20:50:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000f000000010"], 0x20}], 0x1}, 0x0) 20:50:07 executing program 5: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) sysfs$2(0x2, 0x0, 0x0) 20:50:07 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1f00}, 0x0) 20:50:07 executing program 1: sysfs$2(0x8b00, 0x0, &(0x7f0000000000)=""/124) 20:50:07 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00043200007c002d"], 0xa0}}, 0x0) 20:50:07 executing program 1: sysfs$2(0x8b01, 0x0, &(0x7f0000000000)=""/124) 20:50:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000003) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r3, 0x9ce27000) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2000000, 0x12, r4, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x11, 0x20, 0x200, &(0x7f0000000000)="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"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000580)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f0000000540)) sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x2, &(0x7f0000000440)=""/86) 20:50:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000003000010"], 0x20}], 0x1}, 0x0) 20:50:07 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2000}, 0x0) 20:50:07 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074000a"], 0xa0}}, 0x0) 20:50:07 executing program 1: sysfs$2(0x8c00, 0x0, &(0x7f0000000000)=""/124) [ 1598.401879][T28311] loop4: detected capacity change from 0 to 7 [ 1598.425864][T28311] squashfs: Unknown parameter '#+@.\/]%*@]--' [ 1598.569532][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.581371][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.607241][T28311] loop4: detected capacity change from 0 to 7 [ 1598.614470][T28311] squashfs: Unknown parameter '#+@.\/]%*@]--' 20:50:08 executing program 1: sysfs$2(0x8c01, 0x0, &(0x7f0000000000)=""/124) 20:50:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000007000010"], 0x20}], 0x1}, 0x0) 20:50:08 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3e02}, 0x0) 20:50:08 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740117"], 0xa0}}, 0x0) 20:50:08 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/137) sysfs$2(0x2, 0x1, &(0x7f00000000c0)=""/90) 20:50:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x2011, 0x800, 0x0, 0x6, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x20000000004, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@ipv6_getaddrlabel={0x24, 0x4a, 0x300, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) open(&(0x7f00000006c0)='./file1\x00', 0x0, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4000000003ff, 0x79d902) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000017020005002e2f66696c6530"], 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000d00)=ANY=[@ANYBLOB="0006d752102f03a29af200000000040000000000002dfc9e8209d3a07961b100804247f1dbc2343b42682835cce7a0531e1fc614591bbad12edadd52a05892a49b530dbaad6a7d335b64ffbee9fc6355616df6ad837911a20cf53d65fc700a4033587a9e8ee5", @ANYRESHEX=r1, @ANYRES16, @ANYBLOB="13bf42e8741059e6d9ec472dc9f6e199af9f6e7fdda39e78c17e99699101d88c81a429a647f2edb06aa2463bf2d4e53e61a5633ebff264454ed2e8802abf5bc7d3b2a51f7dd19f90d53e50cc974ca3024a82df3326f731b0fc7827093827f599d3d1678fc403f14e38916d3c3f2b4d528ddba07465f5955b7042a6462b0ac3238b60d0c2c2d0e842e82acc21c08de5d41535", @ANYRESDEC]) mount$overlay(0x0, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740), 0x440, &(0x7f0000000840)={[{@nfs_export_off}, {@xino_on}, {@nfs_export_off}, {@xino_auto}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './file1'}}, {@index_off}], [{@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa#\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff8}}, {@dont_measure}, {@dont_appraise}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0xfffc, 0x5}, {0xfff2, 0x4}}, [{0x8, 0xb, 0x60}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0xffffff93}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x47a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40480c0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000500)='./bus\x00', &(0x7f00000005c0), &(0x7f00000003c0)=@v1={0x1000000, [{0x5, 0x5}]}, 0xc, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="740000002800199f900482cc50be550028bc70102a22e8767e6dade68bbeec509c9279e69abfe925f58be438eea74c156c8e023a484e5afad0d6e450295e7ed55c93d46eb311b4cae4d9a28aee502c77b60435e25be26d56b7a90430583f0bb2f084800e28cb19371f", @ANYRES32=0x0, @ANYBLOB="01000e0009000b0008000f000600050000ff00000600050005050000090001006866736300000000340002001000010051ec0000000200000000008010000300c30d0000090000000180000010000200080000003509000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x24004000}, 0x8001) 20:50:08 executing program 5: sysfs$2(0x2, 0x102, 0x0) 20:50:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000009000010"], 0x20}], 0x1}, 0x0) 20:50:08 executing program 1: sysfs$2(0x8d00, 0x0, &(0x7f0000000000)=""/124) [ 1599.128840][T28395] overlayfs: unrecognized mount option "fowner=00000000000000000000" or missing value 20:50:08 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3f00}, 0x0) 20:50:08 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074022d"], 0xa0}}, 0x0) [ 1599.240445][T28395] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 20:50:09 executing program 1: sysfs$2(0x8d01, 0x0, &(0x7f0000000000)=""/124) [ 1599.285832][T28408] __nla_validate_parse: 17 callbacks suppressed [ 1599.285854][T28408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:09 executing program 5: sysfs$2(0x2, 0x6, 0x0) [ 1599.397332][T28403] overlayfs: unrecognized mount option "fowner=00000000000000000000" or missing value [ 1599.447159][T28395] overlayfs: filesystem on './bus' not supported as upperdir 20:50:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000f000010"], 0x20}], 0x1}, 0x0) [ 1599.500711][T28422] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1599.535054][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x2, @perf_config_ext={0x1, 0xffffffff80000000}, 0x0, 0x0, 0x4, 0x5, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) fork() r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/srp_host', 0x240000, 0x28) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnetconf={0x3c, 0x52, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x10000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8001}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c080) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) 20:50:09 executing program 1: sysfs$2(0x8e00, 0x0, &(0x7f0000000000)=""/124) [ 1599.643001][T28422] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:09 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074032d"], 0xa0}}, 0x0) 20:50:09 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4800}, 0x0) [ 1599.738595][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:09 executing program 5: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5768}, &(0x7f0000000040)=0x8) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000001340)={0x0, 0x803e1100, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r0, 0x31, "932d030de89b52ec878ac4e73849e6cf411d5e17cdda0c5b9aa20e4415c8253252198844606455b0af3fa1360a7620383d"}, &(0x7f00000000c0)=0x39) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r3, 0x6}, 0x8) 20:50:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000003f000010"], 0x20}], 0x1}, 0x0) 20:50:09 executing program 1: sysfs$2(0x8e01, 0x0, &(0x7f0000000000)=""/124) [ 1599.989257][T28446] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1600.010210][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1600.050573][T28452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1600.142973][T28462] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:09 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c00}, 0x0) 20:50:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000063000010"], 0x20}], 0x1}, 0x0) 20:50:09 executing program 1: sysfs$2(0x8f00, 0x0, &(0x7f0000000000)=""/124) 20:50:10 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$cont(0x7, r1, 0x5, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x20000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$phonet(0x23, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r4, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0xbd, 0x1, 0x0, 0x0, 0x9, 0x89401, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x18b02, 0x75, 0x0, 0x7, 0x0, 0x1ff, 0x9f, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, r3, 0x10, r4, 0x2) 20:50:10 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074042d"], 0xa0}}, 0x0) [ 1600.342191][T28469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:10 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d0001000000000000f0000010"], 0x20}], 0x1}, 0x0) 20:50:10 executing program 1: sysfs$2(0x8f01, 0x0, &(0x7f0000000000)=""/124) 20:50:10 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6000}, 0x0) 20:50:10 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000030010"], 0x20}], 0x1}, 0x0) 20:50:10 executing program 5: sysfs$2(0x2, 0x800, 0x0) sysfs$2(0x2, 0x5, &(0x7f0000000000)=""/103) 20:50:10 executing program 1: sysfs$2(0x9000, 0x0, &(0x7f0000000000)=""/124) 20:50:10 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074052d"], 0xa0}}, 0x0) 20:50:10 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000040030010"], 0x20}], 0x1}, 0x0) 20:50:10 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6800}, 0x0) 20:50:10 executing program 1: sysfs$2(0x9001, 0x0, &(0x7f0000000000)=""/124) [ 1601.239386][T28478] bridge0: port 3(team0) entered blocking state [ 1601.249928][T28478] bridge0: port 3(team0) entered disabled state [ 1601.314194][T28478] device team0 entered promiscuous mode [ 1601.330903][T28478] device team_slave_0 entered promiscuous mode [ 1601.342591][T28478] device team_slave_1 entered promiscuous mode [ 1601.366426][T28478] bridge0: port 3(team0) entered blocking state [ 1601.373700][T28478] bridge0: port 3(team0) entered forwarding state 20:50:11 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$cont(0x7, r1, 0x5, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x20000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$phonet(0x23, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r4, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0xbd, 0x1, 0x0, 0x0, 0x9, 0x89401, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x18b02, 0x75, 0x0, 0x7, 0x0, 0x1ff, 0x9f, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, r3, 0x10, r4, 0x2) 20:50:11 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000001100)={0xb, @pix={0x4, 0x7ff, 0x44495658, 0x8, 0x6, 0x2, 0x4, 0x0, 0x0, 0x1, 0x2, 0x6}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1000, "61a5fd9ba7c01545437817523d97cc890f197b78158e231bf8a8f4bc9672180de8dc2bf75118b722a5e21825e3511c8c4fa33fc34a2bf33864ee99d0cf0a14907c1a373e9baa4120d11f68c7152e174903b4ba41ee6fd8031aabf074c72a20ba3d34c129994d12e5124b705ff12e02cefb6b19957c4e0edc89593cb23729b7ee1935d3dc482b4005438a8a94541439426d39bc39fd94a12682ec84977cb86d4d6a788336bd22df67039bd6074d2d8421cff1b7b0e336c5f7cc79c60c3cf1d40a41774a16cf47c8f0c6b0a79ddf19590cb3b26b73f0098739e11f8847af15f932ec610fe82cbc05ad6bc19618cb407fe85e781aa31fb077778f03de1835ff797c95fe175dbd138b918707c32b6f7011b273b83eae9559c06b8edb837debe5aeff68c6f6f72ce3409c05f407145cf7036b174a8adcc64c89f9646c2a7c3064b2aea7428d7be9d595b5ec7cc3c13b0bd037a052381dd2a688c0fd71b45846c31502b2adc79ab229f8087d4c3e1d78d412bc0c29bb4cee80855bcce18d8ebe08fcddda5605bca3c163d601bcab553a7c8a1b43cae4127e7f35b7267cc89c1fd42af82e3551886c9df7daaed6e7a08e7b2d0c342d8ad381d476e9fb34e7a7d23fde85351766b7209b5735299ffc04f0dba58935cdee417baf373134bc58899e4a726f78fac4c7e0212a4b4bf244a0c7d548339012bafc254607eb877696a90be084290e44166316d210d0a654dafe40a17d18d40f9f048a9a338598b747eeb2ec764554be0de0739c977743d10fbc99b4d81f835a3404e2e65181e2485bfe33ff00701c87a57d15857d17524e6384741a93167a8a7dd2924346ffe4f56ce87829b332dd9eeedfdde8eccb3915c4f1ef134d241b2e25dd28d544f0b07109d49091e1fb9938210d65a5a32a3ee40770dfda954b811a1a50e896f9c7c59a8c7b5f4f0c06367a087fbdc09f07d68e43ddca371d2dade8763ff744a112869e4bafcaaf366a40f656232093ba89346b94d9d6d50edaf04fade2062e77e18e6551332ea8c9bfbe08aa366dbcb57bbcbf50ac9dd78ddfa93534c15c8147ad38cf89c0583422b2ac1449781e05ad0b865e7de4d78f02541ac6f5f999dccadd4a6d6017f014abbf8f1f266e4b538bfa353f5527070cf929f7bf31fdeafad67996cb19bfd292e7c581924361c1e893bc427861273fb2e85ee9372bc42e8cfd0c1b31669883ed97281491e83ae61ed4ce06a821db5989db27ea1b4c83399e537ba6bd93afd69d12b6eb112552c1697249e4b88666cc93fcf9452314e759ef9f0796686138d592883c8e0f9503267d4ce544885cc7873086ac586e98db2646809d798ae78aa0df39d0db75832968ef4c1e5ec5bbc383dd6c4394fc4244a4a6ee866bc1f952e1d3b2e931f60c50a36905789d3abb8cafb8c30d89a31b28b5a273dbf7845b7081c8d0bb15fabda05f535cf6831f6f183c864157df36e8ca4d95eea93f6e054f23b515386b807e1594f111f47c467151f2969de18d7e61a21e8384bfb68ec9f372797b7224bb86111e1445216bda6be0941ac577d73c8e68a8c8d31b33d9226c08c4dbf6a3ff9a41973f5da461f52fa63a00066c38b39573d519a46c864d96d3c8cfce2fe6f8fcbf20d115974cb6792c64afbd95101f16083812ea549240b6b965cc031981eba1296dd606f155faecd55268a803c70ce128476d7d30dbb171d4f03b63634b464e76c41211bab23d7cd69ded0455ff0052abffaddffd9068994b5465d8057bb509a7e947d02d6b7232d92d771f34034b46f4e79c31ca1329b51bdbbcbefa889222d9e855aa496a3b6125a79ff67da48c39b5e40065e294cece3ac872f0814d355a085e081e2214d447dc2431900587186384440cd29f5ace79a0f9bc555cea37b4ce5ed4fe417f063a66cbff5924a7587de39366c27ef1f59bc414b6cd728c21b4ad6d56d35a79b0bef9fc0a18f6bd98f8341d621ca711c10d1fbae6c0968b5f22e1c66013d9acdb759edfc1f8c6ef17f6e6baf64bab6265764cbf4b743f285481d7f1cccf2dcdf367f66b4d2bed51acb0cfb66ae22222bb9370c3e991bd94b046c7471b3c83d9fc8cca5ecc624e7f97ca8814178eb87746ed5374b0a3ef672552131471f7c4b616ce65de515f1e298f9d6396894e6696cdab076cb6b4ad43994f6d723482765370f03c4b62691768206d491f69f223d351c50205e070d1f227b6a2a4311fc4a75092521735b5857e907afeae4c8f89e40e2729afd71bc1fb936907ee4a8470d9155b2958bdcadfff065f6a70d1b0f5c5da76bb2e9bbb6f1e65f9dc36f05c459d610ed74a550eada874ec02425bff13c97f00e1af124284773cae8d252f5699ed831300b558c74d14ec0141644b20ca6875cee8185b331d82762914fb0018b686ce460a6785c34c7bb7bc29a0c4e70207ef606fba4744ceececee480e130e43185262cd71c955c97029231ce1eb88c2d16fd055992dfb49467b57ea5929afdb6ff17251023245b40f7d2d8a25fec689046cd03332e26be009cab90a399d7ba46182a3fe6f14b97bb925c196daef655d27c445e177aec6b45eb696315c3123a561502862f009366fd145d3b54f842fb02c419ce7b8f03a313a883864467f7afafc16e755a0ce0b1e0c428751a41f1498998f3036e517b7527122df48c01b1b1a3127ff1e5b241960fb581adedd9bd2f1146c9bd74a3bd75ce2027d4a0a617e13e7105c25133f18ca9cdac1f399f8ceb06766230dbc0bb4b284c9ba6015628c9fd0a2dc99e8717fdb75ff59bc7bbd7e09ac22925ac134f74f6d30642a80741f61b3c5e95d7ad33e0267e5200caa2bbb200525721db3315fe129930be97cf5c5349d460eb01792f3eb603c6211e0a4d51141e53e329c76716e0891541e56f52b947d6c633c815dcfbc8dba9a70741cbf9d60f4f366e700d24e2c00ed08b116723e5ab48ea3addafc454b293eaa49eaea9beb4ea39d1294f99d942458e7274649e5c6faa77b39170e63c0d8ebcfed95e610c8a71e540b547c4fb75bb0fa85269568098acc7c994e2f2073df6bffb1b33eef6cf62904ffcbf50c88b2fbbf0ffc5f7a41a7bfb30c00c056ec5d012c979aeb63220e390cfd2e00145d06e1af3d1e68a8c5c28f7cca87ebb4b8e4342b31c5585279475e0a34a3e19e416fdb8facd7031c6bbbfaddb0cfe19fc35932a7867f87e8e0b3a7986fbc57b53e1672463b00c4a8a4182528767b7e74cd2ad46f359dbf2da96b2f260b4aaf756189515d11f85b5be087f0a5b75fc3ec25c5bbf5e33ef73284dddc1d84c52cbca97c02a8848360d8f0c2c164303dca4378501dcef439d943ad2a0928d0a92343c1a31398d4f8c55a8d5e9fa5cf5848091ac2ae7ee6eed04e52972dda5ea4f8182e7ae2256d683947936ba58d69c5d0367479f18ae9ea84bd2c4e6b442a5f028ed70910c730d5589f3f9559190e353ac7515b674a433fac8bbcde8e77a34731fbde25c148ab1194e7790a63d9da094d0d56e55885cf52b70138f6f9759482d95cd6982cf4464ce08a797965b92f4e04ddf75c4db92b7fc9188806924418882bc4a240a43d0805936ff83cd9bad88787f48f00090c3e0ab12c0fc726e2332a2d033d888be9d2c13d90d0860517988a262575ba46cc1b8f02087d73e2b1daaeae301d89f03b69039fabf86d3b56f0c2c894a1c988acd43fa466fd62df74958f1ff3d6833a99c4b96e768abbda20bbc494848023b4f43da90a0640cb903b1c40c7519a6fe1057312824dbab5d3af382e6086d2c8ea57412c06993b86d18d8e3b14fc376182a3a15b28df71bbf2191f27a44eb715b45ab11b7144ede2326cad08d2cfebaa438f918d2573866459c78fb2aaf2d3c9f4afde91215d8e975e6f2d5758056906dfddac65bac08c047292c3c3a34c3c4197dea7853b4d80a37e6485255a8c8ff21b5db58bfa0bbf48ba9f45d9de1822a46c3bd7f368b57e3248d6e9d89be5fa71af472aa6b277ef9f44f0691fdfe6e871b4bcaf2b14b7d82e9039bb792967955149f3a41fab6dc378509280bc4d728a503176bbf0eb7f5f9f06ab13477706aa140fc4ad98e7487f228b56f01404ed1eaaf36f3783e718e1b9e2e56b6b3af50ed181c5ed9804ea8e3070479bdf2dec165564c4446b45072a97d3577465ea0902d4706edba205f65cfcea01cb587e8c4d543076dd7a9fd6097be4c3c2436b65f1caae88527775fea28d8801c5f611ec919a28297d61db770ab43fb86b88cad96cb6ee611717d8b4c83425c735fe8dcc7e5b91c9c83122e70ff8489df1c6517a564d08c8b400247ae2dabc8d99bfedace7f63c5f9c6217b7e94dc05de676d4bc3de3ec174c6cdbe2bfe20c23df36e6f2ca52f77f99e1a8eb6de814d873437cb57e1465fa098fb58d303ee8c088bf5620c4e20a74726e37347456bc681aab81f0b22e8e3a7c4e60e4bc3859de339a3c0706b4204ece5fc4f70fa505bf801e184175a994c5317414b79ee6d07a709291afaf549e9d55efa0825d70e14bf54a104b760690cdc8e3163d7466edc41a3cf98cd38b8145ad7f0902593c718091ea4c551087eef4304cf12992e49b9f8756c7eb89a6bfeb315d7eb5ca32c9a4428c47ab5b72a09b3c00ae962dde6377e6cc0e9da1560d308e1eb1143a9ac2b30249fac52e00fe3325f11094a2021167c4961408900aa7bae32644125d14466a956b8fd8562b85ceecc1d59d1b43154f0f9168a8863192caa96dc96a791e523a7b383b4ff9aa30a4e453a234efdf7bd79c1690b8f616f30d7f45dc3530afa36de6e24be512df3fbf006d79f67c2ef50141f9c4a3941f6a652ee404de17050f43b7ce7f3778b6fb4bf481d6b39654966ede600400b2296643f0452bede52f208bf399fa2600f94743bc015d64faad02620743bc9b9ba77d4bbeb46375dc7b11010c9143a3a1e34f2fdd95c78825e492619495d76bff03f625781764d3e274ca070ac24cd5bc0b6bac8436470ce53a7a648470785e00c037e4078107d92d0035d8dcd1d6117112c4e8d393150e10249c8d0c80d647195e77dcaec4c71a0f86c5d3aa2ffc06d33e93fa315825e69fe5150b60a65820727e54032fc839e0515bfb81d7da6ad45e7493aae28221929e9fe588380904baaa8b74f8d5073ab12d377c6d9dee90e605ffdea80da4c0be10ed3c3d2dd38f33dc4f3fdb22172462443d8bdb7816b501868137b6d209c6c4c12329ef7a9dc14a8a7035942c9d6c449caa2c0ab25a15831518246fd3a5d35c2bceefa94a4ababe080a6ebab1f335d1bab7161d0d88336fca29e2f99a1f9920ae3659449c48994a57c2311e8ea28cd72d2aa3137facd74d1494c8279a8cce02bab3ef3a999b71fb2a5ba8c19c24b9a57cc7866faf94bbef65908d00c71dbe7c401ac45015d55eaa9cf3577267dc966e4a82a42d7858d5e6cf0752a7289fed5affaa264d2a721b85ac932ac457af0def19688a5798a851b493121a9003de5e67beb4d2e24ee6770b2b6ca522c894965b2c6152e7d233ce32baa9bf99e9e69bddb33e9f4103b2f721f1adb9c1cf51b61dd25657d2a9bcabe55e621d2b9df8b440a6598c9b6ce1be3b33194be0239c7340e2135da427b6edbbf5ba141ae7cfd25b231782c92042120b990925a4b4afdb030cce3cd68c9630cc9e47ca6e272ae9b200afb95816d12bc88e348f10de9ffdb025be7911131b7f1201520d269f6556222bc499817384ad8a777bd8b96dc679b431da3ee3d493c172f4729f64c2fa89b3527f298db36b2f5696e2dc4cb42b939bf7511cd0e15879ff"}, &(0x7f0000001040)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001080)={r3, 0x4}, &(0x7f00000010c0)=0x8) sysfs$2(0x2, 0x1000000000000, 0x0) 20:50:11 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000003400010"], 0x20}], 0x1}, 0x0) 20:50:11 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074062d"], 0xa0}}, 0x0) 20:50:11 executing program 1: sysfs$2(0x9100, 0x0, &(0x7f0000000000)=""/124) 20:50:11 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c00}, 0x0) 20:50:11 executing program 1: sysfs$2(0x9101, 0x0, &(0x7f0000000000)=""/124) 20:50:11 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000fffff00010"], 0x20}], 0x1}, 0x0) 20:50:11 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7400}, 0x0) 20:50:11 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074072d"], 0xa0}}, 0x0) 20:50:11 executing program 1: sysfs$2(0x9200, 0x0, &(0x7f0000000000)=""/124) 20:50:11 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000110"], 0x20}], 0x1}, 0x0) 20:50:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$cont(0x7, r1, 0x5, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x20000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$phonet(0x23, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r4, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0xbd, 0x1, 0x0, 0x0, 0x9, 0x89401, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x18b02, 0x75, 0x0, 0x7, 0x0, 0x1ff, 0x9f, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, r3, 0x10, r4, 0x2) 20:50:12 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) sysfs$2(0x2, 0x0, 0x0) 20:50:12 executing program 1: sysfs$2(0x9201, 0x0, &(0x7f0000000000)=""/124) 20:50:12 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a00}, 0x0) 20:50:12 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000210"], 0x20}], 0x1}, 0x0) 20:50:12 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074082d"], 0xa0}}, 0x0) 20:50:12 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000310"], 0x20}], 0x1}, 0x0) 20:50:12 executing program 1: sysfs$2(0x9300, 0x0, &(0x7f0000000000)=""/124) 20:50:12 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9812}, 0x0) 20:50:12 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xa9]}, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x14) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x40) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x7, 0x80, 0xa1, 0x0, 0x710, 0x4000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xe3}, 0x4, 0x5, 0x2, 0x7, 0xae38, 0x8, 0x4f3, 0x0, 0xdcd, 0x0, 0x800}, 0x0, 0x5, r0, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x34, 0x26, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0xfff3}, {0x4, 0xf}, {0x4, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x4) 20:50:12 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074092d"], 0xa0}}, 0x0) 20:50:12 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000410"], 0x20}], 0x1}, 0x0) 20:50:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$cont(0x7, r1, 0x5, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x20000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$phonet(0x23, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r4, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0xbd, 0x1, 0x0, 0x0, 0x9, 0x89401, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x18b02, 0x75, 0x0, 0x7, 0x0, 0x1ff, 0x9f, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, r3, 0x10, r4, 0x2) 20:50:13 executing program 1: sysfs$2(0x9301, 0x0, &(0x7f0000000000)=""/124) 20:50:13 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000440), 0x6, 0x52100) bind$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000700)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000280)={0x0, 0x1, 0x200, 0xffff, {0xb, 0x401, 0xffff, 0xe00000000000000, 0xffff}, [0x80]}}, @name="b4a2e578136ab7ccff34fa55f70760dc9974e3c7128c5cabc7b5471cac1b99825403574c2e5cb82ad2f7c31a59845873fcc5349f7df89938e586ad6fb38eef46c27bbbd595d40956eb804e8719f4347ba0fa6e225914b0327fda97e80dfe404caa1343f0c65c11318713e18fd24f4004a6dd2ba37faf316aa8a0dad181659dffa4af5de0219711324d466f9984f6537440e460a0a8d890a2043ae8a973c87b9bd4c3d4d992a2d9d170b72bc8d76586f514cffed8650729f6cf15909fe0ad063517d4eb62357fa79edb34f58ba2ee985a5ba7aa6963621160eb2c0ae62a9ffb76e512ecc8e2722bc1efc2e2aa92ec2d4b4d2356178ed9748912df78840b2565a0d602df394d7d3792372ed18111a6b6f8bae6561b6252357a2d737ca640632e67018d1f75036a53e54aa84c5f4c5a62fe4fa7c36288faea49e71bc5cb7cd04ede26bd8d1d0d99edb3c932e6e793e81527f64077de1dbbd30042b5a53e7460d684545376a159acae1482fb2ad150bd5e14f20cb0823ef07c8e472668edb5ca1259b4e7a01182e469ad5de54884584ff85eac443c2e56c6bb1044b71782f9ac1ff7fe63e04507227e5add93979c9a336f28a6009c5d667fedfab7d5fb5864fdc8842f8a9c63ffee9f9ba5465d163a656f05f69fd0b1be13b98cced6cdefe49b5eeb11d7b6139bcf880127bde021448ac7859c894e5dfca3b517689a678a7bc15ccd68f5cbb0a57ab127961b576ff6748f69229f72f7de131b1a7905bd8403c22dcb67cb8fcb6d2b2eac0c0f7c2ae366f920888b95630f4de876d5476ad5131180792f16aa4f1765d82bfa8acd737636fe41f14410eeae4c673fcaf139e197d50fcac9dcb98b48d488d2343d0b9d45d43d6ff9371b882db65775c9ca17d7ede93fb2184959dfdff61a4e860a41c2710d3d0e1ee9871e091b1c4e340a54fc124895bad96719d203601da790933f30772d28bff26d85395ab754fe34757ca59adb80193beaf163ba77b1750e9864cea8a5016e615b2e1b133058473b8018de7cd86413b55480f248d04606d33e6f52e5370f9ed071775fec2c718d3b106654eabf259b487063e000d67425ce94633fef01b7709d67cd31b7ce70813c26bb371cfda9a73e0d01a87786b2f74f6f9160729c1d88731235f22e7e8b19d816f6a7c9dfdcde32745377d53a0ed738b7f2fcc2415dcd9d852d39288beeea0a730fd998dbd6d543d07e5d6ce5de9f6e9b724a884ecec9b120f81cdd7e4eb546b0e44b00743c3ffd18ad1ff3819ca11d162a64314fe88f5adbabe1d9ca40026a4cd6be92c0ec64cbac0694b8f7cfe6801af1e7e4276f8cfb5145378dd6605f5d35d1b4914db27c13680edfe508cbd7f95e46cd63f8f07225ec6c30533606f89c76861998baffb556026cb0007cdeb62d8404712d74361057f283d7b904e08bbeeac069fe042f0e01b0b77e816a864f20d3ac018759e8cc9ce5cdc95feed02bfbcaedc83cb885e7fb3acbcd20576916c89a3df69c8b03a0460ebfc0bc301280cd1c5e76fbd0872e5f2a26d0c1b680b3d7b9383b319164796880d2501b8b527771a0426dbe1e0ec5c36936d2b3dab2840661e2064d2845f974b6c85d71870057a42c1f760db619369540eb66470b2a5ac5c2dbc7b2fa94c5cb927bbc6cdcf771e988eb3d76b2c917a6042ac346b1f53b8d38bf4df49101dda9dc9ab4e01f3799d7bafc89bdf4f23868b5dd8e0b15a9959d68d31788cfbdabb42ef13c963d7e95a2113533b6a3ab08bc7ecb4c266e858c03dd38f727d6c91e9fdd2076cc1cca13c0828017b9c32f107771c48638d6ac701efe1b389727c3217b87ea1236d669bbc49d7946dc077323b68e4987401063dec46098956d3e27e7422955defe799fa597e178bace019eb9f4c60107900237e5bf3d6f43ad0a6e58a0d78a12fd3343bbc33e0d23fb572dade9cb60d3268fb1210bd5e0316f768fac2d909beda0235befabc199fe04f6cf8306755e3fe3237e4fc7368c91122b3e8d48ca321ae5d3250371bc6aa5a68ed9c63a1f0a51f77bb33029db84ae7ed380669dd43e534e359c00ae9c115828cb6644ae273a069abfbfa5344a0485d78cbda35961d1ba0c59caef4681b4d38bc50ebac4614de5be32df9cabcc7567839e3306e46860a5166771f0d8d99bcbb7143a95caa572d86d9c034a2eb26a653e284f2a62bda8525c993509a6f0b2ac8649a3d68a8a66cf1a01ad62190b6bdc3fcd7a981022be9dbe460900554b7a31506df47de9afd9565add2fcc2a9b52a62f0411f6ac779eba0c708df5d080a66e47dd19700858550c7d8482648f703f947ce323ca93b794bfc1f7bbacebf89d1ceaf55d8ae6f85ebb450a3a2489e9b7368907961691c5351a70f6a44c6c25ac88629a5a9eb76f9af4d06586fcbca9f79b360b0741460c6f25dc4af325d06b4843cc8d9943cfd3a7f12e01baa26190a35e816ec4dafb7684ab8e9a1764d154c0123bf1c252e445c718c637b490b2214866cd208ad94c401eb9c1b5a4c8249709eb1a4cb6d90b0f2ba7560ba2fe289826905cb8f2e471655a53f8a435da042b3b28593161b8e03f4bb467062ed27279073b7c43f457057bc6fd0d98974f744f3e2280ebd63617dc6fe50b44d30ddd8d42a107198b935b0a25a67324f0f04fabb30c695e15886871fdd690b8e1abf3ebb83d950bfe94f7f26a8be2e63f470208b61c9bef07d958dc3fd5d025d6800c848e0b5b11dc9fb33cd65c34e4afd10501a4863728c08bdd93cdc61da7dc6389db695a93d1f2fb754282982814214a3acaccf2f363b9f10ca7e096b58d6bfefab09db8b95b39c6d46ac148158af06664fb8fa75551f1cb5059b668ce0deade9a5ee6d33d7a7e0b1c175fadebeb3a264c1cc7eff5a7e6c4f85791153574e6cda3a94588be9ab253ae49627adcf30c519b3af14f5cc3fda00bab6bf413b84a6a2509b013b517d4bb1ab1f9580d32f67453264c93008afdb9b95261842fec35421be9b7c1c0b3f1ba9f7781854d7d34abe77959fab642ae5538cee39342766e1ea2ba10f134b989774511c35a6fc6c2879ca6983e8739e2891e5ec2858d8f4959526de5f6e9168817fc1779fd1cda252bcc86b5df784f8ec64f8d92303a63b0da6d58a8d38b491f6c027b4dda36aa9cace32f49b137ac41fb53cb4eff1dab79b0bb7a5e49d5172e4da9a167a28e713a56f798cd87ad16e51fbf322606524fae794f1b3118aeec6783918674265f7259570347e6486d9819367bb70b301272e8f7cf43b8fdfbfde82dd1687c6e5f2899b639ecec121558dd8227553a917c96956ee23e9872be219df8179056fa8f2a1c1bbee51bec047769b800e1cac08fc2c2a8969c8d1ab38b644af9d70c223ad3b459da25d5d10d778cfccacb1fd891f07b5d440e09b6b3a82620ba9221dc3878517349dee36a2296716ab691c52a619d983400a3e114817b90e704e55bcf1e24dfbda8908f65e2c04c9ff46bfd8542efe703b80e28bdf803e2ead0743405552a53008520641232a0d288dd0051dd93175690989b6ddfbc364138edbe5730e65cf27bb87196fa39dcf08629e87638c864f246db85a428998ab6995b958f5aea0221b47bf4a269416f7745165f4c91cd3bd6e2336ca2791960938f78fd4f344533bd23c19c35ab61b5eff5d4b1ff32fccb279467d7a5a66d4f1eb1ede89d501b6cfdf96971e5eec3afecee52cdf925077908b67aa5b85967838385cf608fb6accae90ec55d8c83c29a4f5da18bed429720a158021fae946bc0cb3a462d45fccc9d411697355e6679b14832cb2687359482e2767cfaf19881f7518b1cb0e9d35c5712ec5b4d37e29f7f354a3a656a8abb5367faa760525018d47bec1776f14a03769bce7c1209deffa7591ab8b308767bc449f6ba961299cbbc171899a15bc0a3559ff23631daf4189fbf5f96b044e4c02fb545e99d688010c2f4ed9ea3e69212ee8fbecd90641c7728500527edc6c9be9bdc8e0c24c72db261dc79c06339833c6ae8b9127c1dd9255b5be75bc7fc6cdfbee4789d20e60bc38f0298963c538da336221e2c355f52bc536edde413eef09fc9e64c159b8a94da2b327e74c7f3599860d10cfe60ed26f181b9fe3cdb90a12994c1b8517d5b8880aac721c61ef94d6a30d7db45ef31c4ec4943f29081bec193610b235530a71c8717aa60c32220165fb09ea15c98e7f610ebb0526de67078961e00a889e868eb6d03ca2e214788a45e70ad41207c3160c8a4d145b7374f823b7ed4dfdc86c8bd8626c713adda8f40eecd3792d49d00352f3d26cea95fcbbc5e3c8a9f9618455c70a987c445f17f62089fed5ed679024a405d62e8599c292881f9f148cdf64d5d205a12207a5bf21cf3119c62ae7036facd85e9ba7a1241cc9a93fa8155805bda10669349a5b2f7e2c9d13a9cea341a20e8b4162c800c741cf2957dfda4d15ef8dc73edc973736ed9f3c07d6240b705cb04517048ddc059c1946e430479a0d90786841032fc8c0fd6d5e7b883558729bc3d70a09cd2c650f61891c53fb2ea959f130afb30da2ed1d92e905b75953a1e6bcb7405fc2dbc4727906767184614f24e79937080b2fc9d1c437f2dc506156c2a85bd616cb90e891fc5ffc9af61cf109d2193df1772fc331b207c956b153aed416ecf58933a340f23c3d143b48dc636822c81c9427f923328147029e5eccefae5dba5f3c22aaf7c3bb66f9a94be28ca1b1ebb497a5e4ae72c9e1dc86e5ad6d54d057975cbd383d16ee03d0757f8c00902b6e59d835bd5d2e5223a8631b22f74747ad0c62af9ea96b7127f16233a53b42be2dca1b5d0669f860a81544b8d09edd6202c7915b73a3c2c75d04f8a8608e5b82ce1cb30ac1643952b7d285681967aff62e26b6bf9f9f8ee94b95f56a33c92ec4c3f0836d82653f42d3ab0f275113d52f381e8df44c91e71a315dd71101fcff896fdf279c42116df8861746579343be3cf3292ad5b439ec6b104387e43619decd54dde278ab35cf4509dda0f9e9393fce66486709830bec67d2ca0eb9bbc56745818301cb55a4a6ed462729f4d74bc466dddd43729ef0bc9471419b2ce55b968e9a6d41409b254dbac63b1bb11f08992c0ef0100b1adcd22ab73fca5f523945b73cd8d22a563c3c03b18d0dcf5f9f63940dcb447e227923122acd91c4af88ce51d01940c1c784d9f57ffddec9d3d9ef58845c4fa51f98e2080fbc92142db670e30334df470aa56303e1132fdfabc02b23d169b4642eee3de2926fe7dd6dd718b66f62b111ef1dbc2c0ce564a8abe5c7aa1636b89434d42468aab3754c3d30a1ac5e04b5b53b2a3123221771d2916ebd34a0646cf391de2ab4dcb65ed06523bc168e0658e396b1973ad69888e066d1eda5c75e9b1eddbaa748515dc8dfa3432a707e295619e690aed57d8a13525ba2822e85e155dd9fd82dad63b7ab9b43fc335d9de5d8634c60c4f4974da20c73a7f3e254a128d2393d219da7513128a228daa269f0773fde5c8ee9e41de11dfe264022bcc61c757b58787917fcc5da22b7c23bb091f33d91650a6a24b92c6ea45dd688a10c3bfbb98b4030ff1949c156758bcb1d2bf234538262d3d496a24f817286c88a5fe21774219376d45682bbe04bfb898da99f71b15d30518af58b1ad4a51eb5b2d2024fcb4a8ee41d7f1919d3fe93f5742183bf0e2d34cc7def7c55eb0aa2a463ef503968fdf18e281abfd"}) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2ca03c, &(0x7f0000000500)=ANY=[@ANYRES16=r9, @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2c67726f75705f69643d15c8a3843a03554f3d225d24b53ef1954c217ccdd947f6b2f2cca2a93a306eecf0393c9d495400ee1ec48fce3b3472841c3d6a357f03544891ff39a1c5bf41e15971663c10f2f344e1a6dacf7ee82f516e67edadecc01d2a157fa6ba28c10b2e505c7a04ee912b1614542e46e43d23e7dad43949c8a86ebca8a093cc1260b89054c9ec008a3f0b1d5fc29b", @ANYRESDEC=r6, @ANYRESOCT=r10, @ANYRESDEC=r7, @ANYRES64]) chdir(&(0x7f0000000400)='./file0\x00') connect$rxrpc(r0, &(0x7f00000004c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @mcast1, 0x3}}, 0x24) sysfs$2(0x2, 0x400, 0x0) 20:50:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf000}, 0x0) 20:50:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000710"], 0x20}], 0x1}, 0x0) 20:50:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740e2d"], 0xa0}}, 0x0) 20:50:13 executing program 1: sysfs$2(0x9400, 0x0, &(0x7f0000000000)=""/124) 20:50:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000910"], 0x20}], 0x1}, 0x0) 20:50:13 executing program 5: sysfs$2(0x2, 0x3, 0x0) sysfs$2(0x2, 0xd8, &(0x7f0000000000)=""/29) 20:50:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x30000}, 0x0) 20:50:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740f2d"], 0xa0}}, 0x0) 20:50:13 executing program 1: sysfs$2(0x9401, 0x0, &(0x7f0000000000)=""/124) 20:50:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000001100)={0xb, @pix={0x4, 0x7ff, 0x44495658, 0x8, 0x6, 0x2, 0x4, 0x0, 0x0, 0x1, 0x2, 0x6}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001080)={r3, 0x4}, &(0x7f00000010c0)=0x8) sysfs$2(0x2, 0x1000000000000, 0x0) 20:50:14 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000f10"], 0x20}], 0x1}, 0x0) 20:50:14 executing program 5: sysfs$2(0x2, 0x401, 0x0) 20:50:14 executing program 1: sysfs$2(0x9500, 0x0, &(0x7f0000000000)=""/124) 20:50:14 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x34000}, 0x0) 20:50:14 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074482d"], 0xa0}}, 0x0) [ 1604.609739][T28687] __nla_validate_parse: 36 callbacks suppressed [ 1604.609761][T28687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:14 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x1f, &(0x7f0000000180)=""/4096) sysfs$2(0x2, 0xe0, &(0x7f0000001180)=""/4096) sysfs$2(0x2, 0x10001, &(0x7f0000000000)=""/79) sysfs$2(0x2, 0x8000, &(0x7f0000000080)=""/236) 20:50:14 executing program 1: sysfs$2(0x9501, 0x0, &(0x7f0000000000)=""/124) [ 1604.663807][T28693] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1604.690620][T28695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:14 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000003f10"], 0x20}], 0x1}, 0x0) [ 1604.827278][T28704] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:14 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x400300}, 0x0) 20:50:14 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000744c2d"], 0xa0}}, 0x0) 20:50:14 executing program 1: sysfs$2(0x9600, 0x0, &(0x7f0000000000)=""/124) [ 1605.024606][T28711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1605.141015][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1605.229949][T28725] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:15 executing program 4: perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251000000008000600ff00000008000700000000000700000000000000080006000000000c0800090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) listen(0xffffffffffffffff, 0x54b0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="004245413031010000", 0x9, 0x8000}, {&(0x7f0000010100)="004e535230330100", 0x8, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e75785544460000", 0x63, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000feff", 0x1a, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000000500)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8919, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)=@newae={0x1388, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in6=@local, 0x4d5, 0xa, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3503}, [@algo_auth_trunc={0xcd, 0x14, {{'cbcmac(aes)\x00'}, 0x408, 0xc0, "6d252f9c22447593d434296625f481cdf5fd0dc37aff47e538f577158bbafcaf2151150992e2630201e6f903fffd4a257209355bbd9491f0f8b0863362ee4e53e524e33985c1ad7882df73e4108b46b656e4c02d68e184abb994232ccb3c033fe5e889af35e3eabbfa28b0fa6ddb35e8f04ff0e34a353d2cd2cbd830ba7741fe59"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_comp={0xf0, 0x3, {{'lzs\x00'}, 0x540, "86e03077f0144b16e9e07c3096c709a8e40f9032cbc9f86f91d90093fd3f5963ba9c74b93e9b219bf62800fc363e7982be21b7addc6a598ec262f29f61dc180db726779763c6db949095b0d0e18c95b87015d6f76ce99286ab957d24fa202082a5ff99154c5bca93cd026bdb286a609c27927f09c2e02b3233f63444920b716d62bfee6dc916ac43aea97a376047459c88c8d1874125cda48f9ca3d515a56425725b4a91d38cabfd"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e21, @in=@remote}}, @coaddr={0x14, 0xe, @in=@multicast1}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private0, 0x4e21, 0x5, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, @in=@empty, {0x7ff, 0x4, 0x2, 0x2, 0x1, 0x6, 0x4, 0x73c9}, {0x1, 0x7fff, 0x3, 0x9}, {0x8, 0x40, 0x80}, 0x70bd25, 0x3502, 0x2, 0x1, 0x1, 0x80}}, @algo_auth={0x1048, 0x1, {{'sha1-avx\x00'}, 0x8000, "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"}}, @etimer_thresh={0x8, 0xc, 0x3f}, @srcaddr={0x14, 0xd, @in6=@private0}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x1388}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r5, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) 20:50:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000006310"], 0x20}], 0x1}, 0x0) 20:50:15 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/100) 20:50:15 executing program 1: sysfs$2(0x9601, 0x0, &(0x7f0000000000)=""/124) 20:50:15 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe0ffff}, 0x0) [ 1605.342032][T28729] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:15 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074602d"], 0xa0}}, 0x0) 20:50:15 executing program 1: sysfs$2(0x9700, 0x0, &(0x7f0000000000)=""/124) [ 1605.484420][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', "3392766decbda0b8a1e204e46560f928", "37079580", "1b0b00"}, 0x28) r1 = openat2(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x2000, 0x147, 0x2}, 0x18) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000014c0)=@ccm_128={{0x304}, "93a0c9bd4bafd5b0", "bd40c5661c00011ceb200b37553c30b2", "b67f8d55", "3bc46e91926c6a4a"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0xf00000000000000, 0x0, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x1, 0x4, 0x1ff, 0x5f71, 0x7}) fcntl$setflags(r0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x9d868e364257b657, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) shutdown(r0, 0x0) sysfs$2(0x2, 0x0, 0x0) [ 1605.557206][T28741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000ffffff9e10"], 0x20}], 0x1}, 0x0) [ 1605.693006][T28740] loop4: detected capacity change from 0 to 2816 20:50:15 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffff}, 0x0) 20:50:15 executing program 1: sysfs$2(0x9701, 0x0, &(0x7f0000000000)=""/124) 20:50:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000fffffff010"], 0x20}], 0x1}, 0x0) [ 1606.173082][T28740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) [ 1606.917056][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.923390][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 20:50:17 executing program 4: perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251000000008000600ff00000008000700000000000700000000000000080006000000000c0800090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) listen(0xffffffffffffffff, 0x54b0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="004245413031010000", 0x9, 0x8000}, {&(0x7f0000010100)="004e535230330100", 0x8, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e75785544460000", 0x63, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000feff", 0x1a, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000000500)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8919, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)=@newae={0x1388, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in6=@local, 0x4d5, 0xa, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3503}, [@algo_auth_trunc={0xcd, 0x14, {{'cbcmac(aes)\x00'}, 0x408, 0xc0, "6d252f9c22447593d434296625f481cdf5fd0dc37aff47e538f577158bbafcaf2151150992e2630201e6f903fffd4a257209355bbd9491f0f8b0863362ee4e53e524e33985c1ad7882df73e4108b46b656e4c02d68e184abb994232ccb3c033fe5e889af35e3eabbfa28b0fa6ddb35e8f04ff0e34a353d2cd2cbd830ba7741fe59"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_comp={0xf0, 0x3, {{'lzs\x00'}, 0x540, "86e03077f0144b16e9e07c3096c709a8e40f9032cbc9f86f91d90093fd3f5963ba9c74b93e9b219bf62800fc363e7982be21b7addc6a598ec262f29f61dc180db726779763c6db949095b0d0e18c95b87015d6f76ce99286ab957d24fa202082a5ff99154c5bca93cd026bdb286a609c27927f09c2e02b3233f63444920b716d62bfee6dc916ac43aea97a376047459c88c8d1874125cda48f9ca3d515a56425725b4a91d38cabfd"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e21, @in=@remote}}, @coaddr={0x14, 0xe, @in=@multicast1}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private0, 0x4e21, 0x5, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, @in=@empty, {0x7ff, 0x4, 0x2, 0x2, 0x1, 0x6, 0x4, 0x73c9}, {0x1, 0x7fff, 0x3, 0x9}, {0x8, 0x40, 0x80}, 0x70bd25, 0x3502, 0x2, 0x1, 0x1, 0x80}}, @algo_auth={0x1048, 0x1, {{'sha1-avx\x00'}, 0x8000, "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"}}, @etimer_thresh={0x8, 0xc, 0x3f}, @srcaddr={0x14, 0xd, @in6=@private0}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x1388}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r5, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) 20:50:17 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d0001000000000000f0ffff10"], 0x20}], 0x1}, 0x0) 20:50:17 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074682d"], 0xa0}}, 0x0) 20:50:17 executing program 1: sysfs$2(0x9800, 0x0, &(0x7f0000000000)=""/124) 20:50:17 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1000000}, 0x0) 20:50:17 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0xffffffffffffff99, &(0x7f0000000040)=""/31) sysfs$2(0x2, 0x7, &(0x7f0000000080)=""/100) sysfs$2(0x2, 0x8, &(0x7f0000000140)=""/57) sysfs$2(0x2, 0x4, &(0x7f0000000000)=""/33) sysfs$2(0x2, 0x101, &(0x7f0000000100)=""/5) 20:50:17 executing program 1: sysfs$2(0x9801, 0x0, &(0x7f0000000000)=""/124) 20:50:17 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000000)=""/115) 20:50:17 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000007fffffff10"], 0x20}], 0x1}, 0x0) 20:50:17 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2000000}, 0x0) 20:50:17 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000746c2d"], 0xa0}}, 0x0) [ 1607.982903][T28805] loop4: detected capacity change from 0 to 2816 20:50:17 executing program 1: sysfs$2(0x9900, 0x0, &(0x7f0000000000)=""/124) [ 1608.269001][T28805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) 20:50:18 executing program 4: perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251000000008000600ff00000008000700000000000700000000000000080006000000000c0800090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) listen(0xffffffffffffffff, 0x54b0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="004245413031010000", 0x9, 0x8000}, {&(0x7f0000010100)="004e535230330100", 0x8, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e75785544460000", 0x63, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000feff", 0x1a, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000000500)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8919, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)=@newae={0x1388, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in6=@local, 0x4d5, 0xa, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3503}, [@algo_auth_trunc={0xcd, 0x14, {{'cbcmac(aes)\x00'}, 0x408, 0xc0, "6d252f9c22447593d434296625f481cdf5fd0dc37aff47e538f577158bbafcaf2151150992e2630201e6f903fffd4a257209355bbd9491f0f8b0863362ee4e53e524e33985c1ad7882df73e4108b46b656e4c02d68e184abb994232ccb3c033fe5e889af35e3eabbfa28b0fa6ddb35e8f04ff0e34a353d2cd2cbd830ba7741fe59"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_comp={0xf0, 0x3, {{'lzs\x00'}, 0x540, "86e03077f0144b16e9e07c3096c709a8e40f9032cbc9f86f91d90093fd3f5963ba9c74b93e9b219bf62800fc363e7982be21b7addc6a598ec262f29f61dc180db726779763c6db949095b0d0e18c95b87015d6f76ce99286ab957d24fa202082a5ff99154c5bca93cd026bdb286a609c27927f09c2e02b3233f63444920b716d62bfee6dc916ac43aea97a376047459c88c8d1874125cda48f9ca3d515a56425725b4a91d38cabfd"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e21, @in=@remote}}, @coaddr={0x14, 0xe, @in=@multicast1}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private0, 0x4e21, 0x5, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, @in=@empty, {0x7ff, 0x4, 0x2, 0x2, 0x1, 0x6, 0x4, 0x73c9}, {0x1, 0x7fff, 0x3, 0x9}, {0x8, 0x40, 0x80}, 0x70bd25, 0x3502, 0x2, 0x1, 0x1, 0x80}}, @algo_auth={0x1048, 0x1, {{'sha1-avx\x00'}, 0x8000, "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"}}, @etimer_thresh={0x8, 0xc, 0x3f}, @srcaddr={0x14, 0xd, @in6=@private0}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x1388}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r5, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) 20:50:18 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000440)=""/196, 0xc4}], 0x2, &(0x7f0000000540)=""/205, 0xcd}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sysfs$2(0x2, 0x0, 0x0) 20:50:18 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000009effffff10"], 0x20}], 0x1}, 0x0) 20:50:18 executing program 1: sysfs$2(0x9901, 0x0, &(0x7f0000000000)=""/124) 20:50:18 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3000000}, 0x0) 20:50:18 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074742d"], 0xa0}}, 0x0) 20:50:18 executing program 1: sysfs$2(0x9a00, 0x0, &(0x7f0000000000)=""/124) 20:50:18 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000f0ffffff10"], 0x20}], 0x1}, 0x0) 20:50:18 executing program 5: sysfs$2(0x2, 0xfb, 0x0) 20:50:19 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4000000}, 0x0) [ 1609.272457][T28855] loop4: detected capacity change from 0 to 2816 20:50:19 executing program 1: sysfs$2(0x9a01, 0x0, &(0x7f0000000000)=""/124) 20:50:19 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000747a2d"], 0xa0}}, 0x0) [ 1609.664044][T28855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) [ 1609.715025][T28879] __nla_validate_parse: 18 callbacks suppressed [ 1609.715045][T28879] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1609.734815][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1609.779080][T28879] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:19 executing program 4: perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251000000008000600ff00000008000700000000000700000000000000080006000000000c0800090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) listen(0xffffffffffffffff, 0x54b0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="004245413031010000", 0x9, 0x8000}, {&(0x7f0000010100)="004e535230330100", 0x8, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e75785544460000", 0x63, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000feff", 0x1a, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000000500)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8919, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)=@newae={0x1388, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in6=@local, 0x4d5, 0xa, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3503}, [@algo_auth_trunc={0xcd, 0x14, {{'cbcmac(aes)\x00'}, 0x408, 0xc0, "6d252f9c22447593d434296625f481cdf5fd0dc37aff47e538f577158bbafcaf2151150992e2630201e6f903fffd4a257209355bbd9491f0f8b0863362ee4e53e524e33985c1ad7882df73e4108b46b656e4c02d68e184abb994232ccb3c033fe5e889af35e3eabbfa28b0fa6ddb35e8f04ff0e34a353d2cd2cbd830ba7741fe59"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_comp={0xf0, 0x3, {{'lzs\x00'}, 0x540, "86e03077f0144b16e9e07c3096c709a8e40f9032cbc9f86f91d90093fd3f5963ba9c74b93e9b219bf62800fc363e7982be21b7addc6a598ec262f29f61dc180db726779763c6db949095b0d0e18c95b87015d6f76ce99286ab957d24fa202082a5ff99154c5bca93cd026bdb286a609c27927f09c2e02b3233f63444920b716d62bfee6dc916ac43aea97a376047459c88c8d1874125cda48f9ca3d515a56425725b4a91d38cabfd"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e21, @in=@remote}}, @coaddr={0x14, 0xe, @in=@multicast1}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private0, 0x4e21, 0x5, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, @in=@empty, {0x7ff, 0x4, 0x2, 0x2, 0x1, 0x6, 0x4, 0x73c9}, {0x1, 0x7fff, 0x3, 0x9}, {0x8, 0x40, 0x80}, 0x70bd25, 0x3502, 0x2, 0x1, 0x1, 0x80}}, @algo_auth={0x1048, 0x1, {{'sha1-avx\x00'}, 0x8000, "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"}}, @etimer_thresh={0x8, 0xc, 0x3f}, @srcaddr={0x14, 0xd, @in6=@private0}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x1388}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r5, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) 20:50:19 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000001"], 0x20}], 0x1}, 0x0) 20:50:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x20, 0x0, 0x0, 0xc}) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000019280)={0x10000000}) sysfs$2(0x2, 0x6, &(0x7f0000000140)=""/102386) sysfs$2(0x2, 0xf13, &(0x7f0000019140)=""/18) sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/130) sysfs$2(0x2, 0x0, &(0x7f0000019180)=""/213) 20:50:19 executing program 1: sysfs$2(0x9b00, 0x0, &(0x7f0000000000)=""/124) 20:50:19 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x5000000}, 0x0) 20:50:19 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740133"], 0xa0}}, 0x0) [ 1610.161928][T28895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:20 executing program 1: sysfs$2(0x9b01, 0x0, &(0x7f0000000000)=""/124) [ 1610.224626][T28902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1610.236051][T28904] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:20 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000002"], 0x20}], 0x1}, 0x0) 20:50:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6000000}, 0x0) [ 1610.421048][T28912] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1610.481390][T28909] loop4: detected capacity change from 0 to 2816 20:50:20 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740067"], 0xa0}}, 0x0) 20:50:20 executing program 1: sysfs$2(0x9c00, 0x0, &(0x7f0000000000)=""/124) [ 1610.645397][T28920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1610.727543][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:20 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000003"], 0x20}], 0x1}, 0x0) [ 1610.801712][T28909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) [ 1611.002091][T28939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:21 executing program 4: perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251000000008000600ff00000008000700000000000700000000000000080006000000000c0800090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) listen(0xffffffffffffffff, 0x54b0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="004245413031010000", 0x9, 0x8000}, {&(0x7f0000010100)="004e535230330100", 0x8, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e75785544460000", 0x63, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000feff", 0x1a, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000000500)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8919, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)=@newae={0x1388, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in6=@local, 0x4d5, 0xa, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3503}, [@algo_auth_trunc={0xcd, 0x14, {{'cbcmac(aes)\x00'}, 0x408, 0xc0, "6d252f9c22447593d434296625f481cdf5fd0dc37aff47e538f577158bbafcaf2151150992e2630201e6f903fffd4a257209355bbd9491f0f8b0863362ee4e53e524e33985c1ad7882df73e4108b46b656e4c02d68e184abb994232ccb3c033fe5e889af35e3eabbfa28b0fa6ddb35e8f04ff0e34a353d2cd2cbd830ba7741fe59"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_comp={0xf0, 0x3, {{'lzs\x00'}, 0x540, "86e03077f0144b16e9e07c3096c709a8e40f9032cbc9f86f91d90093fd3f5963ba9c74b93e9b219bf62800fc363e7982be21b7addc6a598ec262f29f61dc180db726779763c6db949095b0d0e18c95b87015d6f76ce99286ab957d24fa202082a5ff99154c5bca93cd026bdb286a609c27927f09c2e02b3233f63444920b716d62bfee6dc916ac43aea97a376047459c88c8d1874125cda48f9ca3d515a56425725b4a91d38cabfd"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e21, @in=@remote}}, @coaddr={0x14, 0xe, @in=@multicast1}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@private0, 0x4e21, 0x5, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x32}, @in=@empty, {0x7ff, 0x4, 0x2, 0x2, 0x1, 0x6, 0x4, 0x73c9}, {0x1, 0x7fff, 0x3, 0x9}, {0x8, 0x40, 0x80}, 0x70bd25, 0x3502, 0x2, 0x1, 0x1, 0x80}}, @algo_auth={0x1048, 0x1, {{'sha1-avx\x00'}, 0x8000, "49a24b148bb5a5676f626da65aab3c83d36c6112ec2a4c44b26284f19840634b1c9d4d37b1585f15b8224a2adc279f9f3d78c45765587ef51a044f8e8a746d4b44be0907ba8b6ad4a456ee944efb80379b9db0ece82399515d85b0f19dfd942b2d30ca392b915a331fda835dd15706a2a292f11d0fc60405524b5e790bae4863edfd5b106190f218d5f51f62109f161861ffb19917bc25cc7390128faa8134541feda09be634997ea4eb2a172ba60bf46f71579abafe7a919878da13a5d713b4daf8f31689ec9ae749d7281533ecfff3b73de567f733c50e8561ecd5888aa6150c5db1a98472c1a2cf17a3f7bae9d1fd9a89f040d2b7db0be5d91921101b472bcb12bfde0d6b2efd68dfaaee0b42c14dd08bde43b34ec45e22607d249158647de8502bb12a180d017fae7bda8ed0395d6e586beeb361387388385d734baf86f14114052ee40f520fceb5398889edf3b1bb84abaa4d5c6817e527f641db4f6e3ebd97672bc7c2d2cd409f73f253b1edd5c06e00f886fe2c5dfbc2d357b99b6b9c210de63be2777c16687f55cc48fca429138d0c5519f2bb8b7df8c1c162ae3047e5f4672d368f5c4d596359770dc5b9a51903e65d7573eaab5f4f6b847dba19665cba9331ced3fa199a58e3bc33ce71aedaa280b2267a349d7ea31bfd06014063e2313fae56e7f3ab9a4bce77031b38677066a84cd3b51ddb2d5e59a2a75d79f994ed1dd742b3302035020f8dba7692e500db8fe5669a8d1b4599476dd357d36c574671563d0ea0848b929cc5c6ed0ccc80cc5c9c6525c32922719d52f06435c13105480b2848df3f828e81e3db865dfe2c7e6f7ca794020e9c0dc7647246133c5407993660f3c3d87a52cd50ed18d242ab1eaa535514068430c5900b33b6fd0a720ea6b151e513e48046edaf7e593aa915e6654b94616d971ab70edf41b647e8e71d94c6e083c660e16b8c0fbde2e5cce595e15051d0e1b9d20954f774a2f1e7d6e43c11eecfa60a85e3ac3cdb835cbcf84dd7a2f8d3d84c65f8d1ee6b7b315fab36b3e24319930a929d062b9c1d1aa16394cb566b7bb3663bacdb78f8376f585410028f816d34c2c658758449b251e96aec88d8d5bd45c8991015b565cd2b6cdef3f219d10081d6f26daf7b59d24b8aaa3dae6889031d26e57868244f6d0219293175e00f27c79340c569573cc261cf4b22451bc30453c5189baf92fe22b22811ec5c7ce8d5916bee47fbd2a73494e3c8324b4c852451e638f7765fa95195bb93d6d0d56b63158633ab9f1fdb6c146b63ddfc591289599b1dddb9385f054a7cbd1b144a5ae6703b4d543f97cc3468036d92c8e222499bac87d7ad675e2c20a2634cc1a912239d215945fca7a86277b155d6ddc3101a2da2cd593a66d847207ec9de89ba1a75e940ccbbc41aeb10a545ecb78bccd4fea41002545f69d9cd64ff96cbc202e6c7c90cc99424e93eb1dd895b3a6e77036c18931131dcf23f6318ada3fd1e57abcfd7df217ccd4983d67b060f5ea51993069eff7a0d6ab57c9a362ebceaec05507cafb771b3ef6b4088d4727fd27e49962d02f5f2996710b5b6bbf5bd69f988cff32489c828296a099107b204a0d1c31776f0d60436b4ce2a7aa1ec2a3a88895b25a9dc78d5bc3d4cb61e1588ef7335fa2f8c37f8d0fe9083112e4670abe925a1f2c9db2a9ec195bfbd0377fb2d98bbde5df50d4815b8b2dee070bd0a06c928d5e62115fe55279a7f316eccc10da017be18a8cde6e951305da56deabffc872ea823ffade8ba09b9bf13f135652f2a1d1b870c04f8db9b05d132f88d63807e6b509b5f867c8e631d4bbe994a94781b13d2c7819b161e8b998b3098b36d984c5c46a9769e77be6eb8769c1f11fb7ba0162a841c3cd8f36b39c5b535273cc341e8322610309d813907d2963b9ac28740578103e2ea644d2ce7a2b0e029838162ffb6caefc84d681eb1c2079f25e14541cf4514bcbe99dede8e3734fee6a6f7b9a2c4984ce343b3b10ea176054c29d8a3128c784b8e55e1fa0cab4fcf4847fdd0835cc1c3ccfd61283a52e4e07968b6c7ac29f5b7e276da30bfb771e5146358a980916fc8e45544e85fe773c339f055534e4d26cc5a0d75b5d1ec14ec01a291e30b7bd39edc7986092c9c7211d0c8bb569ab802bf1c8ba2f268be0a8fae50797984048cc35a593872683a3935651f2b62a1b5eb47e65d29f5c2496c61fc9656212e3770e9dae012c534fc02e1ee8a4b5b5c77744c43f7b1244600961ae9ef8436bb8c14c5e9f89d0d56496afb22dec78f15e7d7361285fdea12d43796d266848a271f4a0fac7f88366a997f3a3c64f1f9656bcf5e01fa2a5b5d14dbb54323ff9ded9f1cf4dd3b67276165b33a0d444b104da96298c6f1ae692ea8d8a4c13616ddf38e3c30bd42444c3a9480c24f1bc54767b05fb6b5666471ddf10dda9ee2623e96a04e7e7f0aa0443a51bf24eab4341bc1f68245cd1a091212da885fed7378deae74f603452fc9b302870b2a74f116c7dd3b080b96ac78168c3ecbb8827cb2e1f78c82ddeabb4c37b226c2818adbe83557e2fa9a0b6f11ea5148aaf6406ce9533887d701463c85c475f3b838220a376ddf46df3dcfc4314223da69eca1eb12790480762135fd006be459f1cb7f181aa251439919bdc493a3df8941f75ea25d33e0b0465db2a0e81a35d16e812b4a82975ceea0e525ca0b22c29b3233a7d4b04e3f0fe26dd5bf68e3d1f933ecb0bec416c771bc59cdd1a6a0ec179ada77d185344373b99335472ab53bc5e4726749776e5ef67127940b6f2cefeb75a945d17dc4fd319f27041d841534e49032bce4243284aa5d0c185de82e7c6e4fa5cae16ed7df5943658981cc17b489dfd489c6178a6b27c08559262ad65e5157537272c19a249ffed508f8d4b268711f452039435f0aed446454c4eb0cef240cd7e4e38569c6c6abdeef505771d2c40be4e696bf37a05f54310ebbf157b18adfbadbb4ee42e8b3e5bbb756cd5edf95ec3ab55d41ac32063f92add7f0692aeee99f1cf9929fa6de07f372f537fbdd19bfa7178905fee8cbf82dbbdc96aa63a1336b18816cb0cfccd77bc63890401ec47c21bef3300dc5b45c256587e4afe367131ddc35f580a3db36a5516adffde95612bdb93f619b1c1baacb1832313d8a735bb6d8ebd39e8da9061da61d42dac66f25b10d37cae330cd90a0222e78e12a0f99d356bc8111d1a09f3b4880854a932fa95dea16f2bb8042f1095737eafbc08c2da10b9fa40a19a7577dc79d73646ade14a76f38b9294a8356b33b6d69b1a3764cbd288377d9ff596cc46ef409255dae48f68c18fe4660490c78f9f8636a4b5b24f9585f756dac96639961d86ff3debcb554abf27ccb7ef0bf7c682f6d5a9dab4d6eb6673e3939b4e42a4df90fa390ec6f747b042ee981a178136284e088438810001300dd3e86c0cd3e6a41a00c9d1cda56764fef4bf7ae0aa73ff87bb41a87b11e0cd06d348d3bd6912366f2c908d5339335f6d746c33cf4f369e50ebe872b4e705f1672414c63785d6c004d670ef8f486005b832f8d2e8e2ce8b23f0475f8a3cd85be850af2123a66608a1249da5dfc4a921ad248838dfa6c0cef2071612e09202e704a362f39d6275181ec26c0a4ff94ea820d03018aceec8937ca6250df875978ecfdb75beaab5ad0bf839d9634a808a14db5fb845c66852257238594ad5413d8faf0dea0a3af95f9c61017f32b30adc06feae1956c1bbcc08caecd45351027c66d8ca06b7cc5c8743de2d5ccbcf06ea8fac649267d1838ee3905fec79cc35457006df5b02c806763baf5b24d4f6df796d3387d9ddaf2dbfa5c9851977dd6b50a6492d7ffdd6ac2fe0d575a4a06c2677b4d7d9f3bcdce836914cf1cb7f2754f8cc7957e25ca3067e9a0e0ebd747d265fa65155b0d4491343a03abb00942630d076c0b52fc64a9556579f25dc9f11961c0b6cb4bbe4e38a0ee4439f5b0ee7ad87f879b7524ba334cd7ebec09c774ebc25f8f0b6751d905ee5a83bf77991b5ad880bd209bac08a87509cb1190d27590959143cf2d84eb8bcd8948a1adac3007ffc4225e879c2397ae05a7a1b7b43d0a3e29cbb5702192ad06cce4c2d0a421cc3b4d647a0488edeae35a33f019ab59dc7f5f8096d624c1300136deef864b187919f220d4c5a39242872cf75f63ad10934f6d5647ce3ebda57960c624410d7148c5560b41e414007454b3694f760e4cd181a7862f11c8bf59d3f16b68f405987578ceba86b6541ff71c7c79b760092766f053bbb1171f9edd93ebc9292474e747e666d7a39b1bda83fb75da0f49cde398da5cf6b80201070ce94de02d0de57b1025312dea598795df5c06e10d42cbe482b0cf56ce5eb219ad9d31e5a9743415e54bd9d2d057caca3771efa7eacd708ea15b3304edaec93a34912848d0868875431654174ec23fbf52eb589b927c0ba97a9a1a976ae2159790a39d251803e6bd5e38ae7401e4aaf7b9fe88b90b8275a3b5b7bd5b677c8e57d9731a249541f833b3556c5c38f1c1cf1c01c1ba7b85baf4211a66a81c58220a1864de507df41001236b495d34e771ed529f4071dd176d3d1e093541ecd65030bc34e0613795ac1e7398ef33279a8d8e87ce10d44134b0f6061d739403ad346c57e65582777ffccd7bbdf1c1b062439f06404de17b7673e1dedeb99e5541760db57e570e2ca6c6a398a23eefceb8df6cc90af6a53a7713a7e28b73afcd262655184970d6fec53440330e7864d4f329e280973d11d081bb077bdfb1ee2edd9c5bff71759b58f310d49ba9c83e57ea1372909a0a1aa69a78a2d603cd20620d10776040309191436b8681f921b50c8f9c49e3678f8a2fe077d280bdc8badb53beafe614814731a59ecf7c3674def6138437cde23f2cb567b689c844993c89bddd4c9da54a626828b5c2f4e53dc430b87cbab81d0b800731311a3f4c37ffce55791ef41f83024282383a796c6daf4575c33a141668d07ae2ee889ed319850a4b5cbe8fbeacff5a8d4d2a0ff93d475aa64076f484deb5e6258f8f1de9133890ef1fe8196607712289e7bca635e9fa826a41eb6168e7a7853bf3982540296e009777393fbb765e99400f8920b045f96621451e7195c2283607ed9a3187c92a7bf39107756b606736446803ede1b7558a49b81f57744c84e425d6a8aef8a0804159f11f5cde7a38278b1588c70831b779e9a2f0d466223ed45c27ed375050ef14bfa84ae6144c38ff63f65c1d598f9811a51ef521d5bb6b15a133402baf3a618dbf4eb9c8f52b0fb23dddfaa01d5ce7fec97c2f38f541dcdf73d1305c0e7ca8a7454f0d5e56422383edef8f53eec039e3784d331d7cd98f85b725eef137c7d52bd4cd9dae2f3bfd127316a1de0b305177cb1b78bf5078288415826e4575a1599f7cb058dad3d45ba9f626b2fb6746482001dd728759d8e58990c706c5db77d6d1d29bfe1f41ca1e3c315a6731147450098e25ff084f8fb7934a3616a7934549a69b8e9d04c7183aa733d5695822497a8cbf939848c34cdcdda92547e1a77f0c9601576d9dae83782babc86f4bece86e3921c5bb2a5383b5af3b32f8143bb8fedea03fbb39453d2004089d5afcb0b525e33ea128e123261db9bb6b713ccf48bd76ae011d669671135f2575cfe9f3ee924ba032de53d310d1aa2ae0b3fd6d3dbff50f41dc706987d21f4afa532a7dc48937438e3274ede17103fbbf704d1ba89c8ca12833479ec30a342387a1246516bde9b00c9b80ed5bf065c8fddfe67747ba0e5418b91e09b3e1503ad77654823a"}}, @etimer_thresh={0x8, 0xc, 0x3f}, @srcaddr={0x14, 0xd, @in6=@private0}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x1388}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r5, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) 20:50:21 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7000000}, 0x0) 20:50:21 executing program 1: sysfs$2(0x9c01, 0x0, &(0x7f0000000000)=""/124) 20:50:21 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074000a"], 0xa0}}, 0x0) 20:50:21 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000004"], 0x20}], 0x1}, 0x0) 20:50:21 executing program 5: alarm(0x1ff) rmdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x4) quotactl(0x888, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)="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") 20:50:21 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0xb98, &(0x7f0000000000)=""/250) 20:50:21 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000005"], 0x20}], 0x1}, 0x0) 20:50:21 executing program 1: sysfs$2(0x9d00, 0x0, &(0x7f0000000000)=""/124) 20:50:21 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x8000000}, 0x0) 20:50:21 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740067"], 0xa0}}, 0x0) [ 1611.819274][T28966] loop4: detected capacity change from 0 to 2816 20:50:21 executing program 5: sysfs$2(0x2, 0x200010006, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000000)=""/142) sysfs$2(0x2, 0x100000000, &(0x7f00000000c0)=""/254) sysfs$2(0x2, 0xffff, &(0x7f00000001c0)=""/73) [ 1612.319121][T28966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) 20:50:22 executing program 4: alarm(0x1ff) rmdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x4) quotactl(0x888, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)="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") 20:50:22 executing program 1: sysfs$2(0x9d01, 0x0, &(0x7f0000000000)=""/124) 20:50:22 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000006"], 0x20}], 0x1}, 0x0) 20:50:22 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9000000}, 0x0) 20:50:22 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740017"], 0xa0}}, 0x0) 20:50:22 executing program 5: sysfs$2(0x2, 0x2, 0x0) sysfs$2(0x2, 0x5f, &(0x7f0000000000)=""/66) sysfs$2(0x2, 0x9, &(0x7f0000000080)=""/4096) 20:50:22 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000007"], 0x20}], 0x1}, 0x0) 20:50:22 executing program 1: sysfs$2(0x9e00, 0x0, &(0x7f0000000000)=""/124) 20:50:22 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) io_cancel(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000001080)="57c2c34ffdcec0ebd390d60a9bef1b380f16ac39b50408503046c14bc6c161a48c08baba7dd5cbc1781ddba2fce2a68d9287f3f494b1f264f1b851987cff3a3b2e1530a32738744b5ca153ab4c9018ee4ad8b7fc14f44cfb931349f4e4807aaaa66b354b8fd8df53d6ed9fbb3b4d8ba93237566950e81b0bd9e85b9825fb0b230245e492d1c0a6fd98caa838d45e96c7c8f7b998aa5e3dccf47f76880396ab6f1fe959e43dfa22bf036a9bab7853f1f440b8a20cf026a10fc5ff38", 0xbb, 0x4, 0x0, 0x2}, &(0x7f0000001180)) sysfs$2(0x2, 0x1000, 0x0) sysfs$2(0x2, 0x3f, &(0x7f0000000000)=""/100) sysfs$2(0x2, 0xffffffff, &(0x7f0000000080)=""/4096) connect(r0, &(0x7f00000011c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x3f, 0x0, "82b0be2748455b22e2871c01b98dc4ba002b2ecd698faf7fd3b9fc5f1572ad7de94f037e3544a121cd3ac4561462bad54fdd3d366fbb2c48263185997e88b0", 0x10}, 0x80) 20:50:22 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xa000000}, 0x0) 20:50:22 executing program 4: alarm(0x1ff) rmdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x4) quotactl(0x888, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)="0d25252a4a4e3dc1522d3d12902ea21b29ff3ec9952ce42efd6d0c47ec3308e3c89d17cae3f042f7612b65ecb41862399bfd25c642c32489e2a36bfa6a176cae77664bd5f10841e9f05830f5b9288a30cf08aaeadfbefcdf829c23eb6cc79a52fdd4646e1c618ffe92ecd43c51f3243de265958e2d0410fac060b967f9df15c74f57b2740cf5566c8c2132d54aaf8e6aff8aa9c6479776411c679b321c6fad294b91cf0fa0d4d209ba3c0b2fb0adf0a5520514993a61b67a8e3ab9b204000000000000003f8e106237ea64720a8c9750d2ce9a429f7699f1a4111f230554e0a5d1d18751c10e9d421ff8243293f2ba98f90ad1841842a46be345839245e4d99a47f3a7e3c85678f5a7191d0bf8bf440a8993f2c0969d1de9f800000000000000000000000000002ba9b206942bada9dbadb5cdffadf77424f46be782a47ddfa7794d02d566c5f3eef154d2c27a6ed26b1e08159861a2c1ce5fb1") 20:50:22 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0004320000740033"], 0xa0}}, 0x0) 20:50:23 executing program 5: sysfs$2(0x2, 0x8, 0x0) 20:50:23 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000008"], 0x20}], 0x1}, 0x0) 20:50:23 executing program 1: sysfs$2(0x9e01, 0x0, &(0x7f0000000000)=""/124) 20:50:23 executing program 4: alarm(0x1ff) rmdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x4) quotactl(0x888, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)="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") 20:50:23 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xf}}, 0x0) 20:50:23 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe000000}, 0x0) 20:50:23 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x50000, 0x0) recvmmsg$unix(r2, &(0x7f0000000280), 0x0, 0x100, &(0x7f00000002c0)={0x77359400}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000c40, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@uid_gt={'uid>', r1}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfshat}]}}) sysfs$2(0x2, 0x0, 0x0) 20:50:23 executing program 1: sysfs$2(0x9f00, 0x0, &(0x7f0000000000)=""/124) 20:50:23 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000009"], 0x20}], 0x1}, 0x0) 20:50:23 executing program 4: alarm(0x1ff) rmdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x4) 20:50:23 executing program 5: sysfs$2(0x2, 0x4, 0x0) sysfs$2(0x2, 0xfffffffffffffff9, &(0x7f0000000000)=""/65) 20:50:23 executing program 1: sysfs$2(0x9f01, 0x0, &(0x7f0000000000)=""/124) 20:50:23 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000000a"], 0x20}], 0x1}, 0x0) 20:50:23 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0x14}}, 0x0) 20:50:23 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf000000}, 0x0) 20:50:23 executing program 4: alarm(0x1ff) rmdir(&(0x7f0000000000)='./file0\x00') 20:50:23 executing program 5: sysfs$2(0x2, 0x0, 0x0) sysfs$2(0x2, 0x100, &(0x7f0000000000)=""/93) 20:50:24 executing program 1: sysfs$2(0xa000, 0x0, &(0x7f0000000000)=""/124) 20:50:24 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000000f"], 0x20}], 0x1}, 0x0) 20:50:24 executing program 4: alarm(0x1ff) 20:50:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000040)={{{0x9, 0x1}}, 0x0, 0x10001}) sysfs$2(0x2, 0x0, 0x0) 20:50:24 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xc0}}, 0x0) 20:50:24 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1f000000}, 0x0) 20:50:24 executing program 1: sysfs$2(0xa001, 0x0, &(0x7f0000000000)=""/124) 20:50:24 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000002000010"], 0x20}], 0x1}, 0x0) 20:50:24 executing program 4: alarm(0x0) [ 1614.782824][T29124] __nla_validate_parse: 16 callbacks suppressed [ 1614.782848][T29124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1614.811350][T29126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:24 executing program 1: sysfs$2(0xa100, 0x0, &(0x7f0000000000)=""/124) 20:50:24 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x20000000}, 0x0) [ 1614.914106][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1614.926399][T29135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:24 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000003000010"], 0x20}], 0x1}, 0x0) 20:50:24 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xec0}}, 0x0) 20:50:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x20, 0x0, 0x0, 0xc}) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000019280)={0x10000000}) sysfs$2(0x2, 0x6, &(0x7f0000000140)=""/102386) sysfs$2(0x2, 0xf13, &(0x7f0000019140)=""/18) sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/130) sysfs$2(0x2, 0x0, &(0x7f0000019180)=""/213) 20:50:24 executing program 1: sysfs$2(0xa101, 0x0, &(0x7f0000000000)=""/124) [ 1615.243180][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1615.281443][T29152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1615.321389][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1615.431512][T29160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:25 executing program 5: sysfs$2(0x2, 0x3, 0x0) sysfs$2(0x2, 0xffffffffffffffff, &(0x7f0000000000)=""/4096) sysfs$2(0x2, 0xc97c, &(0x7f0000001080)=""/243) sysfs$2(0x2, 0x800, &(0x7f0000001000)=""/70) 20:50:25 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3e020000}, 0x0) 20:50:25 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000004000010"], 0x20}], 0x1}, 0x0) 20:50:25 executing program 1: sysfs$2(0xa200, 0x0, &(0x7f0000000000)=""/124) 20:50:25 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0x33fe0}}, 0x0) 20:50:25 executing program 4: alarm(0x0) (fail_nth: 1) [ 1615.837443][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1615.842356][T29176] FAULT_INJECTION: forcing a failure. [ 1615.842356][T29176] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:50:25 executing program 1: sysfs$2(0xa201, 0x0, &(0x7f0000000000)=""/124) [ 1615.947158][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1615.966083][T29176] CPU: 1 PID: 29176 Comm: syz-executor.4 Not tainted 5.16.0-rc1-next-20211118-syzkaller #0 [ 1615.976545][T29176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1615.986625][T29176] Call Trace: [ 1615.989920][T29176] [ 1615.992882][T29176] dump_stack_lvl+0xcd/0x134 [ 1615.997509][T29176] should_fail.cold+0x5/0xa [ 1616.002066][T29176] _copy_to_user+0x2c/0x150 [ 1616.006603][T29176] simple_read_from_buffer+0xcc/0x160 [ 1616.012006][T29176] proc_fail_nth_read+0x187/0x220 [ 1616.017066][T29176] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1616.022824][T29176] ? security_file_permission+0xab/0xd0 [ 1616.028425][T29176] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1616.034180][T29176] vfs_read+0x1b5/0x600 [ 1616.038363][T29176] ksys_read+0x12d/0x250 [ 1616.042628][T29176] ? vfs_write+0xae0/0xae0 [ 1616.047073][T29176] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1616.052650][T29176] do_syscall_64+0x35/0xb0 [ 1616.057200][T29176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1616.063127][T29176] RIP: 0033:0x7f72a41e869c [ 1616.067563][T29176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1616.087200][T29176] RSP: 002b:00007f72a17ab170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1616.095639][T29176] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f72a41e869c [ 1616.103643][T29176] RDX: 000000000000000f RSI: 00007f72a17ab1e0 RDI: 0000000000000003 [ 1616.111641][T29176] RBP: 00007f72a17ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.119721][T29176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.127937][T29176] R13: 00007ffebecfc12f R14: 00007f72a17ab300 R15: 0000000000022000 [ 1616.135984][T29176] 20:50:26 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000007000010"], 0x20}], 0x1}, 0x0) 20:50:26 executing program 5: sysfs$2(0x2, 0x2, 0x0) 20:50:26 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0x200001a0}}, 0x0) 20:50:26 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3f000000}, 0x0) 20:50:26 executing program 1: sysfs$2(0xa300, 0x0, &(0x7f0000000000)=""/124) 20:50:26 executing program 5: sysfs$2(0x2, 0x10000000000008, 0x0) 20:50:26 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000009000010"], 0x20}], 0x1}, 0x0) 20:50:26 executing program 1: sysfs$2(0xa301, 0x0, &(0x7f0000000000)=""/124) 20:50:26 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0x7ffff000}}, 0x0) 20:50:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2}]}}]}, 0x48}}, 0x0) 20:50:26 executing program 4: alarm(0x0) 20:50:26 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x48000000}, 0x0) 20:50:26 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000f000010"], 0x20}], 0x1}, 0x0) 20:50:26 executing program 1: sysfs$2(0xa400, 0x0, &(0x7f0000000000)=""/124) 20:50:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="fc", 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8001, 0x0) close(r3) close(0xffffffffffffffff) creat(0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) rt_tgsigqueueinfo(r5, 0x0, 0x34, &(0x7f00000001c0)={0x3e, 0x6, 0x6}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000002480)=[{&(0x7f0000000400), 0x0, 0x800}, {0x0}], 0x0, 0x0) pidfd_getfd(r4, r6, 0x0) 20:50:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xfffffdef}}, 0x0) 20:50:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000063000010"], 0x20}], 0x1}, 0x0) 20:50:27 executing program 1: sysfs$2(0xa401, 0x0, &(0x7f0000000000)=""/124) 20:50:27 executing program 4: alarm(0x2) 20:50:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c000000}, 0x0) [ 1617.597362][T29264] loop5: detected capacity change from 0 to 8 20:50:27 executing program 1: sysfs$2(0xa500, 0x0, &(0x7f0000000000)=""/124) 20:50:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d0001000000000000f0000010"], 0x20}], 0x1}, 0x0) 20:50:27 executing program 4: alarm(0x7) [ 1617.771373][T29278] loop5: detected capacity change from 0 to 8 20:50:27 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffe2, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x40180) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400efff0f00010000000000000000000000000a14000000020a0900000000010000000000000000140000001100010000000000000010000000000a3833295ff4bdac627500"/81], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "d45c637c63381ef54f7b939bb9aba5df6218e9ac"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "150200"}, 0x2}}]}, 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000e00)=ANY=[@ANYBLOB="68000000160002002bbd7000fbdbdf25021801fe", @ANYRES32=0x0, @ANYBLOB="080002000000000008000800200000001400060008000000108000000800000001000000080008005004000008000100ac1414aa140003006e723000000000000000000000000000080004007f00000159f36cb306cc6979b293b9d047218a25c74d331060bdbffd8c966d733daf76f5ebce84c684eb6497312c5d57ba89e17051e04595af5d94b9c47f4f9be2f8de373bffb391060254e77ad965a1185c1eec9000"/171], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000000e0c6ad4076d97f527a377c861701657b2fd601d4730b00010064736d61726b00150c00020006000100020000001e93c4c4636095fc5fff275d021600527e88a377ae8fd96c505514a6a526341c6cd8ce6b505051fcfc460d5a9beaf28616fda8af6caa2696ffc5d1ac409739c37bd3c222c48d15c2afa914675ecc30ed553c2f4932c8db840cc241c84b1427d1e862ff7f285f5c6520f4cc17056becb33cd71524ab871b59f218df0b0a694e680000000000000000000000000000000ceab729cae81c01f84fdef4b67f19c495337dec095d10a00d47e5ebb2b8bb9bf339bbb8e22b6ceb8f46a2cfa9c7605dc3eb9bfdb687e039e24a04b6a6e0151dafe76d8d6a9e9955e8d8a3a677a3ae4c3ff57c9384697825c354fbd35cde540f580ef1d96ad353da579b8eebe81460e0369f1b7198ca8251d262efdee474ca317f2e54aa2cbdd82a721a51e2b932012e5128d85d2d0c1a35cca9eaa9fac5337ebf0c2f6c52e214c2dd73b64759aa9954aec129a2ed521df5d5fda5e81c3ccb24851958ca080ff13b797279026d930caecdc27a408037f2abc0c685534894607a15d7922bc4d6ea03f4a73c2554925d1712aede727592223b00cb3e400d69e06e73c0b5d1e784a192554e20bcb2831e36f1a4a685146359ebee5062b0466f7a06a55b3f7efdace8f8874d4197e9a65a3ad8dafe"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000a5b600270500"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x9, 0xc0400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x9, 0x5}, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x5, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}, {{&(0x7f0000000600)=@rxrpc=@in6={0x21, 0x373f, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000800)="72414c1126d76e631936676b24a2d273eb15dd2bc7a710b69f6e07b152d28f4151f70072edf8c4e62c11a762350c745b294f8228e0c699cd159923465150287f19524e92eae4624663fa36ed08d8bb772837f318a4f5d095f614faf17434c3", 0x5f}, {&(0x7f00000002c0)="4781996b8b58a64fcf038f", 0xb}], 0x2, &(0x7f0000000b00)=[{0x78, 0x1, 0x1, "e942f1992837b8fceb8ad43e942adfbe25ee9a4ef2ad344858a77cf5b632462e513afac44a91c971e25a6a168093374512805cd9c64275a25adf0ea25c7f298c3f5ce316045dd7b0caaa41bb9dddb75e95bfbc15d3267187940ef9a32e88fdbc51f0"}, {0xf0, 0x0, 0xb2ef, "f410bd54538b756c366672d888a909048f9a13790ca9e93af1eb6b856969e073db0379f82e85365c4540b962fcc2f6764d7a19020548050d50def706e71d207fdc7b7208a476c5f38a55c00eb4766a4a489806db9179be823a71784377e03d8f9fc9a291ce252c014bd5df2c7b4cedbe350ec807f7ba4f2812e7ec837e1af1204c7e185bed7bdcb65a526ce9497f0e25699399c3c23a430f65e514d888450810bbdc5ad0a533a05f35173280ae55a514e4d23d26e7e4fe7d428517b428e0913aecfd1c45fc0bd495646dcfa50de8f6ad6aba3441147fa7005ff4c5c32ec8ec"}, {0x38, 0x104, 0x3, "2aea5d424d11cc8e105e8ff280f02d1ba866a5d6fcf80116f9c985ebcac4b94d63b40f3a9e8cf70d"}, {0xe0, 0x1, 0x8000, "13ba14c0cd414344a23ec8d2c3df4e779480e024c16a4d87a05766e23326e8b51fbf374110b35ee02e8f4370231885c0fbedab24d804f56d2071b2f3e9dafd84ac58379b47652f8dd9bfea273a879a8e8b262c3106cb63f14167781371ad4e90958254295ab19b7ae3d02c54d98efd3a1d89f8d19e51a79c3e73dc28484b31cf7690b5879fa00d1eec89c63846acaea59ede2b570d2c8350be85eff120fb95c71250db02ecabf99d0f1bf296e67ae74a1ff58c2c6031dfca17161b16fdd95bfdb337c5b0fa00827b3710b033933259"}, {0x48, 0x0, 0x1, "2ec3a9381afc687e87220b37ba295e513d26c848d5979e1dd81c2b493b11be1416b53ca614b87934a372e39e786a54f31581bf14c16e"}], 0x2c8}}], 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) 20:50:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x2}, 0x0) 20:50:27 executing program 1: sysfs$2(0xa501, 0x0, &(0x7f0000000000)=""/124) 20:50:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x60000000}, 0x0) 20:50:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000030010"], 0x20}], 0x1}, 0x0) 20:50:27 executing program 4: alarm(0x700) 20:50:28 executing program 1: sysfs$2(0xa600, 0x0, &(0x7f0000000000)=""/124) 20:50:28 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000070010"], 0x20}], 0x1}, 0x0) 20:50:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x202100, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x8001}, 0xe) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002800)={'batadv_slave_0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a80)={@rand_addr, @dev}, &(0x7f0000000ac0)=0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 20:50:28 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x5}, 0x0) 20:50:28 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x68000000}, 0x0) 20:50:28 executing program 4: alarm(0x1000000) 20:50:28 executing program 1: sysfs$2(0xa601, 0x0, &(0x7f0000000000)=""/124) 20:50:28 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000090010"], 0x20}], 0x1}, 0x0) 20:50:28 executing program 4: alarm(0x2000000) 20:50:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x202100, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x8001}, 0xe) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002800)={'batadv_slave_0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a80)={@rand_addr, @dev}, &(0x7f0000000ac0)=0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 20:50:28 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c000000}, 0x0) 20:50:28 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x8}, 0x0) 20:50:28 executing program 1: sysfs$2(0xa700, 0x0, &(0x7f0000000000)=""/124) 20:50:29 executing program 4: alarm(0x7000000) 20:50:29 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d0001000000000000000f0010"], 0x20}], 0x1}, 0x0) 20:50:29 executing program 1: sysfs$2(0xa701, 0x0, &(0x7f0000000000)=""/124) 20:50:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000001c0)={0x40, 0x346}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x0, 0x116000}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="450f2003b9ca0200000f3226670f3a0f12d366b8e6000f00d00fc7b1f8ffffff66ba200066ed660f7e96949a49ce0f350f01c547f6de", 0x36}], 0x1, 0x25, &(0x7f00000000c0)=[@cstype3, @cr4={0x1, 0x100}], 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x100000c, 0x4010, r5, 0x5d75d000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:50:29 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x74000000}, 0x0) 20:50:29 executing program 4: alarm(0x225c17d03) 20:50:29 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d0001000000000000003f0010"], 0x20}], 0x1}, 0x0) 20:50:29 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x9}, 0x0) 20:50:29 executing program 1: sysfs$2(0xa800, 0x0, &(0x7f0000000000)=""/124) [ 1619.951028][T29433] __nla_validate_parse: 23 callbacks suppressed [ 1619.951050][T29433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:29 executing program 4: alarm(0x100000000000000) [ 1620.009449][T29439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1620.062681][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:29 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000630010"], 0x20}], 0x1}, 0x0) 20:50:30 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a000000}, 0x0) [ 1620.229160][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:30 executing program 1: sysfs$2(0xa801, 0x0, &(0x7f0000000000)=""/124) 20:50:30 executing program 4: alarm(0x200000000000000) 20:50:30 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0xc}, 0x0) [ 1620.376447][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1620.503305][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1620.702860][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1620.819095][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:30 executing program 1: sysfs$2(0xa900, 0x0, &(0x7f0000000000)=""/124) 20:50:30 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000f00010"], 0x20}], 0x1}, 0x0) 20:50:30 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x98120000}, 0x0) 20:50:30 executing program 4: alarm(0x37dc12502000000) 20:50:30 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x21}, 0x0) 20:50:30 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8a08, 0x1, 0xfffffffd, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x4a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x7, 0x81) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) readahead(0xffffffffffffffff, 0x0, 0x8) unshare(0x38020c00) [ 1621.056216][T29493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:30 executing program 1: sysfs$2(0xa901, 0x0, &(0x7f0000000000)=""/124) [ 1621.174210][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:30 executing program 4: alarm(0x700000000000000) 20:50:31 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000020000650"], 0x20}], 0x1}, 0x0) 20:50:31 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9effffff}, 0x0) 20:50:31 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x25}, 0x0) 20:50:31 executing program 1: sysfs$2(0xaa00, 0x0, &(0x7f0000000000)=""/124) 20:50:31 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000020010"], 0x20}], 0x1}, 0x0) 20:50:31 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffffff}, 0x0) 20:50:32 executing program 1: sysfs$2(0xaa01, 0x0, &(0x7f0000000000)=""/124) 20:50:32 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000030010"], 0x20}], 0x1}, 0x0) 20:50:32 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x63}, 0x0) 20:50:33 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8a08, 0x1, 0xfffffffd, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x4a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x7, 0x81) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) readahead(0xffffffffffffffff, 0x0, 0x8) unshare(0x38020c00) 20:50:33 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x67}, 0x0) 20:50:33 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0xee01, 0x0, 0xee00, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f00000001c0)=""/195) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000009) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2080, &(0x7f0000000140)={[{}], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '-[\\]'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) alarm(0x1bff) 20:50:33 executing program 1: sysfs$2(0xab00, 0x0, &(0x7f0000000000)=""/124) 20:50:33 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffe000}, 0x0) 20:50:33 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000040010"], 0x20}], 0x1}, 0x0) 20:50:33 executing program 1: sysfs$2(0xab01, 0x0, &(0x7f0000000000)=""/124) 20:50:33 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000070010"], 0x20}], 0x1}, 0x0) 20:50:33 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x6b}, 0x0) 20:50:33 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xfffff000}, 0x0) 20:50:34 executing program 1: sysfs$2(0xac00, 0x0, &(0x7f0000000000)=""/124) 20:50:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000090010"], 0x20}], 0x1}, 0x0) 20:50:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x4, 0x4, 0x7, 0x6, 0x0, 0x9, 0x802, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x40020, 0x752a, 0x9, 0x9, 0x7, 0x3ff, 0x8, 0x0, 0x1, 0x0, 0xff}, 0x0, 0x8, r1, 0xa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') read$FUSE(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x2, 0x7, 0x8, 0x0, 0xb58, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xef, 0x4, @perf_bp={&(0x7f00000002c0), 0x6}, 0x1, 0x1ff, 0x40d8cf92, 0x0, 0x80, 0x1ff, 0x2, 0x0, 0x8000, 0x0, 0xffffffffffffffff}, 0x0, 0x1, r4, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="c4c235aa1066ba2100b000ee440f070f3235002f0400d4d4910091b8010000000f01d9b90e020000b805000000ba00800000b9800000c00f3235010000000f30420f38c9ee420f928e00000000c48181c6080066baa000ecb0e3ee", 0x5b}], 0x1, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:50:35 executing program 4: alarm(0xa) 20:50:35 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffff7f}, 0x0) 20:50:35 executing program 1: sysfs$2(0xac01, 0x0, &(0x7f0000000000)=""/124) 20:50:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x300}, 0x0) 20:50:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d0001000000000000000f0010"], 0x20}], 0x1}, 0x0) [ 1625.768522][T29699] __nla_validate_parse: 18 callbacks suppressed [ 1625.768544][T29699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:35 executing program 1: sysfs$2(0xad00, 0x0, &(0x7f0000000000)=""/124) [ 1625.828895][T29701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1625.829563][T29702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40) alarm(0x0) 20:50:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000630010"], 0x20}], 0x1}, 0x0) 20:50:35 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffff9e}, 0x0) [ 1626.026600][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x7ffffff2}, 0x0) 20:50:35 executing program 1: sysfs$2(0xad01, 0x0, &(0x7f0000000000)=""/124) [ 1626.268794][T29719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1626.371357][T29724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:37 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:50:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000f00010"], 0x20}], 0x1}, 0x0) 20:50:37 executing program 4: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) alarm(0x0) alarm(0xbc0) 20:50:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xfffffff0}, 0x0) 20:50:37 executing program 1: sysfs$2(0xae00, 0x0, &(0x7f0000000000)=""/124) 20:50:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x7ffffff8}, 0x0) [ 1627.683614][T29751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:37 executing program 1: sysfs$2(0xae01, 0x0, &(0x7f0000000000)=""/124) 20:50:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000310"], 0x20}], 0x1}, 0x0) 20:50:37 executing program 4: alarm(0x0) alarm(0x6) alarm(0x8) [ 1627.841430][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x7ffffff9}, 0x0) 20:50:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3000000000000}, 0x0) 20:50:38 executing program 4: ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000000)={{}, "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"}) alarm(0x0) alarm(0x20) [ 1628.233441][T29775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1628.346841][ T7804] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1628.376948][T29783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1628.634570][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1628.862824][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1628.884493][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1628.893388][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1628.944512][ T7804] usb 6-1: config 250 has no interface number 0 [ 1628.969461][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1628.994438][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1629.014388][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1629.038134][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1629.059542][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1629.234569][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1629.243647][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1629.258178][ T7804] usb 6-1: SerialNumber: syz [ 1629.361959][T29762] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1629.393241][T29762] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1629.435531][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1629.441825][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1629.683009][T29762] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1629.704545][T29762] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1629.713754][T29762] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1629.731796][T29762] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1629.753337][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1630.117080][T18048] usb 6-1: USB disconnect, device number 4 [ 1630.149773][T18048] usblp0: removed [ 1630.964384][T29802] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1631.204280][T29802] usb 6-1: Using ep0 maxpacket: 8 20:50:40 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:50:40 executing program 1: sysfs$2(0xaf00, 0x0, &(0x7f0000000000)=""/124) 20:50:40 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000710"], 0x20}], 0x1}, 0x0) 20:50:40 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x40030000000000}, 0x0) 20:50:41 executing program 4: alarm(0x1) 20:50:41 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0xffffff1f}, 0x0) [ 1631.224175][ C1] raw-gadget gadget: ignoring, device is not running [ 1631.264354][T29802] usb 6-1: device descriptor read/all, error -71 [ 1631.384987][T29835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:41 executing program 4: alarm(0x0) alarm(0x40) 20:50:41 executing program 1: sysfs$2(0xaf01, 0x0, &(0x7f0000000000)=""/124) [ 1631.473152][T29844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:41 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000910"], 0x20}], 0x1}, 0x0) 20:50:41 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2}, 0x0) 20:50:41 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe0ffff00000000}, 0x0) [ 1631.839583][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:41 executing program 4: alarm(0x0) alarm(0x31) [ 1632.036030][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1632.049383][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1632.103934][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1632.154271][T29802] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1632.394249][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1632.574250][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1632.582630][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1632.610174][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1632.634226][T29802] usb 6-1: config 250 has no interface number 0 [ 1632.640533][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1632.667354][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1632.694357][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1632.714125][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1632.741574][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1632.944180][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1632.971864][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1632.997495][T29802] usb 6-1: SerialNumber: syz [ 1633.128594][T29842] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1633.179600][T29842] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1633.225761][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1633.232062][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1633.475747][T29842] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1633.485368][T29842] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1633.495265][T29842] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1633.503825][T29842] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1633.571728][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1633.826157][T18048] usb 6-1: USB disconnect, device number 6 [ 1633.845064][T18048] usblp0: removed 20:50:44 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:50:44 executing program 1: sysfs$2(0xb000, 0x0, &(0x7f0000000000)=""/124) 20:50:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000f10"], 0x20}], 0x1}, 0x0) 20:50:44 executing program 4: alarm(0x0) alarm(0x7) 20:50:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffffffffffff}, 0x0) 20:50:44 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3}, 0x0) 20:50:44 executing program 1: sysfs$2(0xb001, 0x0, &(0x7f0000000000)=""/124) 20:50:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e1100, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) alarm(0x0) [ 1634.737378][T29914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1634.805857][T29917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000003f10"], 0x20}], 0x1}, 0x0) 20:50:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x100000000000000}, 0x0) [ 1634.934988][T29925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:44 executing program 1: sysfs$2(0xb100, 0x0, &(0x7f0000000000)=""/124) 20:50:44 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4}, 0x0) [ 1635.223519][T29938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1635.274194][ T7804] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1635.543938][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1635.744460][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1635.752837][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1635.776247][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1635.797468][ T7804] usb 6-1: config 250 has no interface number 0 [ 1635.811866][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1635.834738][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1635.846248][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1635.861497][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1635.878506][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1636.013983][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1636.023059][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1636.054913][ T7804] usb 6-1: SerialNumber: syz [ 1636.156285][T29920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1636.190568][T29920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1636.245693][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1636.251982][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1636.465488][T29920] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1636.481129][T29920] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1636.490939][T29920] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1636.504313][T29920] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1636.569103][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1641.346040][ T7804] usb 6-1: USB disconnect, device number 7 [ 1641.375105][ T7804] usblp0: removed 20:50:51 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:50:51 executing program 1: sysfs$2(0xb101, 0x0, &(0x7f0000000000)=""/124) 20:50:51 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000006310"], 0x20}], 0x1}, 0x0) 20:50:51 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x200000000000000}, 0x0) 20:50:51 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x5}, 0x0) 20:50:51 executing program 4: alarm(0x85) alarm(0x103) 20:50:51 executing program 1: sysfs$2(0xb200, 0x0, &(0x7f0000000000)=""/124) 20:50:51 executing program 4: alarm(0x0) alarm(0x1) [ 1641.920764][T29989] __nla_validate_parse: 3 callbacks suppressed [ 1641.920785][T29989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1642.002830][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1642.013108][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:50:51 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000f010"], 0x20}], 0x1}, 0x0) [ 1642.103204][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:51 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x300000000000000}, 0x0) 20:50:52 executing program 4: syz_usb_connect$uac1(0x0, 0xbd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x4, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1a, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x5, 0xff, 0x1, 0x81, 0x3f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x4, 0xfd, "77dad1c6a447"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfffd, 0x1, 0x7f, "9c77d7b1"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x180, 0x0, "23ea5cd79226138cbd"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x56, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x29, 0x3, 0x4, {0x7, 0x25, 0x1, 0x80, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x1, 0x1f, 0x6, "9043", "bf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x5, 0x4, {0x7, 0x25, 0x1, 0x2, 0x4, 0x401}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x8, 0x6, 0x40, 0x80}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x52, &(0x7f0000000180)=@string={0x52, 0x3, "ce2efcfc4d5eae85717323ae298fbc48ae080cc88203abe21f848f15d7e39f3718efa66d8fb1d14403d655bf9c2ac9d8d0e55996fe98573831b09b83ee1110f4301bb08ff6041b3bc3d70e2ab7a39383"}}, {0x75, &(0x7f0000000200)=@string={0x75, 0x3, "21a6223627bddfa63e576889a6fd91b5504375c03b5c72ad7fabbac41e63f24d6e3d143a7fb17f8ef5fc65cdba88c305a7932cfaa873eb2a4b4206d8b49b9479135cd69aca6729d2d97a7b96f73a00405477fa3229acbc45648fdd7afacfc4c6384ae5082a3dab06957207743735521ef0614b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4001}}, {0xdb, &(0x7f0000000380)=@string={0xdb, 0x3, "40930691eddf08b0366ca871405c1222ffea78d82238c1e3c6ef86b5631439d229543da44a3a99d1d4ecbcaa3c86ea5148d33e5d31da1d7a41e83a7ece7c0c8f82c00b55fc76723eef46c91abaf438d2841747d7f2997baeb9f968a37940a8dd9d822b4eb7f82735a548f1201df66148661637beac7795df59b2a27660781e4958362927ad018fa64b850ff98a966fb2d508694573141922d0df3744d1bbdac9ff82be93c435383556120fbdaac7fc6d12c6f2cfd7cb5d4802de681a6571f43d4e32118c67d0fcbd785220fff380c4f5182861219e5d0a11b6"}}, {0xc3, &(0x7f0000000480)=@string={0xc3, 0x3, "16644b92d3cf7f198510be6e6a1abb54e98c0fbcb2447ea97538509979d120380d457032b1733617694937fe5e76a7ba6c28d9d1d774b0979e455e3dd08dbdd05d2913c237f62265bf71e71997fb1eeb4f739cb16aea2328507b2c5a1f8ea63c85af8c41a88911a64d6b79947c67541139d72f5ada1cc36ce51fb6ea309dd92138d70462f1b5a6b6834642171c5d83469bfc2fee220a997a522e2aba16201d1a43bff7eb87abe15ba1249ba261ab8329fa21f53b56adb6c2d97245829efea0f826"}}]}) alarm(0x0) syz_usb_connect$uac1(0x4, 0xd6, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x5, 0x80, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xc0}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x3, 0x5, "bc7146b9"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x1f, 0x3, [0x4, 0x5, 0x7], 0xff}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x6, 0x1, [0x382dad3b9c9af90e], 0xb2}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x94}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7f, 0x4, "3549b8", "e2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x7, "", "cb"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3f, 0x2, 0x0, 0x0, "cf", "c00c36"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x1002}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x9, 0x3, "7782"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0xff, 0xab, {0x7, 0x25, 0x1, 0x2, 0x6, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3f, 0xb8, 0x81, {0x7, 0x25, 0x1, 0x80, 0x7, 0x3ff}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x0, 0x7f, 0x40, 0x4, 0x20, 0x3}, 0x12c, &(0x7f0000000780)={0x5, 0xf, 0x12c, 0x3, [@generic={0xad, 0x10, 0xf, "9495ae78823a750a8f2db7f8cd3cbf5a5fd36b4e76893e75426167e8d7bc1c54bf0947b7b2e9ac777a2ab0ce0d2b8097b45d5d238158b2cf6ff943744417571fe5ba84a784a858897a658e7a0f9e6cee91e2977d7f142b7f2d51e8ded5a3bb4ed9144b33455f227a5e848ebb2527e26e9061da1f841811547e2e0198babacf24d8ad027a49d0474f20a9a074bae0dce890aa158f5b42c11a76e178d670bced1d7bc413314272acae0e0b"}, @generic={0x70, 0x10, 0x1, "b53a03ca293f2084f78743f59a48482336ec4efe72acc87eab1d55b4e3e40c23595d481a6638e062d1a1a270f1d83450b1413b12572faf21f897a64f42cc093b9ce6b61027489bd8ec8a50c55ba82ce501bd71f29df45b7402059d9a607a6035a46d718db219c37b9d7b826b8a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x81, 0x1}]}, 0x3, [{0xee, &(0x7f00000008c0)=@string={0xee, 0x3, "493f6efe4ea793eb4dd8248c87be93e1d7849c5231e19f8ee8fcff90e6f122b05956f2ed67c4a553a144530ee6cecbde66f5df77dadc0442e2b81453282fc7871725bc8471cb1674d041709bc384f6e53f25377a557794b1b531691ea3cdb735c6161c5b7287c90f584617e25f7cc5e408d229f66986d4551cd80a1b4617a678742f4f0ae6451f2eb9e19fcd9706ffe8388623017c21c40830e45e4cb4eb022f5f430bfac0f9f841b9f10699d361245575a53eb050b24726ed9b2da44c34e1999bf1a0f787cd2056428328bb81ba14d2180fd6620b10c40b7a3bc10f598e008dca3caf1243264da53cb963ca"}}, {0xa5, &(0x7f00000009c0)=@string={0xa5, 0x3, "40f0320a37cd0fd5df1c413c0c2614c960e2b131577d3002289bfc7a145c6bbfa8b81bd7d10b62af3843e6bc3c354e388d193101aa63d904f38b2c48debe5e6fb3b6c658b53b2f911686b475cfa687fbbab5e8be928feeef59323f03f73cf208aeda1ae1954d6f26a0b169de38c90e3d5f0bf1fffcfb3d093eaccead1edd55a1b4a8fff3ef07de3ad77469cb3d52689f56ac3d429ccc337896378eaa023dce5ae2c0b1"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1001}}]}) 20:50:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6}, 0x0) [ 1642.459937][T30016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1642.473496][T18048] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1642.549794][T30022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1642.611933][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1642.726566][T30033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1642.763629][T18048] usb 6-1: Using ep0 maxpacket: 8 [ 1642.773758][T29754] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1643.003434][T18048] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1643.011812][T18048] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1643.014333][T29754] usb 5-1: Using ep0 maxpacket: 8 [ 1643.040574][T18048] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1643.061480][T18048] usb 6-1: config 250 has no interface number 0 [ 1643.076102][T18048] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1643.089406][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1643.101677][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1643.113850][T18048] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1643.130103][T18048] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1643.235127][T29754] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1643.244155][T29754] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.256757][T29754] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1643.278766][T18048] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1643.288161][T18048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1643.296328][T18048] usb 6-1: SerialNumber: syz [ 1643.378030][T29997] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1643.408131][T29997] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1643.424353][T29754] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1643.434165][T29754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.442254][T29754] usb 5-1: Product: ꘡㘢봧ꛟ圾襨ﶦ떑䍐쁵尻굲ꭿ쒺挞䷲㵮㨔녿蹿ﳵ쵥袺׃鎧館玨⫫䉋鮴禔尓髖柊툩站陻㫷䀀睔㋺갩䖼轤竝쿺웄䨸ࣥ㴪ګ犕琇㔷Ṓ懰 [ 1643.444489][T18048] hub 6-1:250.228: bad descriptor, ignoring hub [ 1643.467742][T18048] hub: probe of 6-1:250.228 failed with error -5 [ 1643.485654][T29754] usb 5-1: Manufacturer: ⻎ﳼ幍薮獱긣輩䢼ࢮ젌΂萟ᖏ㞟润놏䓑혃뽕⪜陙飾㡗뀱莛ᇮᬰ辰Ӷ㬛ퟃ⨎ꎷ莓 [ 1643.501415][T29754] usb 5-1: SerialNumber: ᐉ [ 1643.661877][T29997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1643.674390][T29997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1643.682653][T29997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1643.691972][T29997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1643.749212][T18048] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1643.883749][T29754] usb 5-1: 0:2 : does not exist [ 1643.901661][T29754] usb 5-1: USB disconnect, device number 2 [ 1644.553462][ T7804] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1644.803389][ T7804] usb 5-1: Using ep0 maxpacket: 8 [ 1645.003921][ T7804] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1645.012712][ T7804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.033489][ T7804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1645.194141][ T7804] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1645.210108][ T7804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.219278][ T7804] usb 5-1: Product: ꘡㘢봧ꛟ圾襨ﶦ떑䍐쁵尻굲ꭿ쒺挞䷲㵮㨔녿蹿ﳵ쵥袺׃鎧館玨⫫䉋鮴禔尓髖柊툩站陻㫷䀀睔㋺갩䖼轤竝쿺웄䨸ࣥ㴪ګ犕琇㔷Ṓ懰 [ 1645.261573][ T7804] usb 5-1: Manufacturer: ⻎ﳼ幍薮獱긣輩䢼ࢮ젌΂萟ᖏ㞟润놏䓑혃뽕⪜陙飾㡗뀱莛ᇮᬰ辰Ӷ㬛ퟃ⨎ꎷ莓 [ 1645.277056][ T7804] usb 5-1: SerialNumber: ᐉ [ 1645.509901][ T7804] usb 5-1: 0:2 : does not exist [ 1645.543328][ T7804] usb 5-1: USB disconnect, device number 3 [ 1648.777904][T18048] usb 6-1: USB disconnect, device number 8 [ 1648.834849][T18048] usblp0: removed 20:50:58 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) 20:50:58 executing program 1: sysfs$2(0xb201, 0x0, &(0x7f0000000000)=""/124) 20:50:58 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000003"], 0x20}], 0x1}, 0x0) 20:50:58 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x400000000000000}, 0x0) 20:50:58 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7}, 0x0) 20:50:58 executing program 4: alarm(0x0) alarm(0x4) alarm(0xffff) alarm(0x6) [ 1649.393537][T30108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:50:59 executing program 1: sysfs$2(0xb300, 0x0, &(0x7f0000000000)=""/124) [ 1649.461578][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1649.484694][T30116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000005"], 0x20}], 0x1}, 0x0) 20:50:59 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x500000000000000}, 0x0) [ 1649.667383][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:59 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x83, &(0x7f0000000240), &(0x7f00000000c0)=0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/115, 0x73}], 0x1, &(0x7f0000004500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="916d0291e5391fdad31df6b89af5e465480b1548925a9012bb5db01626e2f4c9b745ca03bbd10f5e72e76eb015670aea85c5c3e8454b4526bb9241302aea9357b3bc975e60c628e56f34742ec28df025e357465e5dbb8a210c315bc93ce1a560c78b4bcf4960bf718e8ea93b1239830f0193b74fb2044bc42cbb8657d9c33d026eca5452bfd6661142ca2a12c57de40648ecbc0ac2e8"], 0x90}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/43, 0x2b}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/114, 0x72}], 0x1, &(0x7f0000001c80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x4, 0x2000, &(0x7f0000001e00)={0x77359400}) fchown(0xffffffffffffffff, 0xffffffffffffffff, r2) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x10}], 0x1, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r2}}}], 0x20}, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3, 0xfffffffe}, 0xc) alarm(0x8) 20:50:59 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x8}, 0x0) [ 1649.844150][T18048] usb 6-1: new high-speed USB device number 9 using dummy_hcd 20:50:59 executing program 1: sysfs$2(0xb301, 0x0, &(0x7f0000000000)=""/124) [ 1649.930360][T30134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1649.978965][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1650.153093][T18048] usb 6-1: Using ep0 maxpacket: 8 [ 1650.182493][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1650.332960][T18048] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1650.351569][T18048] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1650.388058][T30154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1650.388472][T18048] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1650.460236][T18048] usb 6-1: config 250 has no interface number 0 [ 1650.482871][T18048] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1650.508791][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1650.530255][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1650.570700][T18048] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1650.599662][T18048] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1650.702932][T18048] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1650.731191][T18048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1650.770041][T18048] usb 6-1: SerialNumber: syz [ 1650.862665][T30106] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1650.912226][T30106] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1650.953837][T18048] hub 6-1:250.228: bad descriptor, ignoring hub [ 1650.960127][T18048] hub: probe of 6-1:250.228 failed with error -5 [ 1651.184187][T30106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1651.214599][T30106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1651.235751][T30106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1651.258744][T18048] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1651.259471][T30106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1655.858651][ T7804] usb 6-1: USB disconnect, device number 9 [ 1655.907804][ T7804] usblp0: removed 20:51:06 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) 20:51:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000006"], 0x20}], 0x1}, 0x0) 20:51:06 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x600000000000000}, 0x0) 20:51:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9}, 0x0) 20:51:06 executing program 1: sysfs$2(0xb400, 0x0, &(0x7f0000000000)=""/124) 20:51:06 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b740)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "4603beae130363"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}], 0x2, "86887518f54945"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f940)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x20, "31e61ef8ba3d81"}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f000005a140)={{0x0, 0x0, 0x1, 0x20, 0x0, 0x1, 0x5, 0x6, 0x7, 0x9, 0x5d, 0x1, 0x81, 0x6, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "71c7bbc6a945ee"}) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f000005a140)={{0x0, 0x0, 0x1, 0x20, 0x0, 0x1, 0x5, 0x6, 0x7, 0x9, 0x5d, 0x1, 0x81, 0x6, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "71c7bbc6a945ee"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000589c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "5d3bca96c15455"}) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r11, 0xd0009411, &(0x7f000005a140)={{0x0, 0x0, 0x1, 0x20, 0x0, 0x1, 0x5, 0x6, 0x7, 0x9, 0x5d, 0x1, 0x81, 0x6, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "71c7bbc6a945ee"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000599c0)={{0x0, 0x7, 0x4, 0x3, 0x7, 0xfa0, 0x2, 0x38, 0x4, 0x8, 0x0, 0x8, 0x1ff, 0xc6ba, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059a80)={0xae, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r9}, {r10}, {0x0, r13}, {r14}], 0x7f, "662335c7f185ff"}) alarm(0x8) 20:51:06 executing program 1: sysfs$2(0xb401, 0x0, &(0x7f0000000000)=""/124) [ 1656.469897][T30189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1656.534818][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1656.546196][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:06 executing program 4: alarm(0x0) alarm(0x800) alarm(0x4) alarm(0x6) 20:51:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000007"], 0x20}], 0x1}, 0x0) [ 1656.683001][T30205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:06 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x700000000000000}, 0x0) 20:51:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe}, 0x0) 20:51:06 executing program 1: sysfs$2(0xb500, 0x0, &(0x7f0000000000)=""/124) [ 1656.971291][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1656.998896][T30219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1657.032397][T18048] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1657.214206][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1657.312836][T18048] usb 6-1: Using ep0 maxpacket: 8 [ 1657.520986][T18048] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1657.535240][T18048] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1657.554820][T18048] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1657.565617][T18048] usb 6-1: config 250 has no interface number 0 [ 1657.571915][T18048] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1657.585743][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1657.597680][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1657.610164][T18048] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1657.625425][T18048] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1657.732378][T18048] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1657.741778][T18048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1657.752438][T18048] usb 6-1: SerialNumber: syz [ 1657.848012][T30192] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1657.869378][T30192] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1657.903528][T18048] hub 6-1:250.228: bad descriptor, ignoring hub [ 1657.909821][T18048] hub: probe of 6-1:250.228 failed with error -5 [ 1658.129478][T30192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1658.138575][T30192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1658.150227][T30192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1658.160193][T30192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1658.207828][T18048] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1662.976822][ T7804] usb 6-1: USB disconnect, device number 10 [ 1662.985119][ T7804] usblp0: removed 20:51:13 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) 20:51:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000dd439654d0e3e384d6bc23fc6225c70df9ce695268784a3e1a49b646438bf74ae420a7b00dc0a450bfb201928a46d30b1afe03ba17c61fd4cd9210e25b0f49969b50849d6fa51c8b9e8c4e7b3691250abbf1aa17c7fea4bf5099e16aeef872552ceddc3886e2779ba15143e2d4e881087b5595e051cf3f85a437bb86254c68e21bbc097cf565", @ANYRES32=r4, @ANYBLOB="00000000000000022e2f66696c653000"]) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9480300000000b8a71f000066ba00108f000f30a24030b000ee3e66660f5892e1830f181d66edf4660f38806b70bad10466b85f80a0cf0f23c80f21f86635080030000f23f80f0967757e", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x2) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001800000ac470000000004000000008000000000"]) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000000)) alarm(0x0) 20:51:13 executing program 1: sysfs$2(0xb501, 0x0, &(0x7f0000000000)=""/124) 20:51:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x800000000000000}, 0x0) 20:51:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000009"], 0x20}], 0x1}, 0x0) 20:51:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf}, 0x0) 20:51:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000000a"], 0x20}], 0x1}, 0x0) 20:51:13 executing program 1: sysfs$2(0xb600, 0x0, &(0x7f0000000000)=""/124) [ 1663.550066][T30277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1663.581006][T30280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x900000000000000}, 0x0) [ 1663.788324][T30293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000000f"], 0x20}], 0x1}, 0x0) 20:51:13 executing program 1: sysfs$2(0xb601, 0x0, &(0x7f0000000000)=""/124) 20:51:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x48}, 0x0) [ 1664.021866][T18048] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1664.060631][T30313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1664.105399][T30316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1664.260583][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1664.304024][T18048] usb 6-1: Using ep0 maxpacket: 8 [ 1664.327151][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1664.521833][T18048] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1664.530216][T18048] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1664.571756][T18048] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1664.581017][T18048] usb 6-1: config 250 has no interface number 0 [ 1664.602051][T18048] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1664.614698][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1664.626466][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1664.638127][T18048] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1664.653319][T18048] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1664.761975][T18048] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1664.771138][T18048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1664.824774][T18048] usb 6-1: SerialNumber: syz [ 1664.944974][T30279] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1664.986568][T30279] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1665.042798][T18048] hub 6-1:250.228: bad descriptor, ignoring hub [ 1665.049092][T18048] hub: probe of 6-1:250.228 failed with error -5 [ 1665.257699][T30279] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1665.266781][T30279] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1665.277453][T30279] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1665.286563][T30279] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1665.347433][T18048] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1668.362726][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.369072][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.171887][T29754] usb 6-1: USB disconnect, device number 11 [ 1670.192767][T29754] usblp0: removed 20:51:20 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) gettid() 20:51:20 executing program 1: sysfs$2(0xb700, 0x0, &(0x7f0000000000)=""/124) 20:51:20 executing program 4: alarm(0x5) alarm(0x3) 20:51:20 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000210"], 0x20}], 0x1}, 0x0) 20:51:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xa00000000000000}, 0x0) 20:51:20 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c}, 0x0) [ 1670.587742][T30360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:20 executing program 1: sysfs$2(0xb701, 0x0, &(0x7f0000000000)=""/124) 20:51:20 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000310"], 0x20}], 0x1}, 0x0) [ 1670.673151][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1670.704251][T30372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:20 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) alarm(0x0) 20:51:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe00000000000000}, 0x0) 20:51:20 executing program 1: sysfs$2(0xb800, 0x0, &(0x7f0000000000)=""/124) [ 1670.882739][T30381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1670.901417][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:20 executing program 4: alarm(0x0) alarm(0xffffffffffffd393) [ 1671.187438][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1671.191485][T17856] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1671.501374][T17856] usb 6-1: Using ep0 maxpacket: 8 [ 1671.701308][T17856] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1671.709704][T17856] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1671.737402][T17856] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1671.746895][T17856] usb 6-1: config 250 has no interface number 0 [ 1671.753318][T17856] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1671.765006][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1671.776436][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1671.787017][T17856] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1671.800735][T17856] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1671.881329][T17856] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1671.890479][T17856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1671.915792][T17856] usb 6-1: SerialNumber: syz [ 1672.004185][T30373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.019429][T30373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.052410][T17856] hub 6-1:250.228: bad descriptor, ignoring hub [ 1672.058699][T17856] hub: probe of 6-1:250.228 failed with error -5 [ 1672.289855][T30373] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1672.298763][T30373] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1672.307811][T30373] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1672.316822][T30373] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1672.376554][T17856] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1677.291362][ T7678] usb 6-1: USB disconnect, device number 12 [ 1677.312365][ T7678] usblp0: removed 20:51:27 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) gettid() 20:51:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x60}, 0x0) 20:51:27 executing program 4: alarm(0x7e) alarm(0x2) 20:51:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000410"], 0x20}], 0x1}, 0x0) 20:51:27 executing program 1: sysfs$2(0xb801, 0x0, &(0x7f0000000000)=""/124) 20:51:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf00000000000000}, 0x0) [ 1677.734932][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:27 executing program 4: alarm(0x2) alarm(0xa6) alarm(0x4d) alarm(0x1f) alarm(0x2000000401) alarm(0x1) 20:51:27 executing program 1: sysfs$2(0xb900, 0x0, &(0x7f0000000000)=""/124) [ 1677.796738][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1677.809783][T30445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000710"], 0x20}], 0x1}, 0x0) 20:51:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1f00000000000000}, 0x0) [ 1678.000444][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:27 executing program 4: alarm(0x0) alarm(0x85c9) alarm(0x5) [ 1678.105913][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x68}, 0x0) [ 1678.200884][ T7678] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1678.239560][T30469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1678.402232][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1678.471048][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1678.510806][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1678.744461][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1678.760673][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1678.770002][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1678.793055][ T7678] usb 6-1: config 250 has no interface number 0 [ 1678.799361][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1678.830974][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1678.850657][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1678.875234][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1678.890179][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1678.990809][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1678.999959][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1679.009594][ T7678] usb 6-1: SerialNumber: syz [ 1679.108292][T30436] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1679.130299][T30436] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1679.161990][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1679.168316][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1679.386771][T30436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1679.398897][T30436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1679.411700][T30436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1679.423146][T30436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1679.497306][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1684.338204][ T7804] usb 6-1: USB disconnect, device number 13 [ 1684.362373][ T7804] usblp0: removed 20:51:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000910"], 0x20}], 0x1}, 0x0) 20:51:34 executing program 1: sysfs$2(0xb901, 0x0, &(0x7f0000000000)=""/124) 20:51:34 executing program 4: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x8, 0x6, 0x5, 0x1, 0xf30774b275d9adac, 0x5, 0x4, 0x1f8, 0x40, 0x1f9, 0x10000, 0x9, 0x38, 0x2, 0x5, 0x984b, 0x1000}, [{0x60000000, 0x3, 0x7, 0x1, 0x2000000000000000, 0x5, 0x5b7, 0x6}, {0x3, 0xff, 0x0, 0x4, 0x7fff, 0x5, 0x8000, 0x4}], "f213dcbb319293092b8e196eff2fe953dc6d3b00d5cbaae9931e624b000fdeff3c83a3776a03989c57b135d92f5b789f83e2e7f9f75af123035206e0cdea0400be44e2ee66f6bd57fdf5b986abd54d0b3c4b354342a9bed929fcd99a103e21def21e56d475be0b0b3924c6274fc478ef203cb6847cc290ccab3396f44d2d2d267c8cacec986c115993ba76abbca66d6ccc013c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x743) write$9p(0xffffffffffffffff, &(0x7f0000000c40)="29f6d1f43463f69c55b4180727435c2297d7dd6c9771bf1058677225a72cb1a844fb82c264d899495968b6e71a95b01bdbbec7a4867fc0d75f15dabcc5992f630b000e3b184086360c1453079715857eee1df4996a21fd9707f77dc9ea81d7ce9e6e04e46e2e8f3e3c100669adafd5f4e5fc8c88cde3d37666beebf9acbccf49b2f340e25d0a87025d43204186a1785273cf53bc6fda4d698516b4cc5e9dadccedb537", 0xa3) alarm(0x0) alarm(0x7ff) r0 = syz_mount_image$sysv(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x10000, 0x1, &(0x7f0000000900)=[{&(0x7f0000000800)="dfb699a03dbd913310895fc358d295d34df38f4e0cac59e9c017ee58fb30c384ff74b955d04c59996d18f288640d39046d07b1a8f8bfcf6216f870919eb36c4a4878ced5d6881f02b87a325a5f76eb5337f025896f9988f5339b5321afcba962a4377c47a6b512c7ea5d0f6201b7dbb0d4396e04225c98ffa2f542e251146491299395d03fc6806ec366c5c507acbfaec332bc9bd315a8997e072f5b72fa1fec8ed07c32e650b1b3788d6ede590544e4af4877fd4e179e0815435c2c5a61052648829071fa6a615a7152ddf0c90584aaa89cbcf8b264b610a0518362fda4811fded1a1b05b8bb81fd531540c56", 0xed, 0x8f}], 0x4, &(0x7f0000000940)={[{'(*){W'}, {'\'('}, {'.'}, {}, {'\x00'}, {'\x00'}, {'\x00'}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) pwritev(r0, &(0x7f0000000bc0)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)="9998ec23ce4d9202cb2d6b9fe097a551", 0x10}, {&(0x7f0000000a40)="b014515478ad108b5d7329297ab3d045d28094cef083789d760bd3f42ca4f5ab9e31b8e744bbbd9ccce57016d73c3d38", 0x30}, {&(0x7f0000000a80)="1238e96f61175600ea91a8e72a63e5c15f0a5fe1a2843fc791698c3e7a9b9612f942372e2bb17f97fc0b4c554fe09dcb69dc1959da108f99dc96609917aee71480e0cfd1cc08bfe4d941a7d499bcd211d6c0d8c2fcde9ccb9f0fff9332a015a010c745ec0a78dc36cf9769e1378e6ce06d9f419a108fe7178ba526911a20afd3b4d913193eb47ca3589d36bb142b102c2b94e57655fa4afeca643470377d1b0c073fed0eb06d9a60abdef58f00c391f035bae7ba9414bd71f5f0ca2ed988f736", 0xc0}, {&(0x7f0000000b40)="99efe3e4d38c7c1e093a471b9f61e336211a4a557938e20fafc7413a7315ad4b42e3d950037835260db906e96fedca2046fd9deac428c479fd8e18b624404c51f5c20ad496190f970b9f4f527351b0eb56baa98f25d5c11ac8eae3dd171bbf814a35da74655100", 0x67}], 0x5, 0x9, 0xff) 20:51:34 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2000000000000000}, 0x0) 20:51:34 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) gettid() 20:51:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c}, 0x0) [ 1684.798405][T30516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1684.854930][T30522] loop4: detected capacity change from 0 to 128 [ 1684.872294][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:51:34 executing program 1: sysfs$2(0xba00, 0x0, &(0x7f0000000000)=""/124) [ 1684.904550][T30528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1684.912019][T30522] VFS: unable to find oldfs superblock on device loop4 20:51:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000f10"], 0x20}], 0x1}, 0x0) [ 1685.029873][T30531] loop4: detected capacity change from 0 to 128 [ 1685.061232][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1685.077211][T30531] VFS: unable to find oldfs superblock on device loop4 20:51:34 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3e02000000000000}, 0x0) 20:51:35 executing program 1: sysfs$2(0xba01, 0x0, &(0x7f0000000000)=""/124) [ 1685.209407][T30548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:35 executing program 4: alarm(0xfffffffffffffffd) alarm(0x8) 20:51:35 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x74}, 0x0) 20:51:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000006310"], 0x20}], 0x1}, 0x0) 20:51:35 executing program 4: alarm(0x10000000000009) [ 1685.411245][T30556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1685.440289][T29802] usb 6-1: new high-speed USB device number 14 using dummy_hcd 20:51:35 executing program 1: sysfs$2(0xbb00, 0x0, &(0x7f0000000000)=""/124) 20:51:35 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3f00000000000000}, 0x0) [ 1685.544569][T30566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1685.688893][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1685.710212][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1685.851092][T30577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1685.890388][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1685.899038][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1685.930144][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1685.939390][T29802] usb 6-1: config 250 has no interface number 0 [ 1685.967553][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1685.990390][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1686.002795][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1686.014856][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1686.029922][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1686.140326][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1686.149396][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1686.168332][T29802] usb 6-1: SerialNumber: syz [ 1686.268785][T30530] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1686.305708][T30530] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1686.381345][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1686.387636][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1686.597014][T30530] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1686.626573][T30530] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1686.670393][T30530] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1686.681365][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1686.717068][T30530] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1687.023845][T18048] usb 6-1: USB disconnect, device number 14 [ 1687.061166][T18048] usblp0: removed 20:51:37 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) getpgid(0x0) gettid() 20:51:37 executing program 1: sysfs$2(0xbb01, 0x0, &(0x7f0000000000)=""/124) 20:51:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000002"], 0x20}], 0x1}, 0x0) 20:51:37 executing program 4: alarm(0x0) alarm(0xffffffffffffffff) 20:51:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a}, 0x0) 20:51:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4800000000000000}, 0x0) 20:51:37 executing program 1: sysfs$2(0xbc00, 0x0, &(0x7f0000000000)=""/124) [ 1687.719951][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:37 executing program 4: alarm(0x0) alarm(0x4) 20:51:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000003"], 0x20}], 0x1}, 0x0) 20:51:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0}, 0x0) 20:51:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c00000000000000}, 0x0) 20:51:37 executing program 1: sysfs$2(0xbc01, 0x0, &(0x7f0000000000)=""/124) [ 1688.240251][T29802] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1688.490061][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1688.693809][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1688.711093][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1688.722211][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1688.753641][T29802] usb 6-1: config 250 has no interface number 0 [ 1688.761618][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1688.774353][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1688.785659][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1688.797312][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1688.811985][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1688.890151][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1688.899335][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1688.908010][T29802] usb 6-1: SerialNumber: syz [ 1688.984185][T30626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1689.000295][T30626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1689.031300][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1689.037593][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1689.248652][T30626] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1689.257680][T30626] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1689.266612][T30626] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1689.277976][T30626] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1689.331177][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1694.050060][T29802] usb 6-1: USB disconnect, device number 15 [ 1694.058491][T29802] usblp0: removed 20:51:44 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) getpgid(0x0) gettid() 20:51:44 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) signalfd(r0, &(0x7f0000000500)={[0x7fffffff]}, 0x8) alarm(0x0) alarm(0x3) alarm(0x15b5) 20:51:44 executing program 1: sysfs$2(0xbd00, 0x0, &(0x7f0000000000)=""/124) 20:51:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000004"], 0x20}], 0x1}, 0x0) 20:51:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6000000000000000}, 0x0) 20:51:44 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x255}, 0x0) [ 1694.532985][T30700] __nla_validate_parse: 7 callbacks suppressed [ 1694.533004][T30700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:44 executing program 4: alarm(0x8) 20:51:44 executing program 1: sysfs$2(0xbd01, 0x0, &(0x7f0000000000)=""/124) [ 1694.628553][T30706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1694.648780][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000005"], 0x20}], 0x1}, 0x0) 20:51:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6800000000000000}, 0x0) [ 1694.810300][T30715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:44 executing program 1: sysfs$2(0xbe00, 0x0, &(0x7f0000000000)=""/124) 20:51:44 executing program 4: alarm(0x10001) [ 1694.909676][ T7678] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1694.936473][T30723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1695.115920][T30732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1695.179821][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1695.399539][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1695.407946][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1695.447290][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1695.466871][ T7678] usb 6-1: config 250 has no interface number 0 [ 1695.478990][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1695.504720][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1695.529048][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1695.544435][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1695.572252][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1695.689550][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1695.698937][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1695.708784][ T7678] usb 6-1: SerialNumber: syz [ 1695.815082][T30698] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1695.837933][T30698] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1695.870583][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1695.876965][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1696.082697][T30698] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1696.098124][T30698] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1696.106579][T30698] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1696.123247][T30698] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1696.171043][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1700.899077][ T7678] usb 6-1: USB disconnect, device number 16 [ 1700.924944][ T7678] usblp0: removed 20:51:51 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) getpgid(0x0) gettid() 20:51:51 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x300}, 0x0) 20:51:51 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000006"], 0x20}], 0x1}, 0x0) 20:51:51 executing program 4: alarm(0x0) alarm(0xfff) alarm(0x0) 20:51:51 executing program 1: sysfs$2(0xbe01, 0x0, &(0x7f0000000000)=""/124) 20:51:51 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c00000000000000}, 0x0) [ 1701.377189][T30773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:51:51 executing program 1: sysfs$2(0xbf00, 0x0, &(0x7f0000000000)=""/124) 20:51:51 executing program 4: io_setup(0x2, &(0x7f0000000000)=0x0) clock_gettime(0x5, &(0x7f0000000180)={0x0, 0x0}) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)={r1, r2+60000000}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfff]}, 0x8}) alarm(0x0) [ 1701.431868][T30779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1701.448663][T30781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:51:51 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000007"], 0x20}], 0x1}, 0x0) 20:51:51 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7400000000000000}, 0x0) [ 1701.592985][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:51 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x500}, 0x0) 20:51:51 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000008"], 0x20}], 0x1}, 0x0) [ 1701.781153][T30799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1701.915296][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1701.959166][T18048] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1701.978624][T30811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1702.087450][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1702.239203][T18048] usb 6-1: Using ep0 maxpacket: 8 [ 1702.438997][T18048] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1702.448899][T18048] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1702.457788][T18048] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1702.502945][T18048] usb 6-1: config 250 has no interface number 0 [ 1702.510999][T18048] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1702.523938][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1702.535325][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1702.547205][T18048] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1702.561607][T18048] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1702.679170][T18048] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1702.688270][T18048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1702.714284][T18048] usb 6-1: SerialNumber: syz [ 1702.803069][T30783] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1702.873501][T30783] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1702.899989][T18048] hub 6-1:250.228: bad descriptor, ignoring hub [ 1702.906312][T18048] hub: probe of 6-1:250.228 failed with error -5 [ 1703.121545][T30783] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1703.131875][T30783] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1703.141183][T30783] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1703.151066][T30783] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1703.200428][T18048] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1707.762856][T18048] usb 6-1: USB disconnect, device number 17 [ 1707.771244][T18048] usblp0: removed 20:51:57 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) wait4(0x0, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:51:57 executing program 1: sysfs$2(0xbf01, 0x0, &(0x7f0000000000)=""/124) 20:51:57 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a00000000000000}, 0x0) 20:51:57 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000009"], 0x20}], 0x1}, 0x0) 20:51:57 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x600}, 0x0) 20:51:57 executing program 4: alarm(0x0) alarm(0x1ff) alarm(0xc775) alarm(0x81) alarm(0x6a15) alarm(0x10001) 20:51:58 executing program 1: sysfs$2(0xc000, 0x0, &(0x7f0000000000)=""/124) 20:51:58 executing program 4: alarm(0x5) [ 1708.336147][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1708.362071][T30864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:58 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000000a"], 0x20}], 0x1}, 0x0) 20:51:58 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9812000000000000}, 0x0) 20:51:58 executing program 1: sysfs$2(0xc001, 0x0, &(0x7f0000000000)=""/124) [ 1708.544830][T30874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:51:58 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x700}, 0x0) [ 1708.708778][ T7804] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1708.838083][T30885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1708.935904][T30890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1708.958751][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1709.007297][T30898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1709.129176][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1709.137557][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1709.168685][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1709.190966][ T7804] usb 6-1: config 250 has no interface number 0 [ 1709.205316][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1709.231143][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1709.254942][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1709.278487][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1709.303765][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1709.398994][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1709.408153][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1709.422974][ T7804] usb 6-1: SerialNumber: syz [ 1709.501006][T30860] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1709.525800][T30860] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1709.562696][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1709.574493][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1709.785460][T30860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1709.794422][T30860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1709.804116][T30860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1709.813535][T30860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1709.863495][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1714.595769][ T7804] usb 6-1: USB disconnect, device number 18 [ 1714.604686][ T7804] usblp0: removed 20:52:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00010000000000000000000f"], 0x20}], 0x1}, 0x0) 20:52:04 executing program 4: alarm(0x0) alarm(0x8) alarm(0x80000000b9c4) 20:52:04 executing program 1: sysfs$2(0xc100, 0x0, &(0x7f0000000000)=""/124) 20:52:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9effffff00000000}, 0x0) 20:52:04 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) wait4(0x0, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x900}, 0x0) 20:52:04 executing program 1: sysfs$2(0xc101, 0x0, &(0x7f0000000000)=""/124) [ 1715.079557][T30933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1715.089269][T30938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:52:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000050"], 0x20}], 0x1}, 0x0) [ 1715.161852][T30939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1715.173512][T30949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:52:05 executing program 4: alarm(0x3) 20:52:05 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe00}, 0x0) 20:52:05 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffffff00000000}, 0x0) 20:52:05 executing program 1: sysfs$2(0xc200, 0x0, &(0x7f0000000000)=""/124) 20:52:05 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x8001, 0xc69, @mcast1, 0xfffffff8}, 0x1c) alarm(0x0) 20:52:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0xf}], 0x1}, 0x0) [ 1715.587335][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:52:05 executing program 1: sysfs$2(0xc201, 0x0, &(0x7f0000000000)=""/124) [ 1715.678064][T18048] usb 6-1: new high-speed USB device number 19 using dummy_hcd 20:52:05 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffff7f00000000}, 0x0) [ 1715.842798][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1715.928145][T18048] usb 6-1: Using ep0 maxpacket: 8 [ 1715.948142][T30993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1716.135657][T18048] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1716.144935][T18048] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1716.156049][T18048] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1716.166740][T18048] usb 6-1: config 250 has no interface number 0 [ 1716.174461][T18048] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1716.187276][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1716.199774][T18048] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1716.212039][T18048] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1716.227640][T18048] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1716.384282][T18048] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1716.401853][T18048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1716.412121][T18048] usb 6-1: SerialNumber: syz [ 1716.533669][T30948] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1716.551456][T30948] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1716.579119][T18048] hub 6-1:250.228: bad descriptor, ignoring hub [ 1716.585445][T18048] hub: probe of 6-1:250.228 failed with error -5 [ 1716.793653][T30948] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1716.803290][T30948] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1716.812164][T30948] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1716.836467][T30948] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1716.870646][T18048] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1721.560432][ T7804] usb 6-1: USB disconnect, device number 19 [ 1721.584514][ T7804] usblp0: removed 20:52:11 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) wait4(0x0, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:11 executing program 4: alarm(0xfffffffffffffffe) 20:52:11 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x14}], 0x1}, 0x0) 20:52:11 executing program 1: sysfs$2(0xc300, 0x0, &(0x7f0000000000)=""/124) 20:52:11 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf00}, 0x0) 20:52:11 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffffff00000000}, 0x0) 20:52:11 executing program 1: sysfs$2(0xc301, 0x0, &(0x7f0000000000)=""/124) 20:52:11 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0xc0}], 0x1}, 0x0) [ 1722.150076][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1722.186189][T31040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x100) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x1, 0x6, 0x4e, 0x0, 0x7ffffffffffffff7, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2000, 0x100, 0x1, 0x4, 0xfff, 0xd0af, 0x8, 0x0, 0xfffffff9, 0x0, 0x3}, r0, 0x1, 0xffffffffffffffff, 0x0) sched_setparam(r0, &(0x7f0000000000)=0x7) alarm(0x0) 20:52:12 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xfffffffffffff000}, 0x0) [ 1722.339840][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1722.434359][T31054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:52:12 executing program 1: sysfs$2(0xc400, 0x0, &(0x7f0000000000)=""/124) 20:52:12 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x12d5}, 0x0) [ 1722.627520][ T7678] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1722.628536][T31066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1722.691248][T31069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1722.812440][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1722.887633][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1723.087574][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1723.095968][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1723.120879][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1723.131601][ T7678] usb 6-1: config 250 has no interface number 0 [ 1723.139171][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1723.151985][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1723.163909][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1723.176665][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1723.203775][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1723.413240][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1723.423177][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1723.433068][ T7678] usb 6-1: SerialNumber: syz [ 1723.521497][T31032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1723.536659][T31032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1723.578819][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1723.596451][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1723.791202][T31032] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1723.807542][T31032] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1723.815860][T31032] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1723.832174][T31032] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1723.849768][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1728.673338][ T7678] usb 6-1: USB disconnect, device number 20 [ 1728.701745][ T7678] usblp0: removed 20:52:18 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:18 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0xec0}], 0x1}, 0x0) 20:52:18 executing program 1: sysfs$2(0xc401, 0x0, &(0x7f0000000000)=""/124) 20:52:18 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1f00}, 0x0) 20:52:18 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x2}, 0x0) 20:52:18 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0x3, 0x0, {0x0, 0x3, 0x8, 0x1, 0xdd08}}) alarm(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(&(0x7f0000000080)=[{r2, 0x92}, {0xffffffffffffffff, 0x405}], 0x2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1729.145730][T31110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1729.212818][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:19 executing program 1: sysfs$2(0xc500, 0x0, &(0x7f0000000000)=""/124) 20:52:19 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x33fe0}], 0x1}, 0x0) [ 1729.367200][T31114] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1729.405404][T31128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:19 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3}, 0x0) [ 1729.426509][T31114] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 20:52:19 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2000}, 0x0) 20:52:19 executing program 1: sysfs$2(0xc501, 0x0, &(0x7f0000000000)=""/124) [ 1729.643713][T31139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:52:19 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x200001a0}], 0x1}, 0x0) [ 1729.737007][T29802] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1729.798938][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.805270][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.901373][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1730.027255][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1730.227028][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1730.252065][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1730.269965][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1730.280431][T29802] usb 6-1: config 250 has no interface number 0 [ 1730.288219][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1730.301252][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1730.313235][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1730.325836][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1730.362164][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1730.547047][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1730.556205][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1730.578980][T29802] usb 6-1: SerialNumber: syz [ 1730.662385][T31119] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1730.676740][T31119] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1730.708266][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1730.714559][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1730.914719][T31119] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1730.924599][T31119] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1730.934069][T31119] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1730.942893][T31119] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1730.983108][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1731.369443][T13881] usb 6-1: USB disconnect, device number 21 [ 1731.389445][T13881] usblp0: removed 20:52:21 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:21 executing program 4: alarm(0x0) alarm(0x7ff) alarm(0x5) 20:52:21 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x4}, 0x0) 20:52:21 executing program 1: sysfs$2(0xc600, 0x0, &(0x7f0000000000)=""/124) 20:52:21 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3f00}, 0x0) 20:52:21 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x7ffff000}], 0x1}, 0x0) 20:52:21 executing program 4: alarm(0x209) alarm(0x3f) 20:52:21 executing program 1: sysfs$2(0xc601, 0x0, &(0x7f0000000000)=""/124) 20:52:21 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0xfffffdef}], 0x1}, 0x0) [ 1732.112684][T31205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:22 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x5}, 0x0) [ 1732.288368][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:22 executing program 1: sysfs$2(0xc700, 0x0, &(0x7f0000000000)=""/124) 20:52:22 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4800}, 0x0) [ 1732.566827][T13881] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1732.760300][T31233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.837067][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.846890][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1733.106972][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1733.115351][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1733.135435][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1733.146031][T13881] usb 6-1: config 250 has no interface number 0 [ 1733.153792][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1733.166476][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1733.177268][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1733.188508][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1733.202476][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1733.296809][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1733.306191][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1733.316153][T13881] usb 6-1: SerialNumber: syz [ 1733.387314][T31203] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1733.425372][T31203] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1733.457821][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1733.464148][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1733.668480][T31203] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1733.684203][T31203] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1733.693216][T31203] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1733.705802][T31203] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1733.732652][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1734.089158][T13881] usb 6-1: USB disconnect, device number 22 [ 1734.096664][ C0] usblp0: nonzero read bulk status received: -108 [ 1734.109084][T13881] usblp0: removed 20:52:24 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:24 executing program 4: alarm(0x0) alarm(0x200) 20:52:24 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6}, 0x0) 20:52:24 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x8}, 0x0) 20:52:24 executing program 1: sysfs$2(0xc701, 0x0, &(0x7f0000000000)=""/124) 20:52:24 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c00}, 0x0) [ 1734.705604][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:52:24 executing program 4: semget(0x2, 0x4, 0x80) alarm(0x0) 20:52:24 executing program 1: sysfs$2(0xc800, 0x0, &(0x7f0000000000)=""/124) [ 1734.788882][T31282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:24 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x10}, 0x0) 20:52:24 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x7}, 0x0) [ 1734.972832][T31289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1735.083465][T31297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:52:24 executing program 4: alarm(0x0) alarm(0x7) 20:52:24 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x5502}, 0x0) [ 1735.266758][T29754] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1735.376886][T31312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1735.422453][T31312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1735.586615][T29754] usb 6-1: Using ep0 maxpacket: 8 [ 1735.736888][T29754] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1735.747818][T29754] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1735.770586][T29754] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1735.789542][T29754] usb 6-1: config 250 has no interface number 0 [ 1735.797616][T29754] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1735.809466][T29754] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1735.822144][T29754] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1735.833527][T29754] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1735.848444][T29754] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1735.936760][T29754] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1735.945838][T29754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1735.955339][T29754] usb 6-1: SerialNumber: syz [ 1736.023867][T31280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1736.053287][T31280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1736.097271][T29754] hub 6-1:250.228: bad descriptor, ignoring hub [ 1736.103603][T29754] hub: probe of 6-1:250.228 failed with error -5 [ 1736.317766][T31280] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1736.327756][T31280] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1736.336626][T31280] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1736.345154][T31280] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1736.398317][T29754] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1736.781165][ T7804] usb 6-1: USB disconnect, device number 23 [ 1736.807111][ T7804] usblp0: removed 20:52:27 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:27 executing program 1: sysfs$2(0xc801, 0x0, &(0x7f0000000000)=""/124) 20:52:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x13}, 0x0) 20:52:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x8}, 0x0) 20:52:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) listen(r0, 0x54b0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfff, @empty, 0x80000001}, 0x1c) alarm(0x0) 20:52:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6000}, 0x0) [ 1737.398673][T31346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:52:27 executing program 1: sysfs$2(0xc900, 0x0, &(0x7f0000000000)=""/124) 20:52:27 executing program 4: alarm(0x80000001) alarm(0x800) 20:52:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0xffffff1f}, 0x0) [ 1737.519200][T31358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x9}, 0x0) [ 1737.696789][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:27 executing program 1: sysfs$2(0xc901, 0x0, &(0x7f0000000000)=""/124) 20:52:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6800}, 0x0) [ 1738.056353][T13881] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1738.083939][T31389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1738.327823][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1738.476413][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1738.484795][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1738.494214][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1738.504039][T13881] usb 6-1: config 250 has no interface number 0 [ 1738.510849][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1738.522910][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1738.534246][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1738.545084][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1738.559340][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1738.666649][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1738.675843][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1738.685913][T13881] usb 6-1: SerialNumber: syz [ 1738.794876][T31354] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1738.822523][T31354] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1738.867582][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1738.873895][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1739.080057][T31354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1739.089305][T31354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1739.098829][T31354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1739.107808][T31354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1739.153741][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1739.216870][T13881] usb 6-1: USB disconnect, device number 24 [ 1739.234615][T13881] usblp0: removed 20:52:29 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x2}, 0x0) 20:52:29 executing program 4: alarm(0x0) alarm(0x7) alarm(0x647f) alarm(0x5) alarm(0xff) alarm(0xae) 20:52:29 executing program 1: sysfs$2(0xca00, 0x0, &(0x7f0000000000)=""/124) 20:52:29 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xa}, 0x0) 20:52:29 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:29 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c00}, 0x0) [ 1740.013879][T31430] __nla_validate_parse: 1 callbacks suppressed [ 1740.013903][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:29 executing program 4: alarm(0x0) alarm(0x100000001) alarm(0x1) 20:52:29 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x3}, 0x0) 20:52:29 executing program 1: sysfs$2(0xca01, 0x0, &(0x7f0000000000)=""/124) 20:52:30 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xe}, 0x0) [ 1740.207231][T31436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:30 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7400}, 0x0) 20:52:30 executing program 4: alarm(0x0) alarm(0x0) 20:52:30 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x4}, 0x0) 20:52:30 executing program 1: sysfs$2(0xcb00, 0x0, &(0x7f0000000000)=""/124) [ 1740.516310][T13881] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1740.573941][T31459] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:30 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf}, 0x0) 20:52:30 executing program 4: alarm(0x3) alarm(0x8) alarm(0x200000000005) [ 1740.718123][T31468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1740.786175][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1741.041201][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1741.056234][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1741.065133][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1741.093211][T13881] usb 6-1: config 250 has no interface number 0 [ 1741.100989][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1741.113913][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1741.125730][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1741.137805][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1741.152744][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1741.276410][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1741.285531][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1741.294358][T13881] usb 6-1: SerialNumber: syz [ 1741.381281][T31425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1741.414800][T31425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1741.447185][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1741.453475][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1741.674920][T31425] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1741.686842][T31425] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1741.696877][T31425] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1741.714155][T31425] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1741.770369][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1741.837188][T13881] usb 6-1: USB disconnect, device number 25 [ 1741.849863][T13881] usblp0: removed 20:52:32 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:32 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x7}, 0x0) 20:52:32 executing program 1: sysfs$2(0xcb01, 0x0, &(0x7f0000000000)=""/124) 20:52:32 executing program 4: alarm(0x7) 20:52:32 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a00}, 0x0) 20:52:32 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x48}, 0x0) 20:52:32 executing program 4: alarm(0x0) alarm(0xc380) 20:52:32 executing program 1: sysfs$2(0xcc00, 0x0, &(0x7f0000000000)=""/124) [ 1742.593188][T31520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:32 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x9}, 0x0) 20:52:32 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x4c}, 0x0) [ 1742.760600][T31529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:32 executing program 1: sysfs$2(0xcc01, 0x0, &(0x7f0000000000)=""/124) 20:52:32 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x803e1100, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) alarm(0x0) [ 1743.116212][T13881] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1743.425994][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1743.626292][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1743.634723][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1743.666113][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1743.675611][T13881] usb 6-1: config 250 has no interface number 0 [ 1743.682620][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1743.694337][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1743.705057][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1743.716312][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1743.730032][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1743.876168][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1743.885245][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1743.924165][T13881] usb 6-1: SerialNumber: syz [ 1744.038660][T31524] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1744.070569][T31524] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1744.118048][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1744.124380][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1744.329870][T31524] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1744.340521][T31524] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1744.349794][T31524] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1744.358914][T31524] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1744.422318][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1744.483074][T13881] usb 6-1: USB disconnect, device number 26 [ 1744.499372][T13881] usblp0: removed 20:52:34 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xd512}, 0x0) 20:52:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf}, 0x0) 20:52:34 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x60}, 0x0) 20:52:34 executing program 1: sysfs$2(0xcd00, 0x0, &(0x7f0000000000)=""/124) 20:52:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) alarm(0x0) 20:52:35 executing program 1: sysfs$2(0xcd01, 0x0, &(0x7f0000000000)=""/124) [ 1745.275324][T31593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x63}, 0x0) 20:52:35 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x68}, 0x0) [ 1745.485324][T31603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:35 executing program 4: r0 = shmget(0x0, 0x2000, 0x3a9, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) alarm(0x0) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(r1, &(0x7f00000ae000/0x13000)=nil, 0x4000) shmat(r1, &(0x7f0000ff9000/0x3000)=nil, 0x3800) 20:52:35 executing program 1: sysfs$2(0xce00, 0x0, &(0x7f0000000000)=""/124) 20:52:35 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf0}, 0x0) [ 1745.775864][T13881] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1746.085948][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1746.225845][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1746.234257][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1746.245167][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1746.255738][T13881] usb 6-1: config 250 has no interface number 0 [ 1746.262049][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1746.275219][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1746.286831][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1746.298250][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1746.313369][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1746.436626][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1746.445896][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1746.454022][T13881] usb 6-1: SerialNumber: syz [ 1746.519916][T31595] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1746.544222][T31595] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1746.576981][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1746.583277][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1746.786287][T31595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1746.794752][T31595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1746.803759][T31595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1746.813038][T31595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1746.884009][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1751.662705][T29754] usb 6-1: USB disconnect, device number 27 [ 1751.721456][T29754] usblp0: removed 20:52:41 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:41 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf000}, 0x0) 20:52:41 executing program 1: sysfs$2(0xce01, 0x0, &(0x7f0000000000)=""/124) 20:52:41 executing program 4: alarm(0x0) alarm(0x8) 20:52:41 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6c}, 0x0) 20:52:41 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x300}, 0x0) 20:52:42 executing program 1: sysfs$2(0xcf00, 0x0, &(0x7f0000000000)=""/124) [ 1752.213376][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:42 executing program 4: r0 = mq_open(&(0x7f0000000000)='\'\x00', 0x1, 0x21, &(0x7f0000000040)={0x5, 0x80000000, 0x0, 0x4}) mq_timedreceive(r0, &(0x7f0000000080)=""/53, 0x35, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}) alarm(0x0) 20:52:42 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x700}, 0x0) [ 1752.372045][T31673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:42 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x74}, 0x0) 20:52:42 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x30000}, 0x0) 20:52:42 executing program 1: sysfs$2(0xcf01, 0x0, &(0x7f0000000000)=""/124) [ 1752.715411][T13881] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1752.757162][T31693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1752.879144][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1752.966606][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1753.135527][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1753.144004][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1753.175328][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1753.184629][T13881] usb 6-1: config 250 has no interface number 0 [ 1753.205893][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1753.219271][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1753.231584][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1753.242647][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1753.257053][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1753.365470][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1753.387443][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1753.395596][T13881] usb 6-1: SerialNumber: syz [ 1753.470022][T31666] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1753.488669][T31666] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1753.516164][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1753.522454][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1753.740504][T31666] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1753.750412][T31666] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1753.759964][T31666] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1753.770628][T31666] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1753.797153][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1758.625412][T13881] usb 6-1: USB disconnect, device number 28 [ 1758.642529][T13881] usblp0: removed 20:52:48 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:48 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000240)={0x268, 0x0, 0x0, 0x0, 0x0, "", [@generic="574245b0f959902a1543a437d22c29b48ec70262a09d717b208491e5bfe6c9ec7880d4416b2f7ecd71ef36d9b3821ca9c8d52e975c202bc5338073af676d33ecc0f8690d215a7c", @generic="6e982e5ff94f708518fbad331f99ca02c7e52d6e6fe057", @nested={0x7c, 0x49, 0x0, 0x1, [@generic="b3c5804b1aaa36486c0d38e2614b64477c346a8658b5884f9f219f681b3d2eaddfba439a509e068af03088f94725e9f4e32fd9f1807483d9dea46185c6dac155b6b1a7fbca0d53c3a68faffa53f920e29ae661846ddc440d4be6eee1c23600451c56c681b03695ff205e07d0cb997e89", @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0xcd, 0x6b, 0x0, 0x0, @binary="d2330922fd82c38573a07b172ad12f116911126d250612cfda63afa8d635bbcde4edc9de8c15a8f3048de0dd7dd1fafe680835a2e3e5c30fbc80da4c19a32fb186705335315fa3cd3353ae77dbdb5fc3ef8bc823bbafb22c574c63a81866d34dea5f6b47fd944dd3b8cebf6bdb5de04e05909d8df65aa4a133ae4d18cc6e4ee55ced8197c929fdf4c8132cd58e8b4699278379d014db93373b0d7376c20216fe8acf0e7e0cda860226b6d2fa6a558ab6f473644be7f92477d7ee32f7bf4ad37f8c86de6ee3b5999167"}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@empty}, @generic="cc80dffc8b3e0ddd6bfead0cfdfdd60233a74c96b896b2c97efdbd7f53953969c3651b036f19b10156c12f443ec8a9657a4b46c3b9eec4fb3ba7a7266a75f457769d48538356fdf1bec295bda262fd845ebe9368ebf101f5e4ae05427726444e22ec24955f4f4f0fbfa4d853d37ac7ead5e85a21a6aa766d2c75511ae1632eadbfee9221d9b61ce0f39791966209514a26d746cf449b22"]}, 0x268}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="08090015", @ANYRES16=r2, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4008000}, 0x8080) alarm(0x0) 20:52:48 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x900}, 0x0) 20:52:48 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x7a}, 0x0) 20:52:48 executing program 1: sysfs$2(0xd000, 0x0, &(0x7f0000000000)=""/124) 20:52:48 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x34000}, 0x0) 20:52:48 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf00}, 0x0) 20:52:48 executing program 1: sysfs$2(0xd001, 0x0, &(0x7f0000000000)=""/124) [ 1759.165686][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:49 executing program 4: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) alarm(0x0) [ 1759.311545][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:49 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf0}, 0x0) 20:52:49 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x3f00}, 0x0) 20:52:49 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x400300}, 0x0) [ 1759.684979][T17856] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1759.776309][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1759.846448][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1759.984956][T17856] usb 6-1: Using ep0 maxpacket: 8 [ 1760.184944][T17856] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1760.193320][T17856] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1760.205161][T17856] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1760.214405][T17856] usb 6-1: config 250 has no interface number 0 [ 1760.223388][T17856] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1760.236818][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1760.248635][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1760.260592][T17856] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1760.275759][T17856] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1760.364881][T17856] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1760.374027][T17856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1760.400624][T17856] usb 6-1: SerialNumber: syz [ 1760.500874][T31747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1760.519146][T31747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1760.546084][T17856] hub 6-1:250.228: bad descriptor, ignoring hub [ 1760.552393][T17856] hub: probe of 6-1:250.228 failed with error -5 [ 1760.769136][T31747] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1760.778356][T31747] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1760.788750][T31747] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1760.800295][T31747] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1760.854667][T17856] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1765.581008][ T7804] usb 6-1: USB disconnect, device number 29 [ 1765.596787][ T7804] usblp0: removed 20:52:55 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:52:55 executing program 1: sysfs$2(0xd100, 0x0, &(0x7f0000000000)=""/124) 20:52:55 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x23e}, 0x0) 20:52:55 executing program 4: alarm(0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB="7d830526ee4fc977d23efd710af73f01c14089b64c89a49f9539237f273a76cb1fbf108ca8969a04ecb4132bbf8d768468043dab32b1422b345aa11bda524504fe69649e1ac951b13d90772cefdbd8b82f623488da09e7b52e1bc926931d9a8a58396da6543025628cbd64f8d91e72456ca376bb4395d67aca2a27a915ef4a10db589c006db88cda81be4501dd6f8e955acf825bf96b3e34395d5abee3bc398461482f1864fc135974f3a9b64e2c3def90bee3804c2e864dedec6d35037b34b9c82c74f44d"], 0xca) 20:52:55 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x6300}, 0x0) 20:52:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe0ffff}, 0x0) 20:52:55 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf000}, 0x0) 20:52:55 executing program 1: sysfs$2(0xd101, 0x0, &(0x7f0000000000)=""/124) [ 1766.190477][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1766.371645][T31833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:52:56 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x30000}, 0x0) 20:52:56 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x300}, 0x0) 20:52:56 executing program 4: alarm(0x0) alarm(0x9) 20:52:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffff}, 0x0) [ 1766.734777][ T7678] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1766.874908][T31853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1766.940217][T31856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1767.014925][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1767.184335][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1767.196472][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1767.207956][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1767.246710][ T7678] usb 6-1: config 250 has no interface number 0 [ 1767.264788][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1767.307322][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1767.319413][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1767.331575][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1767.346738][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1767.481473][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1767.490684][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1767.500369][ T7678] usb 6-1: SerialNumber: syz [ 1767.573772][T31820] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1767.600055][T31820] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1767.625312][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1767.631610][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1767.864140][T31820] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1767.872507][T31820] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1767.884918][T31820] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1767.896469][T31820] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1767.958747][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1772.491374][ T7804] usb 6-1: USB disconnect, device number 30 [ 1772.506158][ T7804] usblp0: removed 20:53:02 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:02 executing program 1: sysfs$2(0xd200, 0x0, &(0x7f0000000000)=""/124) 20:53:02 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x500}, 0x0) 20:53:02 executing program 4: alarm(0x1) 20:53:02 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x34000}, 0x0) 20:53:02 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1000000}, 0x0) 20:53:02 executing program 4: alarm(0x6) 20:53:02 executing program 1: sysfs$2(0xd201, 0x0, &(0x7f0000000000)=""/124) 20:53:02 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x400300}, 0x0) [ 1773.052944][T31904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1773.227811][T31913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:03 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x600}, 0x0) 20:53:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe678647e6484ef9c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1407, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x11}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000880) alarm(0xfff) 20:53:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf0ffff}, 0x0) [ 1773.524065][ T7678] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1773.773893][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1773.913854][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1773.925728][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1773.961886][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1773.974625][ T7678] usb 6-1: config 250 has no interface number 0 [ 1773.981043][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1773.993770][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1774.004872][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1774.016079][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1774.030452][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1774.133998][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1774.143194][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1774.153319][ T7678] usb 6-1: SerialNumber: syz [ 1774.234658][T31900] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1774.260338][T31900] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1774.315004][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1774.321305][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1774.527139][T31900] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1774.544506][T31900] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1774.562235][T31900] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1774.589056][T31900] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1774.610760][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1779.323096][ T7678] usb 6-1: USB disconnect, device number 31 [ 1779.332016][ T7678] usblp0: removed 20:53:09 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:09 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2000000}, 0x0) 20:53:09 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x700}, 0x0) 20:53:09 executing program 1: sysfs$2(0xd300, 0x0, &(0x7f0000000000)=""/124) 20:53:09 executing program 4: alarm(0x5) 20:53:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x1000000}, 0x0) [ 1779.892140][T31976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:09 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x900}, 0x0) 20:53:09 executing program 1: sysfs$2(0xd301, 0x0, &(0x7f0000000000)=""/124) 20:53:09 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '(\']-'}, {0x20, '+[\'$'}, {}, {0x20, '\x90&]}-]-'}, {0x20, '@>-+}{'}, {0x20, '.\'+!.)&*\\:{'}, {0x20, '@$}-\\'}, {}], 0xa, "830e07c6fd90ec67a94f78768f72254993788050e11a362ae5c1dc13e0fd1d5e40e52ace59f26ff4bb7da39c860a831e0674cf8614254517361689d0084b880fde050665b41ef7c77f28d7f19aec4c9b3f9745b6f40926848263823dcb217ff4da9526c8ee62ed1d2dd026f7a7c0a24cd22ab734666c5a48a5e8afc18b0c9ab5fea2c41de67632385d5f231778e0af61ddae67cceeddde2a0fb92a4802117f653df5f238afdd2de986f5348c315ff2d4a3cc490c295411516a39133e86baece6de3e72609559be388c865735e962b5077cd5ba9895b422c111d87168b3e1242e4f5cf1327ca9"}, 0x11e) alarm(0x8000000000002) 20:53:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x2000000}, 0x0) [ 1780.058861][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:10 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3000000}, 0x0) 20:53:10 executing program 4: alarm(0x0) [ 1780.333546][T13881] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1780.564984][T32009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1780.603410][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1780.684545][T32012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1780.803276][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1780.836398][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1780.846065][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1780.855779][T13881] usb 6-1: config 250 has no interface number 0 [ 1780.862430][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1780.874695][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1780.885785][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1780.897533][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1780.912533][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1781.013400][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1781.022767][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1781.048106][T13881] usb 6-1: SerialNumber: syz [ 1781.132466][T31967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1781.150503][T31967] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1781.184442][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1781.190788][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1781.411433][T31967] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1781.421555][T31967] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1781.443077][T31967] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1781.452777][T31967] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1781.494872][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1786.150704][T29802] usb 6-1: USB disconnect, device number 32 [ 1786.169790][T29802] usblp0: removed 20:53:16 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:16 executing program 1: sysfs$2(0xd400, 0x0, &(0x7f0000000000)=""/124) 20:53:16 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xa00}, 0x0) 20:53:16 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x3000000}, 0x0) 20:53:16 executing program 4: alarm(0x0) alarm(0x0) alarm(0xffffffff) 20:53:16 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4000000}, 0x0) 20:53:16 executing program 4: alarm(0x0) alarm(0xffffffffffffffe2) alarm(0x1) [ 1786.757300][T32055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:16 executing program 1: sysfs$2(0xd401, 0x0, &(0x7f0000000000)=""/124) 20:53:16 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x4000000}, 0x0) 20:53:16 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xe00}, 0x0) [ 1786.929529][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:16 executing program 1: sysfs$2(0xd500, 0x0, &(0x7f0000000000)=""/124) 20:53:16 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x5000000}, 0x0) [ 1787.192998][T29754] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1787.435660][T32085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1787.453725][T29754] usb 6-1: Using ep0 maxpacket: 8 [ 1787.506484][T32088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1787.692788][T29754] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1787.701167][T29754] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1787.711873][T29754] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1787.737202][T29754] usb 6-1: config 250 has no interface number 0 [ 1787.745001][T29754] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1787.757808][T29754] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1787.769630][T29754] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1787.781465][T29754] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1787.796749][T29754] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1787.892848][T29754] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1787.901999][T29754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1787.928581][T29754] usb 6-1: SerialNumber: syz [ 1788.018577][T32050] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1788.050977][T32050] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1788.093939][T29754] hub 6-1:250.228: bad descriptor, ignoring hub [ 1788.100233][T29754] hub: probe of 6-1:250.228 failed with error -5 [ 1788.365465][T29754] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1791.223803][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.230226][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.151297][T29754] usb 6-1: USB disconnect, device number 33 [ 1793.160079][T29754] usblp0: removed 20:53:23 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:23 executing program 4: alarm(0x0) alarm(0x40001f) 20:53:23 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x7000000}, 0x0) 20:53:23 executing program 1: sysfs$2(0xd501, 0x0, &(0x7f0000000000)=""/124) 20:53:23 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf00}, 0x0) 20:53:23 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6000000}, 0x0) 20:53:23 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x9000000}, 0x0) [ 1793.692752][T32126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:23 executing program 4: alarm(0x0) alarm(0xffffffffffffffff) [ 1793.795327][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:23 executing program 1: sysfs$2(0xd600, 0x0, &(0x7f0000000000)=""/124) 20:53:23 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7000000}, 0x0) 20:53:23 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x1298}, 0x0) 20:53:23 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf000000}, 0x0) [ 1794.234494][T32157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1794.312620][T29802] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1794.344961][T32163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1794.632367][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1794.842514][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1794.851507][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1794.861355][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1794.871436][T29802] usb 6-1: config 250 has no interface number 0 [ 1794.878613][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1794.898590][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1794.912750][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1794.930491][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1794.946089][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1795.053088][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1795.069048][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1795.078411][T29802] usb 6-1: SerialNumber: syz [ 1795.189655][T32136] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1795.230231][T32136] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1795.263413][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1795.269712][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1795.528505][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1800.349956][T13881] usb 6-1: USB disconnect, device number 34 [ 1800.369730][T13881] usblp0: removed 20:53:30 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:30 executing program 4: alarm(0xa4400000000) alarm(0x1) alarm(0x9) 20:53:30 executing program 1: sysfs$2(0xd601, 0x0, &(0x7f0000000000)=""/124) 20:53:30 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x3f000000}, 0x0) 20:53:30 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x1f00}, 0x0) 20:53:30 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x8000000}, 0x0) [ 1800.940568][T32211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:30 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x2000}, 0x0) 20:53:30 executing program 1: sysfs$2(0xd700, 0x0, &(0x7f0000000000)=""/124) 20:53:30 executing program 4: alarm(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7e, 0x0, 0x5, 0x7, 0x0, 0xffff, 0x900a, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x40080, 0x81, 0x7, 0x2, 0x4, 0x1, 0xfffb, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r0, 0x1) 20:53:30 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x63000000}, 0x0) [ 1801.104428][T32216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:31 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9000000}, 0x0) 20:53:31 executing program 1: sysfs$2(0xd701, 0x0, &(0x7f0000000000)=""/124) [ 1801.403846][T32238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1801.482214][T17856] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1801.550989][T32244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1801.792005][T17856] usb 6-1: Using ep0 maxpacket: 8 [ 1801.931890][T17856] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1801.940258][T17856] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1801.949456][T17856] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1801.958876][T17856] usb 6-1: config 250 has no interface number 0 [ 1801.965380][T17856] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1801.977089][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1801.994875][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1802.009843][T17856] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1802.024385][T17856] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1802.102188][T17856] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1802.127793][T17856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1802.136140][T17856] usb 6-1: SerialNumber: syz [ 1802.238392][T32214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1802.261549][T32214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1802.302858][T17856] hub 6-1:250.228: bad descriptor, ignoring hub [ 1802.309169][T17856] hub: probe of 6-1:250.228 failed with error -5 [ 1802.584501][T17856] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1807.472389][ T7678] usb 6-1: USB disconnect, device number 35 [ 1807.492744][ T7678] usblp0: removed 20:53:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x9effffff}, 0x0) 20:53:37 executing program 4: alarm(0x20) alarm(0xffffffffffffffff) 20:53:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3e02}, 0x0) 20:53:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe000000}, 0x0) 20:53:37 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:37 executing program 1: sysfs$2(0xd800, 0x0, &(0x7f0000000000)=""/124) 20:53:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf0ffffff}, 0x0) 20:53:37 executing program 1: sysfs$2(0xd801, 0x0, &(0x7f0000000000)=""/124) 20:53:37 executing program 4: alarm(0x54ebe57e) [ 1808.108280][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1808.254312][T32293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:38 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3f00}, 0x0) 20:53:38 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf000000}, 0x0) 20:53:38 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xfffff000}, 0x0) 20:53:38 executing program 4: alarm(0x0) alarm(0x1) 20:53:38 executing program 1: sysfs$2(0xd900, 0x0, &(0x7f0000000000)=""/124) [ 1808.521455][T29802] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1808.708805][T32321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:38 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x4800}, 0x0) 20:53:38 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xffffff7f}, 0x0) [ 1808.791481][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1808.842064][T32327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1808.921436][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1808.942690][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1808.985307][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1809.013264][T29802] usb 6-1: config 250 has no interface number 0 [ 1809.032650][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1809.073644][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1809.131360][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1809.179518][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1809.207429][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1809.371360][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1809.380523][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1809.391488][T29802] usb 6-1: SerialNumber: syz [ 1809.514510][T32281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1809.557567][T32281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1809.602847][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1809.609117][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1809.841104][T32281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1809.849753][T32281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1809.860294][T32281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1809.870596][T32281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1809.947028][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1814.768151][T17856] usb 6-1: USB disconnect, device number 36 [ 1814.776551][T17856] usblp0: removed 20:53:44 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:44 executing program 1: sysfs$2(0xd901, 0x0, &(0x7f0000000000)=""/124) 20:53:44 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1f000000}, 0x0) 20:53:44 executing program 4: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0xc0, 0x400}, {0x1, 0x2a}, 0x1, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket(0x9, 0x4, 0x10001) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002a40)=0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/115, 0x73}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="916d0291e5391fdad31df6b89af5e465480b1548925a9012bb5db01626e2f4c9b745ca03bbd10f5e72e76eb015670aea85c5c3e8454b4526bb9241302aea9357b3bc975e60c628e56f34742ec28df025e357465e5dbb8a210c315bc93ce1a560c78b4bcf4960bf718e8ea93b1239830f0193b74fb2044bc42cbb8657d9c33d026eca5452bfd6661142ca2a12c57de40648ecbc0ac2e8"], 0x90}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/43, 0x2b}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/114, 0x72}], 0x1, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}], 0x4, 0x2000, &(0x7f0000001e00)={0x77359400}) fchown(0xffffffffffffffff, 0xffffffffffffffff, r9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)=[{{&(0x7f0000000180)=@abs={0xb00f64b28f159bde, 0x0, 0x4e21}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)="c646afd9922c10dc83d02cf53e95c8b28cb285708047057da75df0900d1ce7c39a02c8142fda22439015d1c882fb8dffd3721360e2ff0fb266eef466f2975d9a18558aab0dff170f393e48d44d9369c75fdeacd1f49d7b42bed9ea91128bf7672c9863327f5cbbd6e304bafeeeff0212", 0x70}, {&(0x7f0000000280)="43597ab0c1aacb52b953fd432b54f37d3f86b7aa7811807df3ca930927521720ff23cb486fa83e96eb6f7ec0d658a451ce23bc09dc61e8ba90e19b6d6a576a57cbbfcfef61c628acf1ff7a684aa8b24afc867bba28ce", 0x56}, {&(0x7f0000000300)="789d822c01310e63101257ac501ddfb251955999f1c56923c8b68ed2dec86658991f2cdf878dfd534ea434d917dab700a0a6e4e3949799aad96ea7a03fe96ca07c01b17df3d7579f18d10a2a99720182095649e51910efa495f007", 0x5b}, {&(0x7f0000000380)="0dc90d0a10fe3c501aefcf7e7adc47389d1e8786134fb2f4ebecc546fe4992acb496da25994c63abe39948d39b53a6e07f9342e0d32ef26c591f38c5e255c2ef8781bfdf23a5", 0x46}, {&(0x7f0000000400)="25bea4540aebdab0086a748feb15c523d434315c120ba06efeebaac06fe80306f4f3a5b2380bf400c8a453963169bd57c767f5a55f1bb8fc33b37ad9748d512acbf174c18f3b8d40c87c3975b764b5696e29521179bc6c7667402fe9912bc6cb5a94cf07af54f78190ea41097886a22886625dee984abeb9543e396b44743b614dd534eabd0e58deac90828413b9cfca25ad6d59fb65aa7be55f190ce55cb7c8b0e71a383a7e46b29f19180b75c09659b6ba2354deb2", 0xb6}], 0x5, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000600)="6c793a1ac02fb61904429e20965f93138475c558b01e24d2d6bd280a9260e177dcd9663d438ab2b37f959ea6a2bea8fd10e5ffe1e7e520bda33203f874625e282506d343", 0x44}], 0x1, 0x0, 0x0, 0x850}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000740)="38064a0ebeaae2050df183a927ad4aa593f68b2ec77e4cbf30bbf8c2e9d914bb440e25ca65835a3d85a80651113f481830d2ea4c23f4685b8fa6a24b51abcc96d6e0a929d2fe10c3e8c6098409df104ba5c8e8bf48feeddc7d109b89f49ccf1f24119b", 0x63}, {&(0x7f00000007c0)="63b597a7b34e2ca1430738f2a22a3c9b450ca7cffa69c911d0a4fb91181777056583ca6cabee79dbde5f5f943e13c1be922b25a28afee48c9eedd9b0c55595e723afe69bee45e7e2ba001922ba8143509e8a36ebb29d46d08349902555df1471f0ac71d11c72ca6d9c1fd1bf7c8ca0aea5df0fc2ece0647abd2f1ebedb2bb8174826574a15eb4cd28c766fb696e1862f95a885a70df7e78f5f5acbf6e60b2e2f3c0d626835c7124738fa53c08809eee2501601c316424d7bb7367f43fff6a3576a6285548f2cf345", 0xc8}], 0x2, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x88, 0x24004801}}], 0x3, 0x4114) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x14, 0x3, 0x40, 0x0, 0x0, 0x5, 0x10015}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4) alarm(0x0) 20:53:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xffffff9e}, 0x0) 20:53:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x4c00}, 0x0) [ 1815.371106][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:45 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xfffffff0}, 0x0) 20:53:45 executing program 1: sysfs$2(0xda00, 0x0, &(0x7f0000000000)=""/124) [ 1815.561735][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:45 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6000}, 0x0) [ 1815.658715][T32372] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1815.688959][T32372] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 20:53:45 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x20000000}, 0x0) 20:53:45 executing program 1: sysfs$2(0xda01, 0x0, &(0x7f0000000000)=""/124) [ 1815.790884][ T7678] usb 6-1: new high-speed USB device number 37 using dummy_hcd 20:53:45 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x3000000000000}, 0x0) [ 1815.998391][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1816.060958][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1816.119673][T32420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1816.280993][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1816.293224][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1816.318656][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1816.329879][ T7678] usb 6-1: config 250 has no interface number 0 [ 1816.338080][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1816.358945][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1816.383792][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1816.424325][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1816.450122][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1816.571278][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1816.580354][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1816.607796][ T7678] usb 6-1: SerialNumber: syz [ 1816.759302][T32376] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1816.804125][T32376] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1816.872064][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1816.878359][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1817.078234][T32376] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1817.093599][T32376] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1817.106843][T32376] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1817.120190][T32376] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1817.151246][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1821.881364][ T7678] usb 6-1: USB disconnect, device number 37 [ 1821.898632][ T7678] usblp0: removed 20:53:52 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:52 executing program 1: sysfs$2(0xdb00, 0x0, &(0x7f0000000000)=""/124) 20:53:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x4, 0x0, 0x5, 0xa00, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x40) alarm(0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1e, 0x100, 0x8, 0x8d80, 0x200, r1, 0x2, '\x00', 0x0, r2, 0x4, 0x4, 0x5}, 0x40) alarm(0x7) 20:53:52 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6800}, 0x0) 20:53:52 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x40030000000000}, 0x0) 20:53:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3f000000}, 0x0) [ 1822.371426][T32457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:52 executing program 1: sysfs$2(0xdb01, 0x0, &(0x7f0000000000)=""/124) 20:53:52 executing program 4: alarm(0x1) 20:53:52 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 1822.473070][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:52 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6c00}, 0x0) 20:53:52 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x48000000}, 0x0) 20:53:52 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x100000000000000}, 0x0) [ 1822.970389][ T7678] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1822.999108][T32491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1823.100684][T32499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1823.230370][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1823.373412][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1823.399886][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1823.430273][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1823.439531][ T7678] usb 6-1: config 250 has no interface number 0 [ 1823.466216][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1823.477967][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1823.488678][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1823.499207][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1823.513049][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1823.607471][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1823.617253][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1823.626813][ T7678] usb 6-1: SerialNumber: syz [ 1823.711694][T32470] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1823.739896][T32470] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1823.771948][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1823.778240][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1824.001147][T32470] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1824.009513][T32470] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1824.017945][T32470] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1824.032470][T32470] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1824.085787][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1828.801390][ T7804] usb 6-1: USB disconnect, device number 38 [ 1828.830097][ T7804] usblp0: removed 20:53:59 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:53:59 executing program 1: sysfs$2(0xdc00, 0x0, &(0x7f0000000000)=""/124) 20:53:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(0xffffffffffffffff, r0) alarm(0xfffffffffffffffc) 20:53:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x200000000000000}, 0x0) 20:53:59 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x7400}, 0x0) 20:53:59 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c000000}, 0x0) 20:53:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x300000000000000}, 0x0) 20:53:59 executing program 1: sysfs$2(0xdc01, 0x0, &(0x7f0000000000)=""/124) [ 1829.387707][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:59 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x7a00}, 0x0) [ 1829.583099][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:53:59 executing program 4: alarm(0x0) alarm(0xfff) alarm(0xffff) 20:53:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x400000000000000}, 0x0) 20:53:59 executing program 1: sysfs$2(0xdd00, 0x0, &(0x7f0000000000)=""/124) [ 1829.949856][ T7804] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1830.220056][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1830.420158][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1830.432226][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1830.443759][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1830.476052][ T7804] usb 6-1: config 250 has no interface number 0 [ 1830.484310][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1830.496348][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1830.507452][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1830.518751][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1830.532342][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1830.629994][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1830.639082][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1830.647276][ T7804] usb 6-1: SerialNumber: syz [ 1830.738795][T32545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1830.765225][T32545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1830.790785][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1830.797147][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1831.041520][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 39 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1835.819721][ T7804] usb 6-1: USB disconnect, device number 39 [ 1835.827911][ T7804] usblp0: removed 20:54:05 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:05 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x55020000}, 0x0) 20:54:05 executing program 4: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000380)=""/86, 0xf4f}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/111, &(0x7f0000000100)=0x6f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={r3, 0x7b, "66300498c3e977df4c5eacbe06160c1f4f4595c60459ec33657a85360ccfd8ca2b6d633ee9bd3982e7e9def4d2d326ea3749ea71789a55538430e94498936e351df19c131f036912bd43ae595b1398b1873b94f5fbca4f4eb96328cc85f66956224c366d67d318e6878b6ec52a91ce5c03d6f5dfcf4cb91cf7ad5b"}, &(0x7f0000000200)=0x83) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) alarm(0x0) 20:54:05 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x9812}, 0x0) 20:54:05 executing program 1: sysfs$2(0xdd01, 0x0, &(0x7f0000000000)=""/124) 20:54:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x700000000000000}, 0x0) [ 1836.315424][T32613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:06 executing program 1: sysfs$2(0xde00, 0x0, &(0x7f0000000000)=""/124) [ 1836.392295][T32616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x900000000000000}, 0x0) 20:54:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x60000000}, 0x0) 20:54:06 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf000}, 0x0) 20:54:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf00000000000000}, 0x0) 20:54:06 executing program 1: sysfs$2(0xde01, 0x0, &(0x7f0000000000)=""/124) [ 1836.812581][T32640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1836.899575][T29802] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1836.910425][T32653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1837.199364][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1837.389808][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1837.398168][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1837.407911][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1837.417322][T29802] usb 6-1: config 250 has no interface number 0 [ 1837.424603][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1837.436881][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1837.448555][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1837.469535][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1837.484523][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1837.589519][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1837.598810][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1837.608860][T29802] usb 6-1: SerialNumber: syz [ 1837.696196][T32623] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1837.735209][T32623] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1837.770571][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1837.776866][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1838.034750][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1842.838679][T29802] usb 6-1: USB disconnect, device number 40 [ 1842.910019][T29802] usblp0: removed 20:54:13 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x3f00000000000000}, 0x0) 20:54:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x30000}, 0x0) 20:54:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x68000000}, 0x0) 20:54:13 executing program 1: sysfs$2(0xdf00, 0x0, &(0x7f0000000000)=""/124) 20:54:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2400, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) r3 = getpgrp(r1) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x40, 0x9, 0x8, 0x9, 0x0, 0x7, 0x373cf54010ec9752, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f00000003c0), 0x6}, 0x10, 0xc22, 0x9, 0x0, 0x1, 0x64d8, 0xfff, 0x0, 0xffffffff, 0x0, 0xdb}, r3, 0xe, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4}], 0x1, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000200)={[0xfffffffffffffffe]}, 0x8) alarm(0x0) pselect6(0x40, &(0x7f0000000240)={0x6, 0x7, 0x8, 0xf79, 0x9, 0x9, 0x9, 0x800}, &(0x7f0000000280)={0x40, 0xa750, 0x81, 0x9, 0x80, 0xd41, 0x6, 0x2}, &(0x7f00000002c0)={0xffffffffffffbc1a, 0x18, 0xff, 0x2, 0x100000001, 0x8, 0x7fffffff, 0x8000}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000340)={[0x1000]}, 0x8}) 20:54:13 executing program 1: sysfs$2(0xdf01, 0x0, &(0x7f0000000000)=""/124) 20:54:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x6300000000000000}, 0x0) [ 1843.611542][T32706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x34000}, 0x0) 20:54:13 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x9effffff00000000}, 0x0) 20:54:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c000000}, 0x0) [ 1843.739829][T29802] usb 6-1: new high-speed USB device number 41 using dummy_hcd 20:54:13 executing program 1: sysfs$2(0xe000, 0x0, &(0x7f0000000000)=""/124) [ 1843.982246][T32730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1844.049633][T29802] usb 6-1: Using ep0 maxpacket: 8 [ 1844.082898][T32736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1844.287535][T29802] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1844.296015][T29802] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1844.307036][T29802] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1844.317977][T29802] usb 6-1: config 250 has no interface number 0 [ 1844.325353][T29802] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1844.348912][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1844.368721][T29802] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1844.388769][T29802] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1844.404589][T29802] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1844.568854][T29802] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1844.577950][T29802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1844.619150][T29802] usb 6-1: SerialNumber: syz [ 1844.727789][T32692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1844.757040][T32692] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1844.801012][T29802] hub 6-1:250.228: bad descriptor, ignoring hub [ 1844.807408][T29802] hub: probe of 6-1:250.228 failed with error -5 [ 1845.044808][T29802] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1850.014891][ T7804] usb 6-1: USB disconnect, device number 41 [ 1850.038985][ T7804] usblp0: removed 20:54:20 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:20 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 20:54:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x400300}, 0x0) 20:54:20 executing program 1: sysfs$2(0xe001, 0x0, &(0x7f0000000000)=""/124) 20:54:20 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x74000000}, 0x0) 20:54:20 executing program 4: alarm(0x0) alarm(0x2) 20:54:20 executing program 4: alarm(0x0) alarm(0x2) 20:54:20 executing program 1: sysfs$2(0xe100, 0x0, &(0x7f0000000000)=""/124) [ 1850.617291][ T311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:20 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) 20:54:20 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xe0ffff}, 0x0) [ 1850.862746][ T322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:20 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a000000}, 0x0) 20:54:20 executing program 1: sysfs$2(0xe101, 0x0, &(0x7f0000000000)=""/124) [ 1851.068349][ T7804] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1851.249116][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1851.281202][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1851.318358][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1851.505802][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1851.526759][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1851.537443][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1851.547780][ T7804] usb 6-1: config 250 has no interface number 0 [ 1851.555519][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1851.567918][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1851.579871][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1851.591530][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1851.606447][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1851.688292][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1851.697448][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1851.705614][ T7804] usb 6-1: SerialNumber: syz [ 1851.799656][ T308] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1851.824533][ T308] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1851.869537][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1851.876289][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1852.095361][ T308] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1852.103712][ T308] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1852.114541][ T308] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1852.124876][ T308] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1852.194498][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 42 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1852.659212][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.665516][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.058398][T29802] usb 6-1: USB disconnect, device number 42 [ 1857.075394][T29802] usblp0: removed 20:54:27 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:27 executing program 4: alarm(0x0) alarm(0x7) 20:54:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0xfffffffffffff000}, 0x0) 20:54:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf0ffff}, 0x0) 20:54:27 executing program 1: sysfs$2(0xe200, 0x0, &(0x7f0000000000)=""/124) 20:54:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9effffff}, 0x0) 20:54:27 executing program 1: sysfs$2(0xe201, 0x0, &(0x7f0000000000)=""/124) [ 1857.641281][ T384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:27 executing program 4: alarm(0x20ff) alarm(0x19ec) alarm(0x580a) alarm(0x1000200000) 20:54:27 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x0) 20:54:27 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x1000000}, 0x0) [ 1857.780847][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:27 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xd5120000}, 0x0) 20:54:27 executing program 1: sysfs$2(0xe300, 0x0, &(0x7f0000000000)=""/124) [ 1858.002836][ T405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1858.020441][ T7804] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1858.196367][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1858.240638][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1858.297787][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1858.495392][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1858.504114][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1858.515222][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1858.526019][ T7804] usb 6-1: config 250 has no interface number 0 [ 1858.544862][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1858.564654][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1858.576558][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1858.588505][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1858.603094][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1858.697926][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1858.707004][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1858.716924][ T7804] usb 6-1: SerialNumber: syz [ 1858.814175][ T372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1858.847278][ T372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1858.889094][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1858.895915][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1859.105554][ T372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1859.114925][ T372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1859.123910][ T372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1859.133464][ T372] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1859.199072][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1863.886583][ T7804] usb 6-1: USB disconnect, device number 43 [ 1863.894926][ T7804] usblp0: removed 20:54:34 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:34 executing program 4: alarm(0x0) alarm(0x6) alarm(0x9) 20:54:34 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x2000000}, 0x0) 20:54:34 executing program 1: sysfs$2(0xe301, 0x0, &(0x7f0000000000)=""/124) 20:54:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x2}, 0x0) 20:54:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffffff}, 0x0) 20:54:34 executing program 4: alarm(0x3f) alarm(0x4) alarm(0x1ff) [ 1864.372932][ T460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1864.409571][ T462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:34 executing program 1: sysfs$2(0xe400, 0x0, &(0x7f0000000000)=""/124) 20:54:34 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3000000}, 0x0) 20:54:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x3}, 0x0) [ 1864.612649][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:34 executing program 1: sysfs$2(0xe401, 0x0, &(0x7f0000000000)=""/124) [ 1864.755165][ T481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:54:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002000)=""/82, 0x45}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/63, 0x3f}], 0x4, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000003a40)=""/145, 0x91}, {&(0x7f0000001680)=""/228, 0xe4}, {&(0x7f0000001780)=""/142, 0x8e}, {&(0x7f0000001840)=""/128, 0x80}, {&(0x7f00000018c0)=""/75, 0x4b}, {&(0x7f0000001940)=""/130, 0x82}], 0x6, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/196, 0xc4}, {&(0x7f0000001c80)=""/215, 0xfffffffffffffdf1}, {&(0x7f0000001d80)=""/32, 0x20}], 0x3, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003b00)=""/4080, 0xff0}], 0x1, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003000), 0x6e, &(0x7f0000003340)=[{&(0x7f0000003080)=""/148, 0x94}, {&(0x7f0000003140)=""/62, 0x3e}, {&(0x7f0000003180)=""/233, 0xe9}, {&(0x7f00000015c0)=""/134, 0x86}], 0x4, &(0x7f0000003380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003480), 0x6e, &(0x7f0000003640)=[{&(0x7f0000001f40)=""/158, 0x9e}, {&(0x7f00000035c0)=""/95, 0x5f}], 0x2, &(0x7f0000003680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}], 0x6, 0x10000, &(0x7f0000003900)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000280), 0x1, 0x111800) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="480fc72ec4622d90440e7eb9800000c00f3235000400000f30c42131eed148b80d000000000000000f23c00f21f835030000000f23f8c4c2858c897de5ce3048b8d4000000000000000f23c00f21f835000004000f23f8b9800000c00f3235004000000f3066440f388240e564664d0faef2", 0x72}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000003980)=[@text32={0x20, &(0x7f0000003940)="643e0f01ca0f0866b871008ec0260f0011b9be0a0000b800000100ba000000000f300f23e50f01cfc4c17a2c5b800f229866ba4200ec", 0x36}], 0x1, 0x78, &(0x7f00000039c0)=[@efer={0x2, 0x8400}], 0x1) r9 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000100)="650fc76e0f260fc729362400f30f1efbbaf80c66b8e048b98666efbafc0cb80040ef3e640f2247ba430066ed0f0139c16d50808a29", 0x35}], 0x1, 0x73, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}], 0x1) open_by_handle_at(r1, &(0x7f0000000000)=@nfs={0x90, 0x24, {0x80000000, 0xc54, 0x10001, 0x80, "4f8fe5f78af27164a743650ac2bc66fe31ffb44be90bb18a2ad69b575bb4d8b5376ffe9459d90e0682be65a0561ede4a25a288448915a32375d9361a468e0f7225edd6f5e1bfd09c20dac5d95f9f28ebd483efff4e52b54dcbfab2d4c8eea724505f438993109a6d95a8ff331fc9858393e06838af876e40c0a2e7cd90bc765a"}}, 0x10000) alarm(0x0) [ 1864.947377][ T7678] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1865.142250][ T490] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1865.159695][ T490] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1865.180034][ T497] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1865.194793][ T497] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1865.267396][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1865.477246][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1865.485628][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1865.497283][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1865.508119][ T7678] usb 6-1: config 250 has no interface number 0 [ 1865.514407][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1865.528715][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1865.561864][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1865.587323][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1865.602471][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1865.727288][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1865.736404][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1865.747381][ T7678] usb 6-1: SerialNumber: syz [ 1865.845348][ T465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1865.901340][ T465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1865.938362][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1865.944752][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1866.163719][ T465] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1866.172730][ T465] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1866.186011][ T465] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1866.195604][ T465] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1866.273099][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 44 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1871.048536][ T7678] usb 6-1: USB disconnect, device number 44 [ 1871.098635][ T7678] usblp0: removed 20:54:41 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() gettid() r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:41 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffe000}, 0x0) 20:54:41 executing program 1: sysfs$2(0xe500, 0x0, &(0x7f0000000000)=""/124) 20:54:41 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x4}, 0x0) 20:54:41 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x4000000}, 0x0) 20:54:41 executing program 4: alarm(0xfffffffffffffffa) 20:54:41 executing program 4: alarm(0x1ffe) alarm(0x86) alarm(0x4) alarm(0x97) alarm(0x8) alarm(0x1aa1) alarm(0x1) [ 1871.583242][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1871.661592][ T554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:41 executing program 1: sysfs$2(0xe501, 0x0, &(0x7f0000000000)=""/124) 20:54:41 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x7}, 0x0) 20:54:41 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x5000000}, 0x0) [ 1871.798204][ T554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:41 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xfffff000}, 0x0) 20:54:41 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x533e, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xffff, 0x4}, 0x8021, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xe92bbb1}}, './file0\x00'}) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000140)={0x7, 0xfff9, 0x3}) ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000200)={&(0x7f00000001c0)=""/33, 0x21}) alarm(0x9) [ 1871.996959][ T7678] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1871.998995][ T571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1872.173334][ T581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1872.282962][ T587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1872.296856][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1872.596991][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1872.626219][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1872.645749][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1872.662229][ T7678] usb 6-1: config 250 has no interface number 0 [ 1872.669098][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1872.681192][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1872.692146][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1872.703090][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1872.718214][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1872.817032][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1872.830638][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1872.840770][ T7678] usb 6-1: SerialNumber: syz [ 1872.934313][ T547] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1872.956199][ T547] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1872.988781][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1872.995061][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1873.194115][ T547] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1873.203330][ T547] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1873.215432][ T547] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1873.226321][ T547] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1873.261880][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 45 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1878.084203][ T7678] usb 6-1: USB disconnect, device number 45 [ 1878.145599][ T7678] usblp0: removed 20:54:48 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() gettid() r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:48 executing program 1: sysfs$2(0xe600, 0x0, &(0x7f0000000000)=""/124) 20:54:48 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6000000}, 0x0) 20:54:48 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x9}, 0x0) 20:54:48 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffff7f}, 0x0) 20:54:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1bc, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7defd206}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x90}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14b4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c17296c5b60b486f042aef5157fcde9b244e14d5ec6486361bc54a2283bdb36ddc8f"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b9f44fdfa70946787fe7f3ab452462dcd4f827fc0df3"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x40c0801) alarm(0x0) 20:54:48 executing program 1: sysfs$2(0xe601, 0x0, &(0x7f0000000000)=""/124) [ 1878.854596][ T622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1878.918320][ T629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:48 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffeff) alarm(0x0) alarm(0x4) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) [ 1879.036572][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:48 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf}, 0x0) 20:54:48 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x7000000}, 0x0) 20:54:49 executing program 1: sysfs$2(0xe700, 0x0, &(0x7f0000000000)=""/124) 20:54:49 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffff9e}, 0x0) [ 1879.367779][ T651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1879.456482][ T7678] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1879.556936][ T662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1879.686610][ T667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1879.697146][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1879.836397][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1879.844781][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1879.906357][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1879.915608][ T7678] usb 6-1: config 250 has no interface number 0 [ 1879.931743][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1879.944635][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1879.968217][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1880.006339][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1880.026396][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1880.156392][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1880.165459][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1880.195167][ T7678] usb 6-1: SerialNumber: syz [ 1880.322524][ T631] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1880.354166][ T631] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1880.387423][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1880.393712][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1880.628565][ T631] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1880.637956][ T631] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1880.655446][ T631] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1880.664988][ T631] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1880.731770][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 46 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1885.446313][T29754] usb 6-1: USB disconnect, device number 46 [ 1885.467283][T29754] usblp0: removed 20:54:55 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() gettid() r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:54:55 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f0000000040)="73cd127369b481ade251f78b98d932d384b392271996199515e6a83903ae008ec06179235bb074697bc8fc19ab30882c04161bb89ce2a7c180578d04e5342a2634f963630e74fff9840e007903236635ce69712f33e733d1f2227cea9a398458ceec1e448e858b5d2d21e00d1e51006ecf30ad973d8f68dafdf63f5f03dff8582d7ddeca50bb5cb8dc3733a4550daeb9e0cf07aea7955a5296aa276aa16336ccd165a8a7", 0xa4}) alarm(0x0) alarm(0x1f) 20:54:55 executing program 1: sysfs$2(0xe701, 0x0, &(0x7f0000000000)=""/124) 20:54:55 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x63}, 0x0) 20:54:55 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x8000000}, 0x0) 20:54:55 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xfffffff0}, 0x0) 20:54:55 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(0x0, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1886.006337][ T701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:54:55 executing program 1: sysfs$2(0xe800, 0x0, &(0x7f0000000000)=""/124) [ 1886.081353][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:55 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf0}, 0x0) 20:54:56 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x9000000}, 0x0) [ 1886.250950][ T718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1886.468758][ T729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:54:56 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3000000000000}, 0x0) 20:54:56 executing program 1: sysfs$2(0xe801, 0x0, &(0x7f0000000000)=""/124) [ 1886.605986][T13881] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1886.785794][T29754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1886.853873][ T743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1886.905961][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1886.971979][ T747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1887.076014][T29754] usb 5-1: Using ep0 maxpacket: 8 [ 1887.315694][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1887.319734][T29754] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1887.331763][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1887.341875][T29754] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1887.348302][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1887.361752][T13881] usb 6-1: config 250 has no interface number 0 [ 1887.365664][T29754] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1887.370201][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1887.385645][T29754] usb 5-1: config 250 has no interface number 0 [ 1887.390901][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1887.395069][T29754] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1887.408249][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1887.428882][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1887.430938][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1887.444703][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1887.463763][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1887.475332][T29754] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1887.495631][T29754] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1887.623851][T29754] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1887.649346][T29754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1887.654093][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1887.659614][T29754] usb 5-1: SerialNumber: syz [ 1887.679167][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1887.704587][T13881] usb 6-1: SerialNumber: syz [ 1887.734869][ T717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1887.771515][ T717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1887.827310][T29754] hub 5-1:250.228: bad descriptor, ignoring hub [ 1887.833605][T29754] hub: probe of 5-1:250.228 failed with error -5 [ 1887.846884][ T713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1887.892182][ T713] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1887.948141][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1887.954424][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1888.051224][ T717] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1888.060221][ T717] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1888.070190][ T717] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1888.080976][ T717] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1888.155446][ T713] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1888.161439][T29754] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1888.164002][ T713] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1888.198404][ T713] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1888.216112][ T713] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1888.248201][T13881] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 47 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1888.625840][T29486] usb 6-1: USB disconnect, device number 47 [ 1893.101569][T29754] usb 5-1: USB disconnect, device number 4 [ 1893.125997][T29486] usblp1: removed [ 1893.136175][T29754] usblp0: removed 20:55:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x300}, 0x0) 20:55:04 executing program 1: sysfs$2(0xe900, 0x0, &(0x7f0000000000)=""/124) 20:55:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xa000000}, 0x0) 20:55:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x40030000000000}, 0x0) 20:55:04 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:04 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1894.428552][ T797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:04 executing program 1: sysfs$2(0xe901, 0x0, &(0x7f0000000000)=""/124) [ 1894.533112][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x700}, 0x0) [ 1894.737085][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xe000000}, 0x0) 20:55:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe0ffff00000000}, 0x0) [ 1894.942562][ T822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:04 executing program 1: sysfs$2(0xea00, 0x0, &(0x7f0000000000)=""/124) [ 1895.065655][T29754] usb 5-1: new high-speed USB device number 5 using dummy_hcd 20:55:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x900}, 0x0) [ 1895.185677][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1895.275525][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1895.315371][ T7678] usb 6-1: new high-speed USB device number 48 using dummy_hcd 20:55:05 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf000000}, 0x0) [ 1895.347402][T29754] usb 5-1: Using ep0 maxpacket: 8 20:55:05 executing program 1: sysfs$2(0xea01, 0x0, &(0x7f0000000000)=""/124) 20:55:05 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffffffffffff}, 0x0) [ 1895.475925][ T845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1895.525194][T29754] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1895.554533][T29754] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1895.595201][ T7678] usb 6-1: Using ep0 maxpacket: 8 [ 1895.601798][T29754] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1895.647406][T29754] usb 5-1: config 250 has no interface number 0 [ 1895.680963][T29754] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 20:55:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1895.765088][ T7678] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1895.773470][ T7678] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1895.778911][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1895.834812][ T7678] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1895.881289][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1895.890879][ T7678] usb 6-1: config 250 has no interface number 0 [ 1895.905807][ T862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1895.933684][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1895.944542][ T7678] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1895.956862][T29754] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1896.026138][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1896.029003][T29754] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1896.075508][ T871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1896.091467][ T7678] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1896.155488][T29754] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1896.167367][ T7678] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1896.191485][T29754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1896.214976][ T7678] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1896.229490][T29754] usb 5-1: SerialNumber: syz [ 1896.345375][ T7678] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1896.350578][ T802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1896.369633][ T7678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1896.411997][ T7678] usb 6-1: SerialNumber: syz [ 1896.430384][ T802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1896.516301][T29754] hub 5-1:250.228: bad descriptor, ignoring hub [ 1896.523084][T29754] hub: probe of 5-1:250.228 failed with error -5 [ 1896.524432][ T809] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1896.566393][ T809] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1896.606538][ T7678] hub 6-1:250.228: bad descriptor, ignoring hub [ 1896.612834][ T7678] hub: probe of 6-1:250.228 failed with error -5 [ 1896.836330][ T802] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1896.851201][ T802] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1896.872763][ T802] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1896.918483][ T802] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1896.919057][T29754] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1896.945360][T29754] usb 5-1: USB disconnect, device number 5 [ 1896.953684][T29754] usblp0: removed [ 1896.979773][ T809] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1896.997462][ T7678] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1897.020594][ T809] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1897.068845][ T809] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1897.099335][ T809] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1901.811709][ T7804] usb 6-1: USB disconnect, device number 48 [ 1901.835106][ T7804] usblp0: removed 20:55:11 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:11 executing program 1: sysfs$2(0xeb00, 0x0, &(0x7f0000000000)=""/124) 20:55:11 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x1f000000}, 0x0) 20:55:12 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x100000000000000}, 0x0) 20:55:12 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x3f00}, 0x0) 20:55:12 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1902.377140][ T929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:12 executing program 1: sysfs$2(0xeb01, 0x0, &(0x7f0000000000)=""/124) [ 1902.469928][ T936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:12 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x6300}, 0x0) [ 1902.682485][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:12 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x20000000}, 0x0) [ 1902.745125][T29754] usb 5-1: new high-speed USB device number 6 using dummy_hcd 20:55:12 executing program 1: sysfs$2(0xec00, 0x0, &(0x7f0000000000)=""/124) 20:55:12 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x200000000000000}, 0x0) [ 1902.902696][ T955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1902.964934][T29486] usb 6-1: new high-speed USB device number 49 using dummy_hcd 20:55:12 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1903.028038][T29754] usb 5-1: Using ep0 maxpacket: 8 [ 1903.152690][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1903.234702][T29754] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1903.245652][T29754] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1903.254942][T29486] usb 6-1: Using ep0 maxpacket: 8 [ 1903.274318][ T977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1903.275132][T29754] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1903.297726][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1903.325674][T29754] usb 5-1: config 250 has no interface number 0 [ 1903.333725][T29754] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1903.385737][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1903.415487][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1903.427115][T29754] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1903.465278][T29754] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1903.524709][T29486] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1903.568770][T29486] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1903.580627][T29486] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1903.592170][T29486] usb 6-1: config 250 has no interface number 0 [ 1903.599926][T29754] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1903.609579][T29486] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1903.623436][T29754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1903.647717][T29754] usb 5-1: SerialNumber: syz [ 1903.653660][T29486] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1903.691735][T29486] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1903.726126][T29486] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1903.744944][T29486] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1903.753728][ T926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1903.842399][ T926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1903.897264][T29486] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1903.915741][T29486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1903.925691][T29754] hub 5-1:250.228: bad descriptor, ignoring hub [ 1903.932395][T29754] hub: probe of 5-1:250.228 failed with error -5 [ 1903.946487][T29486] usb 6-1: SerialNumber: syz [ 1904.059741][ T934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1904.098108][ T934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1904.140499][T29486] hub 6-1:250.228: bad descriptor, ignoring hub [ 1904.149744][T29486] hub: probe of 6-1:250.228 failed with error -5 [ 1904.193196][ T926] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1904.226392][ T926] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1904.240371][ T926] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1904.264715][ T926] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1904.349392][ T934] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1904.353198][T29754] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1904.366329][ T934] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1904.399663][ T934] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1904.435986][ T934] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1904.447996][T29486] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1904.460137][T29754] usb 5-1: USB disconnect, device number 6 [ 1904.473806][T29754] usblp0: removed [ 1904.785294][ T8695] usb 6-1: USB disconnect, device number 49 [ 1904.801044][ T8695] usblp1: removed 20:55:15 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:15 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3e020000}, 0x0) 20:55:15 executing program 1: sysfs$2(0xec01, 0x0, &(0x7f0000000000)=""/124) 20:55:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x30000}, 0x0) 20:55:15 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x300000000000000}, 0x0) 20:55:15 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1905.479052][ T1034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:15 executing program 1: sysfs$2(0xed00, 0x0, &(0x7f0000000000)=""/124) [ 1905.560964][ T1043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x34000}, 0x0) 20:55:15 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3f000000}, 0x0) [ 1905.819239][ T1052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:15 executing program 1: sysfs$2(0xed01, 0x0, &(0x7f0000000000)=""/124) 20:55:15 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x400000000000000}, 0x0) [ 1906.044757][T29754] usb 5-1: new high-speed USB device number 7 using dummy_hcd 20:55:15 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 1906.164484][ T8695] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1906.314424][T29754] usb 5-1: Using ep0 maxpacket: 8 [ 1906.424884][ T8695] usb 6-1: Using ep0 maxpacket: 8 [ 1906.624581][T29754] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1906.632964][T29754] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1906.643349][ T8695] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1906.680482][ T8695] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1906.714341][T29754] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1906.723599][T29754] usb 5-1: config 250 has no interface number 0 [ 1906.730472][ T8695] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1906.744388][ T8695] usb 6-1: config 250 has no interface number 0 [ 1906.750690][ T8695] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1906.763455][T29754] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1906.787739][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1906.798895][ T8695] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1906.822608][T29754] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1906.833613][ T8695] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1906.844850][T29754] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1906.874106][ T8695] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1906.894594][T29754] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1906.901684][ T8695] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1907.026897][T29754] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1907.052218][T29754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1907.062825][ T8695] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1907.075124][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1907.083347][T29754] usb 5-1: SerialNumber: syz [ 1907.091660][ T8695] usb 6-1: SerialNumber: syz [ 1907.236601][ T1045] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1907.237305][ T1038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1907.262490][ T1045] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1907.323735][ T1038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1907.335637][ T8695] hub 6-1:250.228: bad descriptor, ignoring hub [ 1907.344245][ T8695] hub: probe of 6-1:250.228 failed with error -5 [ 1907.365650][T29754] hub 5-1:250.228: bad descriptor, ignoring hub [ 1907.374869][T29754] hub: probe of 5-1:250.228 failed with error -5 [ 1907.560058][ T1045] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1907.569294][ T1045] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1907.668431][T29754] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1907.695336][ T8695] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1907.757500][T29754] usb 5-1: USB disconnect, device number 7 [ 1907.780672][T29754] usblp0: removed [ 1908.034720][T29486] usb 6-1: USB disconnect, device number 50 [ 1908.042920][T29486] usblp1: removed 20:55:18 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:18 executing program 1: sysfs$2(0xee00, 0x0, &(0x7f0000000000)=""/124) 20:55:18 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x48000000}, 0x0) 20:55:18 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x500000000000000}, 0x0) 20:55:18 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 20:55:18 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1908.691921][ T1132] __nla_validate_parse: 4 callbacks suppressed [ 1908.691940][ T1132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1908.732518][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:18 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1908.810921][ T1135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:18 executing program 1: sysfs$2(0xee01, 0x0, &(0x7f0000000000)=""/124) 20:55:18 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x600000000000000}, 0x0) 20:55:18 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x4c000000}, 0x0) [ 1909.112693][ T1150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:19 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1909.264364][ T7678] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1909.275737][ T1160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:19 executing program 1: sysfs$2(0xef00, 0x0, &(0x7f0000000000)=""/124) [ 1909.407994][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1909.446862][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1909.484414][T29486] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1909.524243][ T7678] usb 5-1: Using ep0 maxpacket: 8 [ 1909.778068][ T7678] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1909.804111][ T7678] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1909.804197][T29486] usb 6-1: Using ep0 maxpacket: 8 [ 1909.813017][ T7678] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1909.813050][ T7678] usb 5-1: config 250 has no interface number 0 [ 1909.813089][ T7678] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1909.878383][ T7678] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1909.890048][ T7678] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1909.901443][ T7678] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1909.917809][ T7678] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1910.064173][ T7678] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1910.073418][ T7678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1910.104337][T29486] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1910.108983][ T7678] usb 5-1: SerialNumber: syz [ 1910.114313][T29486] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1910.126656][T29486] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1910.137157][T29486] usb 6-1: config 250 has no interface number 0 [ 1910.146378][T29486] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1910.159517][T29486] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1910.171579][T29486] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1910.183481][T29486] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1910.199239][T29486] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1910.313583][ T1137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1910.373358][ T1137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1910.404302][T29486] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1910.415393][ T7678] hub 5-1:250.228: bad descriptor, ignoring hub [ 1910.421681][ T7678] hub: probe of 5-1:250.228 failed with error -5 [ 1910.435757][T29486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1910.449715][T29486] usb 6-1: SerialNumber: syz [ 1910.563315][ T1144] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1910.623241][ T1144] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1910.642197][ T1137] validate_nla: 6 callbacks suppressed [ 1910.642272][ T1137] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1910.686391][ T1137] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1910.698205][ T1137] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1910.705406][T29486] hub 6-1:250.228: bad descriptor, ignoring hub [ 1910.713319][T29486] hub: probe of 6-1:250.228 failed with error -5 [ 1910.719635][ T1137] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1910.770122][ T7678] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1910.844554][ T7678] usb 5-1: USB disconnect, device number 8 [ 1910.884916][ T7678] usblp0: removed [ 1910.932294][ T1144] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1910.950757][ T1144] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1910.975894][ T1144] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1910.992271][ T1144] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1911.015416][T29486] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1914.095065][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.101442][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.665463][T18048] usb 6-1: USB disconnect, device number 51 [ 1915.727938][T18048] usblp0: removed 20:55:25 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:25 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x700000000000000}, 0x0) 20:55:25 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) 20:55:25 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x60000000}, 0x0) 20:55:25 executing program 1: sysfs$2(0xef01, 0x0, &(0x7f0000000000)=""/124) 20:55:25 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1916.154020][ T1240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1916.283076][ T1248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:26 executing program 1: sysfs$2(0xf000, 0x0, &(0x7f0000000000)=""/124) 20:55:26 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 20:55:26 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x68000000}, 0x0) [ 1916.583940][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:26 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x800000000000000}, 0x0) [ 1916.657618][ T1264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1916.683947][ T8695] usb 6-1: new high-speed USB device number 52 using dummy_hcd 20:55:26 executing program 1: sysfs$2(0xf001, 0x0, &(0x7f0000000000)=""/124) 20:55:26 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 1916.823873][ T7678] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1916.993854][ T8695] usb 6-1: Using ep0 maxpacket: 8 [ 1917.001029][ T1281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1917.032239][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1917.073579][ T7678] usb 5-1: Using ep0 maxpacket: 8 [ 1917.100982][ T1286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1917.263586][ T8695] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1917.271986][ T8695] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1917.280015][ T7678] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1917.289365][ T8695] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1917.302224][ T8695] usb 6-1: config 250 has no interface number 0 [ 1917.309563][ T8695] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1917.313230][ T7678] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1917.330378][ T8695] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1917.361268][ T7678] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1917.377944][ T8695] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1917.394309][ T7678] usb 5-1: config 250 has no interface number 0 [ 1917.413493][ T8695] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1917.418164][ T7678] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1917.443564][ T8695] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1917.478461][ T7678] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1917.501975][ T7678] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1917.533592][ T7678] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1917.542887][ T8695] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1917.559995][ T7678] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1917.573629][ T8695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1917.594335][ T8695] usb 6-1: SerialNumber: syz [ 1917.723649][ T7678] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1917.730660][ T1241] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1917.761801][ T7678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1917.768369][ T1241] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1917.787743][ T7678] usb 5-1: SerialNumber: syz [ 1917.795551][ T8695] hub 6-1:250.228: bad descriptor, ignoring hub [ 1917.802208][ T8695] hub: probe of 6-1:250.228 failed with error -5 [ 1917.901322][ T1238] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1917.934410][ T1238] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1917.954710][ T7678] hub 5-1:250.228: bad descriptor, ignoring hub [ 1917.961003][ T7678] hub: probe of 5-1:250.228 failed with error -5 [ 1918.040717][ T1241] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1918.049794][ T1241] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1918.061123][ T1241] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1918.070860][ T1241] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1918.126124][ T8695] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 52 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1918.209384][ T1238] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1918.224397][ T1238] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1918.241477][ T1238] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1918.250710][ T1238] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1918.324510][ T7678] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1922.923978][ T7678] usb 6-1: USB disconnect, device number 52 [ 1923.009477][ T7678] usblp0: removed 20:55:33 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:33 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x6c000000}, 0x0) 20:55:33 executing program 1: sysfs$2(0xf100, 0x0, &(0x7f0000000000)=""/124) 20:55:33 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x9000000}, 0x0) 20:55:33 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x900000000000000}, 0x0) 20:55:34 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1924.299833][ T1328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:34 executing program 1: sysfs$2(0xf101, 0x0, &(0x7f0000000000)=""/124) [ 1924.364392][T13881] usb 5-1: USB disconnect, device number 9 [ 1924.400395][T13881] usblp1: removed [ 1924.406369][ T1338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf000000}, 0x0) 20:55:34 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x74000000}, 0x0) [ 1924.573554][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:34 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xe00000000000000}, 0x0) [ 1924.868163][ T1360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:34 executing program 1: sysfs$2(0xf200, 0x0, &(0x7f0000000000)=""/124) [ 1924.984021][T18048] usb 5-1: new high-speed USB device number 10 using dummy_hcd 20:55:34 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 1925.031917][ T1371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1925.153075][T29486] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1925.162445][ T1367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1925.210682][ T1379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1925.253132][T18048] usb 5-1: Using ep0 maxpacket: 8 [ 1925.423175][T29486] usb 6-1: Using ep0 maxpacket: 8 [ 1925.434121][T18048] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1925.467495][T18048] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1925.543487][T18048] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1925.554649][T18048] usb 5-1: config 250 has no interface number 0 [ 1925.561139][T18048] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1925.575266][T18048] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1925.587506][T18048] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1925.599830][T18048] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1925.609708][T29486] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1925.616218][T18048] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1925.633023][T29486] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1925.643438][T29486] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1925.652671][T29486] usb 6-1: config 250 has no interface number 0 [ 1925.695169][T29486] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1925.722479][T29486] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1925.742990][T29486] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1925.749651][T18048] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1925.763566][T18048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1925.774023][T29486] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1925.779558][T18048] usb 5-1: SerialNumber: syz [ 1925.802393][T29486] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1925.924469][ T1343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1925.988430][ T1343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1926.019355][T29486] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1926.042944][T29486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1926.050974][T29486] usb 6-1: SerialNumber: syz [ 1926.064173][T18048] hub 5-1:250.228: bad descriptor, ignoring hub [ 1926.070498][T18048] hub: probe of 5-1:250.228 failed with error -5 [ 1926.172259][ T1345] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1926.221916][ T1345] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1926.304243][T29486] hub 6-1:250.228: bad descriptor, ignoring hub [ 1926.313566][T29486] hub: probe of 6-1:250.228 failed with error -5 [ 1926.331527][ T1343] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1926.363285][ T1343] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1926.372452][ T1343] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1926.393610][ T1343] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1926.417118][T18048] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1926.527956][ T1345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1926.542307][ T1345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1926.551985][ T1345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1926.561273][ T1345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1926.617549][T29486] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1926.795566][T29486] usb 5-1: USB disconnect, device number 10 [ 1926.815972][T29486] usblp0: removed [ 1926.993152][T18048] usb 6-1: USB disconnect, device number 53 [ 1927.001793][T18048] usblp1: removed 20:55:37 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:37 executing program 1: sysfs$2(0xf201, 0x0, &(0x7f0000000000)=""/124) 20:55:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x7a000000}, 0x0) 20:55:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf00000000000000}, 0x0) 20:55:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x63000000}, 0x0) 20:55:37 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1927.720900][ T1427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1927.737703][ T1426] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1927.813091][ T1426] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1927.814466][ T1433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:37 executing program 1: sysfs$2(0xf300, 0x0, &(0x7f0000000000)=""/124) 20:55:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 20:55:37 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x98120000}, 0x0) [ 1927.964861][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:37 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x1f00000000000000}, 0x0) 20:55:37 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 1928.143040][T17856] usb 5-1: new high-speed USB device number 11 using dummy_hcd 20:55:37 executing program 1: sysfs$2(0xf301, 0x0, &(0x7f0000000000)=""/124) [ 1928.412927][T17856] usb 5-1: Using ep0 maxpacket: 8 [ 1928.582967][T17856] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1928.603054][T17856] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1928.622495][T17856] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 20:55:38 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:38 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 20:55:38 executing program 1: sysfs$2(0xf400, 0x0, &(0x7f0000000000)=""/124) 20:55:38 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x9effffff}, 0x0) 20:55:38 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x2000000000000000}, 0x0) [ 1928.633015][T17856] usb 5-1: config 250 has no interface number 0 [ 1928.662513][T17856] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1928.717365][T17856] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1928.758880][T17856] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1928.796237][T17856] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1928.864761][T17856] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1928.962900][T17856] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1929.004181][T17856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1929.027206][T17856] usb 5-1: SerialNumber: syz [ 1929.133568][ T1425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1929.205836][ T1425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1929.256662][T17856] hub 5-1:250.228: bad descriptor, ignoring hub [ 1929.263460][T17856] hub: probe of 5-1:250.228 failed with error -5 [ 1929.534667][T17856] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1934.254802][ T7678] usb 5-1: USB disconnect, device number 11 [ 1934.273822][ T7678] usblp0: removed 20:55:44 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 20:55:44 executing program 1: sysfs$2(0xf401, 0x0, &(0x7f0000000000)=""/124) 20:55:44 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x3f00000000000000}, 0x0) 20:55:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf0ffffff}, 0x0) 20:55:44 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r3, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1934.742440][ T1526] __nla_validate_parse: 7 callbacks suppressed [ 1934.742461][ T1526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:44 executing program 1: sysfs$2(0xf500, 0x0, &(0x7f0000000000)=""/124) [ 1934.784342][ T1529] validate_nla: 10 callbacks suppressed [ 1934.784382][ T1529] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1934.865253][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:44 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 20:55:44 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xffffe000}, 0x0) [ 1934.917935][ T1529] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 20:55:44 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4800000000000000}, 0x0) [ 1934.977958][ T1529] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1935.023515][ T1529] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 20:55:44 executing program 1: sysfs$2(0xf501, 0x0, &(0x7f0000000000)=""/124) [ 1935.122343][ T1545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:45 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 1935.254466][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1935.272321][T13881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1935.435503][ T1565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1935.480162][ T1567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1935.562516][T13881] usb 5-1: Using ep0 maxpacket: 8 [ 1935.722522][T13881] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1935.730900][T13881] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1935.748637][T13881] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1935.759444][T13881] usb 5-1: config 250 has no interface number 0 [ 1935.767191][T13881] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1935.780813][T13881] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1935.792904][T13881] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1935.804842][T13881] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1935.819747][T13881] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1935.952374][T13881] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1935.966126][T13881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1935.983829][T13881] usb 5-1: SerialNumber: syz [ 1936.075671][ T1524] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1936.117381][ T1524] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1936.153623][T13881] hub 5-1:250.228: bad descriptor, ignoring hub [ 1936.159923][T13881] hub: probe of 5-1:250.228 failed with error -5 [ 1936.370056][ T1524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1936.381329][ T1524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1936.390642][ T1524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1936.399691][ T1524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1936.459020][T13881] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1936.829483][T13881] usb 5-1: USB disconnect, device number 12 [ 1936.842146][ C0] usblp0: nonzero read bulk status received: -71 [ 1936.863122][T13881] usblp0: removed 20:55:47 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:47 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xfffff000}, 0x0) 20:55:47 executing program 1: sysfs$2(0xf600, 0x0, &(0x7f0000000000)=""/124) 20:55:47 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 20:55:47 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x4c00000000000000}, 0x0) 20:55:47 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1937.486845][ T1606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:47 executing program 1: sysfs$2(0xf601, 0x0, &(0x7f0000000000)=""/124) [ 1937.572971][ T1611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:47 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x2) 20:55:47 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1937.732347][ T1617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:55:47 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x5502000000000000}, 0x0) [ 1937.782238][T17856] usb 6-1: new high-speed USB device number 54 using dummy_hcd 20:55:47 executing program 1: sysfs$2(0xf700, 0x0, &(0x7f0000000000)=""/124) [ 1937.875053][ T1626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1937.962323][T29486] usb 5-1: new high-speed USB device number 13 using dummy_hcd 20:55:47 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x3) [ 1938.052241][T17856] usb 6-1: Using ep0 maxpacket: 8 [ 1938.203131][T17856] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1938.211544][T17856] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1938.232407][T29486] usb 5-1: Using ep0 maxpacket: 8 [ 1938.243403][T17856] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1938.332682][T17856] usb 6-1: config 250 has no interface number 0 [ 1938.338999][T17856] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1938.368175][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1938.423049][T17856] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1938.439353][T17856] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1938.472103][T29486] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1938.493813][T17856] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1938.501322][T29486] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1938.513609][T29486] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1938.524822][T29486] usb 5-1: config 250 has no interface number 0 [ 1938.531114][T29486] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1938.545611][T29486] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1938.557365][T29486] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1938.570039][T29486] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1938.585834][T17856] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1938.595849][T29486] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1938.605754][T17856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1938.615020][T17856] usb 6-1: SerialNumber: syz [ 1938.679727][ T1605] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1938.688466][ T1605] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1938.735545][T17856] hub 6-1:250.228: bad descriptor, ignoring hub [ 1938.741832][T17856] hub: probe of 6-1:250.228 failed with error -5 [ 1938.762379][T29486] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1938.771447][T29486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1938.782895][T29486] usb 5-1: SerialNumber: syz [ 1938.894411][ T1607] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1938.917528][ T1607] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1938.937449][ T1605] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1938.945695][ T1605] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1938.953372][T29486] hub 5-1:250.228: bad descriptor, ignoring hub [ 1938.960130][T29486] hub: probe of 5-1:250.228 failed with error -5 [ 1938.990997][T17856] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1943.425537][ T7804] usb 6-1: USB disconnect, device number 54 [ 1943.432291][T29486] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1943.513149][ T7804] usblp0: removed 20:55:53 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:55:53 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xffffff9e}, 0x0) 20:55:53 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6000000000000000}, 0x0) 20:55:53 executing program 1: sysfs$2(0xf701, 0x0, &(0x7f0000000000)=""/124) 20:55:53 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x4) 20:55:53 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1944.023622][ T1687] __nla_validate_parse: 2 callbacks suppressed [ 1944.023642][ T1687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1944.062031][ T7804] usb 5-1: USB disconnect, device number 13 [ 1944.084505][ T7804] usblp1: removed 20:55:53 executing program 1: sysfs$2(0xf800, 0x0, &(0x7f0000000000)=""/124) 20:55:54 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x7) 20:55:54 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1944.289628][ T1710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1944.321883][T13881] usb 6-1: new high-speed USB device number 55 using dummy_hcd 20:55:54 executing program 1: sysfs$2(0xf801, 0x0, &(0x7f0000000000)=""/124) 20:55:54 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6800000000000000}, 0x0) 20:55:54 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x9) [ 1944.571820][T13881] usb 6-1: Using ep0 maxpacket: 8 [ 1944.601798][ T7804] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1944.680244][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1944.702768][T13881] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1944.711148][T13881] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1944.778712][T13881] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1944.789946][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1944.821073][T13881] usb 6-1: config 250 has no interface number 0 [ 1944.849073][T13881] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1944.851932][ T7804] usb 5-1: Using ep0 maxpacket: 8 [ 1944.880173][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1944.892772][T13881] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1944.921845][T13881] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1944.971794][T13881] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1945.011832][ T7804] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1945.020211][ T7804] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1945.046571][ T7804] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1945.056616][ T7804] usb 5-1: config 250 has no interface number 0 [ 1945.063177][ T7804] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1945.074967][ T7804] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1945.081724][T13881] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1945.085763][ T7804] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1945.105205][ T7804] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1945.116553][T13881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1945.119086][ T7804] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1945.145486][T13881] usb 6-1: SerialNumber: syz [ 1945.183622][ T1689] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1945.191129][ T1689] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1945.231725][ T7804] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1945.242885][T13881] hub 6-1:250.228: bad descriptor, ignoring hub [ 1945.249164][T13881] hub: probe of 6-1:250.228 failed with error -5 [ 1945.251092][ T7804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1945.264249][ T7804] usb 5-1: SerialNumber: syz [ 1945.381261][ T1704] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1945.409759][ T1704] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1945.444561][ T1689] validate_nla: 6 callbacks suppressed [ 1945.444577][ T1689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1945.452842][ T7804] hub 5-1:250.228: bad descriptor, ignoring hub [ 1945.475327][ T1689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1945.484642][ T1689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1945.491759][ T7804] hub: probe of 5-1:250.228 failed with error -5 [ 1945.494799][ T1689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1945.532395][T13881] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 55 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1945.688261][ T1704] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1945.696964][ T1704] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1945.705511][ T1704] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1945.716284][ T1704] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1950.041681][ T7678] usb 6-1: USB disconnect, device number 55 [ 1950.061768][ T7804] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1950.061786][ T7678] usblp0: removed 20:56:00 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) 20:56:00 executing program 1: sysfs$2(0xf900, 0x0, &(0x7f0000000000)=""/124) 20:56:00 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x3000000000000}, 0x0) 20:56:00 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0xf) 20:56:00 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x6c00000000000000}, 0x0) 20:56:00 executing program 5: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() [ 1950.682409][ T8695] usb 5-1: USB disconnect, device number 14 [ 1950.713297][ T8695] usblp1: removed 20:56:00 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x63) [ 1950.750438][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:00 executing program 1: sysfs$2(0xf901, 0x0, &(0x7f0000000000)=""/124) [ 1950.878236][ T1807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:00 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x40030000000000}, 0x0) 20:56:00 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0xf0) 20:56:00 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7400000000000000}, 0x0) [ 1951.041203][ T7804] usb 6-1: new high-speed USB device number 56 using dummy_hcd 20:56:00 executing program 1: sysfs$2(0xfa00, 0x0, &(0x7f0000000000)=""/124) [ 1951.159189][ T1818] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1951.201482][ T8695] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1951.294529][ T1829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1951.311340][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1951.432089][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1951.440457][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1951.451322][ T8695] usb 5-1: Using ep0 maxpacket: 8 [ 1951.469240][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1951.480030][ T1834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1951.514844][ T7804] usb 6-1: config 250 has no interface number 0 [ 1951.593220][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1951.605322][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1951.637734][ T8695] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1951.646317][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1951.656978][ T8695] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1951.666152][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1951.680698][ T8695] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1951.691674][ T8695] usb 5-1: config 250 has no interface number 0 [ 1951.698048][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1951.707009][ T8695] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1951.733994][ T8695] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1951.745558][ T8695] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1951.757136][ T8695] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1951.772111][ T8695] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1951.811510][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1951.820569][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1951.830183][ T7804] usb 6-1: SerialNumber: syz [ 1951.863441][ T1785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1951.871778][ T1785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1951.887558][ T8695] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1951.897849][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1951.904354][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1951.918798][ T8695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1951.927825][ T8695] usb 5-1: SerialNumber: syz [ 1952.055989][ T1782] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1952.078755][ T1782] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1952.110859][ T1785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1952.120379][ T1785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1952.129481][ T1785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1952.139353][ T8695] hub 5-1:250.228: bad descriptor, ignoring hub [ 1952.141292][ T1785] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1952.169852][ T8695] hub: probe of 5-1:250.228 failed with error -5 [ 1952.186913][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 56 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1952.360039][ T1782] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1952.368755][ T1782] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1952.379545][ T1782] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1952.389620][ T1782] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1952.491626][ T1785] [ 1952.493967][ T1785] ====================================================== [ 1952.500982][ T1785] WARNING: possible circular locking dependency detected [ 1952.507989][ T1785] 5.16.0-rc1-next-20211118-syzkaller #0 Not tainted [ 1952.514556][ T1785] ------------------------------------------------------ [ 1952.521555][ T1785] syz-executor.5/1785 is trying to acquire lock: [ 1952.527880][ T1785] ffff888019288d68 (hcd->address0_mutex){+.+.}-{3:3}, at: usb_reset_and_verify_device+0x3ee/0xee0 [ 1952.538544][ T1785] [ 1952.538544][ T1785] but task is already holding lock: [ 1952.545891][ T1785] ffff88801de675c0 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_resume+0x2a6/0x1950 [ 1952.555799][ T1785] [ 1952.555799][ T1785] which lock already depends on the new lock. [ 1952.555799][ T1785] [ 1952.566220][ T1785] [ 1952.566220][ T1785] the existing dependency chain (in reverse order) is: [ 1952.575325][ T1785] [ 1952.575325][ T1785] -> #1 (&port_dev->status_lock){+.+.}-{3:3}: [ 1952.583565][ T1785] __mutex_lock+0x12f/0x12f0 [ 1952.588689][ T1785] hub_event+0x21c1/0x4450 [ 1952.593614][ T1785] process_one_work+0x9b2/0x1690 [ 1952.599058][ T1785] worker_thread+0x658/0x11f0 [ 1952.604259][ T1785] kthread+0x405/0x4f0 [ 1952.608925][ T1785] ret_from_fork+0x1f/0x30 [ 1952.613854][ T1785] [ 1952.613854][ T1785] -> #0 (hcd->address0_mutex){+.+.}-{3:3}: [ 1952.621824][ T1785] __lock_acquire+0x2a07/0x54a0 [ 1952.627206][ T1785] lock_acquire+0x1ab/0x510 [ 1952.632271][ T1785] __mutex_lock+0x12f/0x12f0 [ 1952.637371][ T1785] usb_reset_and_verify_device+0x3ee/0xee0 [ 1952.643686][ T1785] usb_port_resume+0x12f7/0x1950 [ 1952.649151][ T1785] usb_generic_driver_resume+0x40/0xa0 [ 1952.655164][ T1785] usb_resume_both+0x627/0x8d0 [ 1952.660451][ T1785] __rpm_callback+0xc9/0x330 [ 1952.665591][ T1785] rpm_callback+0x1da/0x220 [ 1952.670621][ T1785] rpm_resume+0xf5d/0x1bd0 [ 1952.675559][ T1785] rpm_resume+0x8c4/0x1bd0 [ 1952.680504][ T1785] __pm_runtime_resume+0xb7/0x170 [ 1952.686058][ T1785] usb_autopm_get_interface+0x1b/0x50 [ 1952.691955][ T1785] usblp_open+0x17a/0x450 [ 1952.696848][ T1785] usb_open+0x204/0x2e0 [ 1952.701518][ T1785] chrdev_open+0x266/0x770 [ 1952.706473][ T1785] do_dentry_open+0x4c8/0x1250 [ 1952.711746][ T1785] path_openat+0x1cad/0x2750 [ 1952.716843][ T1785] do_filp_open+0x1aa/0x400 [ 1952.721856][ T1785] do_sys_openat2+0x16d/0x4d0 [ 1952.727081][ T1785] __x64_sys_openat+0x13f/0x1f0 [ 1952.732472][ T1785] do_syscall_64+0x35/0xb0 [ 1952.737399][ T1785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1952.743810][ T1785] [ 1952.743810][ T1785] other info that might help us debug this: [ 1952.743810][ T1785] [ 1952.754043][ T1785] Possible unsafe locking scenario: [ 1952.754043][ T1785] [ 1952.761475][ T1785] CPU0 CPU1 [ 1952.766833][ T1785] ---- ---- [ 1952.772177][ T1785] lock(&port_dev->status_lock); [ 1952.777179][ T1785] lock(hcd->address0_mutex); [ 1952.784443][ T1785] lock(&port_dev->status_lock); [ 1952.791977][ T1785] lock(hcd->address0_mutex); [ 1952.796743][ T1785] [ 1952.796743][ T1785] *** DEADLOCK *** [ 1952.796743][ T1785] [ 1952.804878][ T1785] 3 locks held by syz-executor.5/1785: [ 1952.810313][ T1785] #0: ffffffff8ca3d050 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x24/0x2e0 [ 1952.819086][ T1785] #1: ffffffff8cada368 (usblp_mutex){+.+.}-{3:3}, at: usblp_open+0x58/0x450 [ 1952.827854][ T1785] #2: ffff88801de675c0 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_resume+0x2a6/0x1950 [ 1952.838190][ T1785] [ 1952.838190][ T1785] stack backtrace: [ 1952.844065][ T1785] CPU: 1 PID: 1785 Comm: syz-executor.5 Not tainted 5.16.0-rc1-next-20211118-syzkaller #0 [ 1952.854222][ T1785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.864267][ T1785] Call Trace: [ 1952.867547][ T1785] [ 1952.870478][ T1785] dump_stack_lvl+0xcd/0x134 [ 1952.875060][ T1785] check_noncircular+0x25f/0x2e0 [ 1952.879987][ T1785] ? print_circular_bug+0x1e0/0x1e0 [ 1952.885173][ T1785] ? lockdep_lock+0xc6/0x200 [ 1952.889753][ T1785] ? call_rcu_zapped+0xb0/0xb0 [ 1952.894502][ T1785] ? add_lock_to_list.constprop.0+0x185/0x370 [ 1952.900561][ T1785] __lock_acquire+0x2a07/0x54a0 [ 1952.905414][ T1785] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1952.911423][ T1785] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1952.917224][ T1785] ? __stack_depot_save+0x246/0x4f0 [ 1952.922415][ T1785] lock_acquire+0x1ab/0x510 [ 1952.926925][ T1785] ? usb_reset_and_verify_device+0x3ee/0xee0 [ 1952.932894][ T1785] ? lock_release+0x720/0x720 [ 1952.937566][ T1785] __mutex_lock+0x12f/0x12f0 [ 1952.942169][ T1785] ? usb_reset_and_verify_device+0x3ee/0xee0 [ 1952.948164][ T1785] ? usb_reset_and_verify_device+0x3ee/0xee0 [ 1952.954130][ T1785] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1952.959753][ T1785] ? mutex_lock_io_nested+0x1150/0x1150 [ 1952.965313][ T1785] ? wait_for_completion_io+0x270/0x270 [ 1952.970857][ T1785] ? mark_held_locks+0x9f/0xe0 [ 1952.975609][ T1785] ? kasan_quarantine_put+0xf5/0x210 [ 1952.980886][ T1785] ? lockdep_hardirqs_on+0x79/0x100 [ 1952.986078][ T1785] usb_reset_and_verify_device+0x3ee/0xee0 [ 1952.991896][ T1785] ? hub_port_init+0x2e80/0x2e80 [ 1952.996819][ T1785] ? usb_get_status+0x12c/0x290 [ 1953.001659][ T1785] usb_port_resume+0x12f7/0x1950 [ 1953.006614][ T1785] ? usb_port_suspend+0xdb0/0xdb0 [ 1953.011633][ T1785] ? lock_chain_count+0x20/0x20 [ 1953.016515][ T1785] usb_generic_driver_resume+0x40/0xa0 [ 1953.021964][ T1785] ? usb_generic_driver_suspend+0x1e0/0x1e0 [ 1953.027866][ T1785] usb_resume_both+0x627/0x8d0 [ 1953.032617][ T1785] ? __rpm_callback+0x206/0x330 [ 1953.037454][ T1785] ? usb_resume_interface.part.0.isra.0+0x360/0x360 [ 1953.044126][ T1785] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1953.049340][ T1785] ? usb_runtime_suspend+0x120/0x120 [ 1953.054625][ T1785] __rpm_callback+0xc9/0x330 [ 1953.059206][ T1785] ? usb_runtime_suspend+0x120/0x120 [ 1953.064486][ T1785] rpm_callback+0x1da/0x220 [ 1953.068981][ T1785] ? usb_runtime_suspend+0x120/0x120 [ 1953.074341][ T1785] rpm_resume+0xf5d/0x1bd0 [ 1953.078754][ T1785] ? rpm_callback+0x220/0x220 [ 1953.083432][ T1785] ? do_raw_spin_lock+0x120/0x2b0 [ 1953.088472][ T1785] ? rwlock_bug.part.0+0x90/0x90 [ 1953.093399][ T1785] rpm_resume+0x8c4/0x1bd0 [ 1953.097856][ T1785] ? rpm_callback+0x220/0x220 [ 1953.102523][ T1785] ? do_raw_spin_lock+0x120/0x2b0 [ 1953.107558][ T1785] ? rwlock_bug.part.0+0x90/0x90 [ 1953.112482][ T1785] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1953.117840][ T1785] __pm_runtime_resume+0xb7/0x170 [ 1953.122859][ T1785] usb_autopm_get_interface+0x1b/0x50 [ 1953.128239][ T1785] usblp_open+0x17a/0x450 [ 1953.132558][ T1785] ? usblp_wwait+0x7b0/0x7b0 [ 1953.137149][ T1785] usb_open+0x204/0x2e0 [ 1953.141295][ T1785] ? usb_devnode+0xa0/0xa0 [ 1953.145724][ T1785] chrdev_open+0x266/0x770 [ 1953.150144][ T1785] ? cdev_device_add+0x210/0x210 [ 1953.155068][ T1785] ? fsnotify_perm.part.0+0x22d/0x620 [ 1953.160427][ T1785] do_dentry_open+0x4c8/0x1250 [ 1953.165180][ T1785] ? cdev_device_add+0x210/0x210 [ 1953.170116][ T1785] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1953.176345][ T1785] ? may_open+0x1f6/0x420 [ 1953.180657][ T1785] path_openat+0x1cad/0x2750 [ 1953.185244][ T1785] ? path_lookupat+0x860/0x860 [ 1953.190008][ T1785] ? mark_lock+0xef/0x17b0 [ 1953.194512][ T1785] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1953.200492][ T1785] do_filp_open+0x1aa/0x400 [ 1953.204996][ T1785] ? may_open_dev+0xf0/0xf0 [ 1953.209496][ T1785] ? rwlock_bug.part.0+0x90/0x90 [ 1953.214425][ T1785] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1953.220660][ T1785] ? _find_next_bit+0x1e3/0x260 [ 1953.225523][ T1785] ? _raw_spin_unlock+0x24/0x40 [ 1953.230365][ T1785] ? alloc_fd+0x2f0/0x670 [ 1953.234698][ T1785] do_sys_openat2+0x16d/0x4d0 [ 1953.239390][ T1785] ? bpf_trace_run2+0x12d/0x340 [ 1953.244233][ T1785] ? build_open_flags+0x6f0/0x6f0 [ 1953.249272][ T1785] ? __context_tracking_exit+0xb8/0xe0 [ 1953.254727][ T1785] __x64_sys_openat+0x13f/0x1f0 [ 1953.259565][ T1785] ? __ia32_sys_open+0x1c0/0x1c0 [ 1953.264500][ T1785] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1953.270087][ T1785] do_syscall_64+0x35/0xb0 [ 1953.274500][ T1785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1953.280385][ T1785] RIP: 0033:0x7f6c9ce34a04 [ 1953.284787][ T1785] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1953.304383][ T1785] RSP: 002b:00007f6c9a3f6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1953.312806][ T1785] RAX: ffffffffffffffda RBX: 00007f6c9cf94f60 RCX: 00007f6c9ce34a04 [ 1953.320762][ T1785] RDX: 0000000000000002 RSI: 00007f6c9a3f6d60 RDI: 00000000ffffff9c [ 1953.328738][ T1785] RBP: 00007f6c9a3f6d60 R08: 0000000000000000 R09: 000000000000000f [ 1953.336721][ T1785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1953.344689][ T1785] R13: 00007fffa7f5765f R14: 00007f6c9a3f7300 R15: 0000000000022000 [ 1953.352679][ T1785] [ 1954.222030][ T7678] usb 6-1: USB disconnect, device number 56 [ 1954.228820][ T8695] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1954.251754][ T7678] usblp0: removed 20:56:04 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) 20:56:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xe0ffff00000000}, 0x0) 20:56:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x300) 20:56:04 executing program 1: sysfs$2(0xfa01, 0x0, &(0x7f0000000000)=""/124) 20:56:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x7a00000000000000}, 0x0) [ 1954.382509][ T1873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1954.441648][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1954.451176][T13881] usb 5-1: USB disconnect, device number 15 [ 1954.469237][T13881] usblp1: removed [ 1954.481513][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:56:04 executing program 1: sysfs$2(0xfb00, 0x0, &(0x7f0000000000)=""/124) 20:56:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x700) 20:56:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 20:56:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x9effffff00000000}, 0x0) 20:56:04 executing program 1: sysfs$2(0xfb01, 0x0, &(0x7f0000000000)=""/124) [ 1954.810967][T13881] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1954.825101][ T1911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1954.832930][ T1910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:56:04 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1955.070888][T13881] usb 5-1: Using ep0 maxpacket: 8 [ 1955.205899][T13881] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1955.210975][ T7804] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1955.224794][T13881] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1955.233916][T13881] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1955.246753][T13881] usb 5-1: config 250 has no interface number 0 [ 1955.253173][T13881] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1955.268101][T13881] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1955.278807][T13881] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1955.292065][T13881] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1955.306604][T13881] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1955.393994][T13881] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1955.404537][T13881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1955.413512][T13881] usb 5-1: SerialNumber: syz [ 1955.459770][ T1879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1955.469290][ T1879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1955.479532][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1955.491646][T13881] hub 5-1:250.228: bad descriptor, ignoring hub [ 1955.498119][T13881] hub: probe of 5-1:250.228 failed with error -5 [ 1955.600995][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1955.615694][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1955.625581][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1955.635387][ T7804] usb 6-1: config 250 has no interface number 0 [ 1955.642370][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1955.654410][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1955.665484][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1955.676465][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1955.690539][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1955.703411][ T1879] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1955.715119][ T1879] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1955.743801][T13881] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1955.777151][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1955.789584][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1955.799068][ T7804] usb 6-1: SerialNumber: syz [ 1955.836648][ T1913] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1955.848341][ T1913] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1955.871556][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1955.877935][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1956.075934][ T8695] usb 5-1: USB disconnect, device number 16 [ 1956.097607][ T7804] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1956.110022][ T8695] usblp0: removed [ 1956.411044][T13881] usb 6-1: USB disconnect, device number 57 [ 1956.420255][T13881] usblp1: removed 20:56:06 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) 20:56:06 executing program 1: sysfs$2(0xfc00, 0x0, &(0x7f0000000000)=""/124) 20:56:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x900) 20:56:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xd512000000000000}, 0x0) 20:56:06 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 1956.668962][ T1981] __nla_validate_parse: 1 callbacks suppressed [ 1956.668984][ T1981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1956.754692][ T1984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1956.805906][ T1992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) getpgid(0x0) gettid() 20:56:06 executing program 1: sysfs$2(0xfc01, 0x0, &(0x7f0000000000)=""/124) 20:56:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0xf00) 20:56:06 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xf0ffffff00000000}, 0x0) 20:56:06 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x300000000000000}, 0x0) 20:56:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x3f00) [ 1957.020770][T13881] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1957.042189][ T2013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:56:06 executing program 1: sysfs$2(0xfd00, 0x0, &(0x7f0000000000)=""/124) [ 1957.123185][ T2014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1957.150130][ T2024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1957.208197][ T2029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1957.290727][T13881] usb 5-1: Using ep0 maxpacket: 8 [ 1957.458533][T13881] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1957.472391][T13881] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1957.480822][ T7804] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1957.488494][T13881] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1957.499099][T13881] usb 5-1: config 250 has no interface number 0 [ 1957.509356][T13881] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1957.526270][T13881] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1957.537806][T13881] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1957.549313][T13881] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1957.563492][T13881] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1957.643154][T13881] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1957.654397][T13881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1957.663118][T13881] usb 5-1: SerialNumber: syz [ 1957.709692][ T1986] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1957.719390][ T1986] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1957.730743][ T7804] usb 6-1: Using ep0 maxpacket: 8 [ 1957.741774][T13881] hub 5-1:250.228: bad descriptor, ignoring hub [ 1957.748100][T13881] hub: probe of 5-1:250.228 failed with error -5 [ 1957.870783][ T7804] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1957.879144][ T7804] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1957.889044][ T7804] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1957.898892][ T7804] usb 6-1: config 250 has no interface number 0 [ 1957.905948][ T7804] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1957.918213][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1957.929346][ T7804] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1957.940474][ T7804] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1957.954425][ T7804] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1957.965805][ T1986] validate_nla: 6 callbacks suppressed [ 1957.965834][ T1986] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1957.979907][ T1986] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1957.988307][ T1986] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1957.999384][ T1986] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1958.033878][T13881] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1958.050802][ T7804] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1958.065348][ T7804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1958.082283][ T7804] usb 6-1: SerialNumber: syz [ 1958.125945][ T2025] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1958.136638][ T2025] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1958.151405][ T7804] hub 6-1:250.228: bad descriptor, ignoring hub [ 1958.157683][ T7804] hub: probe of 6-1:250.228 failed with error -5 [ 1958.355013][ T2025] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1958.365927][ T2025] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1958.374619][ T2025] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1958.383422][T17856] usb 5-1: USB disconnect, device number 17 [ 1958.390693][ T2025] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1958.400127][T17856] usblp0: removed [ 1958.425485][ T7804] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 58 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 20:56:08 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x810) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r1 = gettid() gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71c84, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x4801c, 0x5, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x7, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfbc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000140)={0x0, 0x7fffffff, 0x10000}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x6, 0x6, 0x2, 0x0, 0x9, 0x22800, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0xa00, 0x7, 0x4, 0x9, 0x0, 0x0, 0x1455, 0x0, 0x9, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) wait4(r4, 0x0, 0x1, &(0x7f0000000300)) gettid() 20:56:08 executing program 1: sysfs$2(0xfd01, 0x0, &(0x7f0000000000)=""/124) 20:56:08 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x1800, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0xffffff7f00000000}, 0x0) 20:56:08 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e000432000074002d"], 0xa0}, 0x1, 0x0, 0x400000000000000}, 0x0) 20:56:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d000100000000000000000010"], 0x20}], 0x1}, 0x6300) [ 1958.942918][ T2092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1959.007743][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1959.086871][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1959.390573][T17856] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1959.672170][T17856] usb 5-1: Using ep0 maxpacket: 8 [ 1959.790651][T17856] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1959.790680][T17856] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1959.790701][T17856] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1959.790725][T17856] usb 5-1: config 250 has no interface number 0 [ 1959.790758][T17856] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1959.790789][T17856] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1959.845929][T17856] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1959.857316][T17856] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1959.873424][T17856] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1959.963207][T17856] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1959.974145][T17856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1959.982553][T17856] usb 5-1: SerialNumber: syz [ 1960.024114][ T2103] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1960.033531][ T2103] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1960.061436][T17856] hub 5-1:250.228: bad descriptor, ignoring hub [ 1960.067713][T17856] hub: probe of 5-1:250.228 failed with error -5 [ 1960.266605][ T2103] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1960.274806][ T2103] netlink: 'syz-executor.4': attribute type 1 has an invalid length.