fffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2426.665819][ T2362] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2426.758752][ T3795] usb 1-1: config 0 has no interfaces? [ 2426.764628][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2426.774914][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2426.789558][ T3795] usb 1-1: config 0 descriptor?? [ 2426.817989][ T2362] 8021q: adding VLAN 0 to HW filter on device bond499 [ 2426.867157][ T2612] usb 6-1: device descriptor read/64, error 18 [ 2426.894281][ T2367] bond499: (slave veth2087): Enslaving as an active interface with a down link [ 2426.931283][ T2401] bond499: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2426.958440][ T23] usb 4-1: new high-speed USB device number 46 using dummy_hcd 19:08:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2427.040813][ T3795] usb 1-1: USB disconnect, device number 103 [ 2427.069782][ T4567] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2427.098651][ T2362] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2427.217136][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 2427.296946][ T2612] usb 6-1: device descriptor read/64, error 18 [ 2427.336120][ T23] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 2427.345113][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.356433][ T4567] usb 5-1: Using ep0 maxpacket: 8 [ 2427.361901][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2427.372364][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2427.382488][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2427.400416][ T23] usb 4-1: config 0 descriptor?? [ 2427.416312][ T2612] usb usb6-port1: attempt power cycle 19:08:39 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2427.504930][ T23] usb 4-1: USB disconnect, device number 46 [ 2427.511263][ T4567] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2427.520918][ T4567] usb 5-1: config 0 has no interface number 0 [ 2427.544721][ T4567] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2427.569365][ T4567] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2427.602118][ T4567] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2427.614804][ T4567] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2427.624950][ T4567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2427.647614][ T4567] usb 5-1: config 0 descriptor?? [ 2427.677624][ T2198] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2427.698559][ T4567] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input853 [ 2427.915940][ T2574] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2427.925031][ T6153] usb 5-1: USB disconnect, device number 2 [ 2427.977835][ T23] usb 4-1: new high-speed USB device number 47 using dummy_hcd 19:08:40 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r2 = pidfd_getfd(r1, r0, 0x0) write$capi20(r2, &(0x7f0000000040)={0x10, 0x4, 0x3, 0x83, 0x3}, 0x10) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x40044581, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x58de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:40 executing program 4: kexec_load(0xfffffffffffff5fd, 0x4, &(0x7f0000000500)=[{&(0x7f00000001c0)="091409df2cdaf7cc2a760f5c4b4ecb2524fd45ca0c5c718868672585ffd2b0741f55acdb5ceff226f9ea8ad87b8bfb2d905779412e93254a1da366d16aedcf94e4fdb7bdb34a37cfe5aa9c8f40ca811e73dd3ea70722427343e1bc4b1b17092c26627d7d25afa0ad8bc6ebccaf95", 0x6e, 0x932, 0x80000000000000}, {&(0x7f0000000240)="e640362c3788fb7559088ad2266910ea18f67af7fdbfcc1c815cb59ee5d1fdfa59dfb0825d60c8540316e805141b03eb85645f8a34f313bbaffafa021ebd000878d7e66e03dd25aa3031d96129dbbe17e48fc61f5c335005b43c6025de1ebb42e19b65eb8d781a11360ada891fe6fe79d8d20d6bcb5f0e5a3fcb5baeb68c6f98e263d798de84c255afdd7b436a49f0bb453f79a67b427304a3b1e22cb9c0c323d382a4b0dcee1a465561be55d43e906ea5f9a1d83d25a38915a5f303bada17731886f65e47", 0xc5, 0x4, 0x100000000}, {&(0x7f0000000340)="afd267b2cbd9f37890594b7628de27b94fca92247aeb6b958f15e11ceb52ba65160e5f4fe40925e0fe8cbcbdd3377d498fad567ff647b181cdaa2386941860fe9c6faf4bbcc59240938b45361a64d03798e0a42e496de3c5dddedb8c244dfc389ce6b53dd952ecff888c59a28198b9b4dff47bfa7a160ed6852316b04b824511b1dfbdabf238125a2d5a2e3d0e2fa00b72d0078b1f1b20364c30bd16c4da884ee6edb35e5f626238", 0xa8, 0x9, 0x10001}, {&(0x7f0000000400)="3c7363844422457ce7e5a24c5f4e8e60a714f2e955ba26fb7a4314086823c7be21b684975f6f731ccaed6657959c5091f005e8ce0538a84110221b1e96b92c02b92922ed1cd27756db23fce07d9d55c04fed40ff9607046579037abdb8b1938cc2a51eeea0b597c5f3044cb794949e81eb74d3fcb49be1ee9bc6d9bbc2eabc3ed7301fcb89643749cf640ea108ee85121b92cf25337b8e7463ad45fb542d6395f39477ea2f1a85009b834414d787ac508ce026a7992af6a32ed2a79b1a64dbed79ff78c674590938ef3424b4b51bf36bc048", 0xd2, 0x3, 0x2}], 0xa0000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/206) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e53c7bf2827261a027090d3a7a078d6d53202ba111eba39d1444e7bb362794b5c88b3d413e3a5b81d37f4"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x284800) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2428.144176][ T2475] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2428.156468][ T2612] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2428.176669][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2428.235003][ T2475] 8021q: adding VLAN 0 to HW filter on device bond500 [ 2428.254091][ T23] usb 4-1: device descriptor read/64, error 18 [ 2428.264433][ T2476] __nla_validate_parse: 8 callbacks suppressed [ 2428.264466][ T2476] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2428.317090][ T2574] usb 1-1: config 0 has no interfaces? [ 2428.322632][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2428.322885][ T2508] bond500: (slave veth2089): Enslaving as an active interface with a down link [ 2428.365730][ T2525] bond500: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2428.389638][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.405377][ T2574] usb 1-1: config 0 descriptor?? [ 2428.528361][ T2528] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2428.535948][ T6153] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2428.597439][ T2508] bond500: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2428.645918][ T23] usb 4-1: device descriptor read/64, error 18 [ 2428.667829][ T2612] usb 6-1: device not accepting address 33, error -71 19:08:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:40 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x6}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2428.692972][ T3795] usb 1-1: USB disconnect, device number 104 [ 2428.775404][ T2553] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2428.792725][ T6153] usb 5-1: Using ep0 maxpacket: 8 19:08:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x59de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2428.891769][ T2555] 8021q: adding VLAN 0 to HW filter on device bond501 [ 2428.903684][ T2556] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2428.916383][ T23] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2428.916568][ T6153] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2428.936774][ T6153] usb 5-1: config 0 has no interface number 0 [ 2428.942901][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2428.954368][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 83, changing to 10 [ 2428.965857][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2428.977308][ T6153] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2428.986474][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.995246][ T6153] usb 5-1: config 0 descriptor?? [ 2429.016341][ T2477] raw-gadget gadget: fail, usb_ep_enable returned -22 19:08:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2429.039731][ T6153] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input854 [ 2429.065818][ T2612] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2429.138767][ T2555] bond501: (slave veth2091): Enslaving as an active interface with a down link [ 2429.175952][ T2612] usb 6-1: Using ep0 maxpacket: 8 [ 2429.178643][ T3795] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2429.183518][ T2591] bond501: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2429.226736][ T23] usb 4-1: device descriptor read/64, error 18 [ 2429.252420][ T9549] usb 5-1: USB disconnect, device number 3 [ 2429.306091][ T2612] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2429.322684][ T2612] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2429.346464][ T2612] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2429.382440][ T2612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.419532][ T2612] usb 6-1: config 0 descriptor?? [ 2429.445886][ T2606] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2429.446596][ T3795] usb 1-1: Using ep0 maxpacket: 8 19:08:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2429.491266][ T2591] validate_nla: 2 callbacks suppressed [ 2429.491276][ T2591] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2429.511426][ T2625] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2429.579654][ T2591] bond501: (slave veth2093): Enslaving as an active interface with a down link [ 2429.596272][ T3795] usb 1-1: config 0 has no interfaces? [ 2429.604448][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2429.611297][ T2555] bond501: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2429.621823][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.643088][ T3795] usb 1-1: config 0 descriptor?? [ 2429.665965][ T23] usb 4-1: device descriptor read/64, error 18 [ 2429.694995][ T3795] usb 6-1: USB disconnect, device number 34 19:08:42 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a1000000000904410002ff5d010009050f1f010000000009058303000e00"/51], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2000) [ 2429.808545][ T23] usb usb4-port1: attempt power cycle [ 2429.859036][ T2631] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2429.895512][ T4567] usb 1-1: USB disconnect, device number 105 19:08:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5ade0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2429.925969][ T2651] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2429.994342][ T2660] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2430.051756][ T2660] 8021q: adding VLAN 0 to HW filter on device bond502 [ 2430.102590][ T2694] bond502: (slave veth2095): Enslaving as an active interface with a down link [ 2430.130205][ T2660] bond502: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2430.279142][ T2694] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2430.325717][ T2612] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2430.337123][ T2660] bond502: (slave veth2097): Enslaving as an active interface with a down link [ 2430.477478][ T9549] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2430.547672][ T23] usb 4-1: new high-speed USB device number 49 using dummy_hcd 19:08:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2430.595667][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2430.622028][ T2720] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2430.636245][ T2612] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 2430.677633][ T2721] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2430.715871][ T9549] usb 6-1: Using ep0 maxpacket: 8 [ 2430.716794][ T4567] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2430.731862][ T2612] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2430.740416][ T2612] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2430.751704][ T2612] usb 5-1: can't read configurations, error -22 [ 2430.836566][ T9549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2430.846973][ T9549] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2430.857405][ T9549] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2430.868098][ T9549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2430.884241][ T9549] usb 6-1: config 0 descriptor?? [ 2430.924963][ T2612] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2430.995670][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2431.056416][ T23] usb 4-1: device not accepting address 49, error -71 [ 2431.115769][ T4567] usb 1-1: config 0 has no interfaces? [ 2431.121340][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2431.132571][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.133349][ T9549] usb 6-1: USB disconnect, device number 35 [ 2431.167866][ T4567] usb 1-1: config 0 descriptor?? 19:08:43 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}, 0xfd}, 0xa) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x101, 0x80000001, 0x5, 0x15ed, 0x200, 0x5}) ioctl$EVIOCSFF(r1, 0x40044581, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:43 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5bde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000016800000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2431.189533][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2431.235899][ T2612] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 2431.253069][ T2738] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2431.332059][ T2612] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2431.342053][ T2612] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2431.350313][ T2738] 8021q: adding VLAN 0 to HW filter on device bond503 [ 2431.369042][ T2612] usb 5-1: can't read configurations, error -22 [ 2431.386150][ T2612] usb usb5-port1: attempt power cycle [ 2431.429764][ T3795] usb 1-1: USB disconnect, device number 106 [ 2431.445375][ T2749] bond503: (slave veth2099): Enslaving as an active interface with a down link 19:08:43 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2431.532235][ T2784] bond503: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:08:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000016c00000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2431.645609][ T9549] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2431.716323][ T2749] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2431.751274][ T23] usb 4-1: new high-speed USB device number 50 using dummy_hcd 19:08:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5cde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2431.772333][ T2749] bond503: (slave veth2101): Enslaving as an active interface with a down link 19:08:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2431.817488][ T2813] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2431.878212][ T2813] 8021q: adding VLAN 0 to HW filter on device bond504 [ 2431.890574][ T9549] usb 6-1: Using ep0 maxpacket: 8 [ 2431.934245][ T2844] bond504: (slave veth2103): Enslaving as an active interface with a down link [ 2431.944285][ T3795] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2431.958999][ T23] usb 4-1: device descriptor read/8, error -61 19:08:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2431.994994][ T2813] bond504: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2432.025793][ T9549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2432.040570][ T9549] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2432.081162][ T9549] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2432.102138][ T9549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.127620][ T2612] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2432.129434][ T9549] usb 6-1: config 0 descriptor?? [ 2432.196247][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2432.226680][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2432.242410][ T2844] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2432.267710][ T23] usb 4-1: device descriptor read/8, error -61 [ 2432.274215][ T2612] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 2432.316679][ T3795] usb 1-1: config 0 has no interfaces? [ 2432.322229][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2432.338020][ T2844] bond504: (slave veth2105): Enslaving as an active interface with a down link [ 2432.347718][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2432.366746][ T3795] usb 1-1: config 0 descriptor?? [ 2432.386608][ T2612] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2432.395703][ T23] usb usb4-port1: unable to enumerate USB device [ 2432.414809][ T2612] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2432.422011][ T3795] usb 6-1: USB disconnect, device number 36 [ 2432.447113][ T2612] usb 5-1: can't read configurations, error -22 [ 2432.618484][ T4567] usb 1-1: USB disconnect, device number 107 [ 2432.632751][ T2612] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2432.745651][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2432.789488][ T2612] usb 5-1: too many configurations: 65, using maximum allowed: 8 19:08:45 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x145040) syz_open_dev$evdev(0x0, 0xfffffffffffffff9, 0x0) 19:08:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5dde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2432.939810][ T2886] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2432.957745][ T2612] usb 5-1: unable to read config index 0 descriptor/all [ 2432.964806][ T2612] usb 5-1: can't read configurations, error -71 [ 2432.981280][ T2612] usb usb5-port1: unable to enumerate USB device [ 2433.033699][ T2886] 8021q: adding VLAN 0 to HW filter on device bond505 [ 2433.205708][T13809] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2433.274280][ T2894] bond505: (slave veth2107): Enslaving as an active interface with a down link [ 2433.301088][ T2894] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2433.323696][ T2886] bond505: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2433.366618][ T2612] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2433.386118][ T3795] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2433.456539][T13809] usb 6-1: Using ep0 maxpacket: 8 [ 2433.575554][T13809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.586250][T13809] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2433.597507][T13809] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2433.609136][T13809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.623496][T13809] usb 6-1: config 0 descriptor?? [ 2433.635493][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2433.676910][ T2612] usb 5-1: device descriptor read/64, error 18 [ 2433.756733][ T3795] usb 1-1: config 0 has no interfaces? [ 2433.762270][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2433.771806][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.784142][ T3795] usb 1-1: config 0 descriptor?? 19:08:46 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0001000014da9000000000000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000400)={0x55, 0x800, 0x0, {0x4, 0x1f}, {0x8001}, @ramp={0x1, 0x632d, {0x800, 0x8, 0x88}}}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendto$inet(r1, &(0x7f0000000040)="a0a2438c32c301b4b852ac8e9f5d7e812cb7a088055ed7783727168831e69723fbbc090d97215dba9453037d919bb248bd5476bb6494cd7dc49853c4588862ac241b05d03385261014f7011e79f8dd4d6322c12f1d504e0f74203fefb64a91299de03fb0cf9a51186062c4da3676010f50846ff1eab7c34530137d190db7aa5034ae0077e1c3d60dd0b845d1ecf8b3b4c12d477c", 0x94, 0x40001, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x3, 0x1, 0x1ff, 0x6}, &(0x7f00000000c0)=0x98) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x7, 0x1ff, 0x4, 0x1, 0x82, 0x800, 0x4}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x8}, 0x8) r4 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xffffffff, 0xa0101) ioctl$CAPI_INSTALLED(r4, 0x80024322) [ 2433.886944][ T3795] usb 6-1: USB disconnect, device number 37 [ 2434.033306][ T23] usb 1-1: USB disconnect, device number 108 [ 2434.105590][ T2612] usb 5-1: device descriptor read/64, error 18 19:08:46 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5e020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:46 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x8}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2434.309855][ T2972] __nla_validate_parse: 10 callbacks suppressed [ 2434.309864][ T2972] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2434.315779][ T3795] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2434.334749][ T2973] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2434.387072][ T2612] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2434.402511][ T2973] 8021q: adding VLAN 0 to HW filter on device bond506 [ 2434.478291][ T2980] bond506: (slave veth2109): Enslaving as an active interface with a down link [ 2434.488733][ T3001] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:08:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2434.530936][ T3019] bond506: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2434.585766][ T23] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2434.628642][ T3795] usb 6-1: device descriptor read/64, error 18 [ 2434.663204][ T3027] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:08:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2434.709399][ T2973] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2434.719106][ T2612] usb 5-1: device descriptor read/64, error 18 [ 2434.726119][ T9549] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2434.726781][ T3031] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:08:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5ede0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2434.816765][ T2980] bond506: (slave veth2111): Enslaving as an active interface with a down link [ 2434.828831][ T3036] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2434.856405][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 2434.877152][ T3039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2434.908176][ T3039] 8021q: adding VLAN 0 to HW filter on device bond507 [ 2434.919388][ T3040] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2434.965391][ T9549] usb 4-1: Using ep0 maxpacket: 8 19:08:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2435.002706][ T3039] bond507: (slave veth2113): Enslaving as an active interface with a down link [ 2435.021756][ T23] usb 1-1: config 0 has no interfaces? [ 2435.028274][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2435.035384][ T3795] usb 6-1: device descriptor read/64, error 18 [ 2435.061759][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.082806][ T3074] bond507: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2435.088795][ T9549] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2435.107437][ T9549] usb 4-1: config 0 has no interface number 0 [ 2435.108906][ T23] usb 1-1: config 0 descriptor?? [ 2435.123706][ T9549] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2435.148126][ T9549] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2435.175611][ T9549] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2435.188796][ T9549] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2435.199626][ T9549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.200807][ T2612] usb 5-1: device descriptor read/64, error 18 [ 2435.230961][ T9549] usb 4-1: config 0 descriptor?? [ 2435.267975][ T2978] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2435.307933][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input855 [ 2435.318345][ T3795] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2435.361854][ T2612] usb usb5-port1: attempt power cycle [ 2435.388228][ T3080] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2435.398536][ T9549] usb 1-1: USB disconnect, device number 109 19:08:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5fde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2435.443979][ T3102] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2435.475377][ T3039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2435.543749][T13690] usb 4-1: USB disconnect, device number 51 [ 2435.555176][ C1] xpad 4-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2435.595301][ T3795] usb 6-1: device descriptor read/64, error 18 [ 2435.603178][ T3106] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2435.697534][ T3106] 8021q: adding VLAN 0 to HW filter on device bond508 [ 2435.748703][ T3116] bond508: (slave veth2115): Enslaving as an active interface with a down link [ 2435.779387][ T3106] bond508: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:08:48 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) getsockname$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') 19:08:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2435.941539][ T3116] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2435.995190][ T3795] usb 6-1: device descriptor read/64, error 18 [ 2436.045831][ T3106] bond508: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2436.127925][ T3795] usb usb6-port1: attempt power cycle [ 2436.221865][ T3164] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2436.267232][ T3180] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2436.315834][ T9549] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2436.326560][ T2612] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2436.426548][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2436.555912][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2436.556130][ T2612] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2436.571431][ T2612] usb 5-1: config 0 has no interface number 0 [ 2436.579841][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2436.592627][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2436.603976][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2436.615545][ T2612] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2436.626440][ T2612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.639798][ T2612] usb 5-1: config 0 descriptor?? [ 2436.657507][ T3165] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2436.676433][ T9549] usb 1-1: config 0 has no interfaces? [ 2436.681197][ T2612] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input856 [ 2436.682555][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2436.717454][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.750008][ T9549] usb 1-1: config 0 descriptor?? [ 2436.835456][ T3795] usb 6-1: new high-speed USB device number 40 using dummy_hcd 19:08:49 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108010eab12a190eb0900e70001090224"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x4000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000000100)={0x56, 0x0, 0xfffd, {0x0, 0x2}, {0x8}, @period={0x0, 0xfffd, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:49 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d220009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2436.918862][ T9549] usb 5-1: USB disconnect, device number 10 [ 2436.925022][ C0] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2436.940377][ T3795] usb 6-1: Invalid ep0 maxpacket: 0 [ 2437.022485][ T3204] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2437.044882][ T2612] usb 1-1: USB disconnect, device number 110 19:08:49 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x300}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2437.189425][ T3204] 8021q: adding VLAN 0 to HW filter on device bond509 [ 2437.266207][ T3218] bond509: (slave veth2119): Enslaving as an active interface with a down link [ 2437.299396][ T3230] bond509: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2437.341529][T13690] usb 4-1: new high-speed USB device number 52 using dummy_hcd 19:08:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2437.396051][ T3795] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2437.461045][ T3204] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2437.485532][ T3795] usb 6-1: Using ep0 maxpacket: 8 19:08:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2437.525127][ T2612] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2437.532164][ T3795] usb 6-1: too many configurations: 231, using maximum allowed: 8 [ 2437.551754][ T3218] bond509: (slave veth2121): Enslaving as an active interface with a down link 19:08:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2437.605024][T13690] usb 4-1: Using ep0 maxpacket: 8 [ 2437.636656][ T3292] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2437.675351][ T3795] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2437.683244][ T3795] usb 6-1: can't read configurations, error -61 [ 2437.684324][ T3292] 8021q: adding VLAN 0 to HW filter on device bond510 [ 2437.704674][ T3795] usb usb6-port1: unable to enumerate USB device [ 2437.738292][T13690] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2437.747506][T13690] usb 4-1: config 0 has no interface number 0 [ 2437.768125][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2437.786863][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2437.795405][ T6153] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2437.804629][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2437.812728][ T3332] bond510: (slave veth2123): Enslaving as an active interface with a down link 19:08:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2437.829097][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2437.843862][T13690] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2437.857916][T13690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.910786][T13690] usb 4-1: config 0 descriptor?? [ 2437.932970][ T3292] bond510: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2437.965826][ T2612] usb 1-1: config 0 has no interfaces? [ 2437.971354][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2437.982816][ T3206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2438.002853][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.044994][ T6153] usb 5-1: Using ep0 maxpacket: 8 [ 2438.060230][ T2612] usb 1-1: config 0 descriptor?? [ 2438.120825][ T3355] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:08:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2438.165468][ T6153] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2438.173776][ T6153] usb 5-1: config 0 has no interface number 0 [ 2438.204397][ T3292] bond510: (slave veth2125): Enslaving as an active interface with a down link [ 2438.213716][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2438.234973][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2438.239959][ T2612] usb 4-1: USB disconnect, device number 52 [ 2438.286271][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2438.313363][ T6153] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2438.324422][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.343431][T13690] usb 1-1: USB disconnect, device number 111 [ 2438.361406][ T6153] usb 5-1: config 0 descriptor?? [ 2438.417696][ T3165] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2438.438165][ T6153] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input857 [ 2438.656698][T13690] usb 5-1: USB disconnect, device number 11 19:08:50 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a1eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r1, 0xffff, 0x3, 0x4}) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0x3, 0x40, 0x1237, 0x1}) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:08:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2438.761991][ T3403] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2438.847261][ T3403] 8021q: adding VLAN 0 to HW filter on device bond511 [ 2438.914406][ T3420] bond511: (slave veth2127): Enslaving as an active interface with a down link [ 2438.956926][ T3403] bond511: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2439.046309][ T23] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2439.124263][ T3403] bond511: (slave veth2129): Enslaving as an active interface with a down link [ 2439.133867][ T6153] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2439.154882][T13690] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2439.314972][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 2439.391812][ T6153] usb 1-1: Using ep0 maxpacket: 8 [ 2439.415037][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2439.455567][ T23] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2439.463684][ T23] usb 4-1: config 0 has no interface number 0 [ 2439.470840][T13690] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2439.479868][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2439.491196][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2439.509385][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2439.520465][ T6153] usb 1-1: config 0 has no interfaces? [ 2439.522754][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2439.531025][ T6153] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2439.541782][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.546543][ T6153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.556275][ T23] usb 4-1: config 0 descriptor?? [ 2439.571349][ T6153] usb 1-1: config 0 descriptor?? [ 2439.617024][T13690] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2439.624635][T13690] usb 5-1: can't read configurations, error -61 [ 2439.628431][ T3206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2439.795580][T13690] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2439.823107][ T9549] usb 1-1: USB disconnect, device number 112 [ 2439.884653][ T6153] usb 4-1: USB disconnect, device number 53 19:08:52 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffe}, 0x0, 0x0}}) 19:08:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x60de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x500}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:52 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e7b862f63e62b6ae8a20f0852976b9bf00bfa4bb83f279d402e9333dc1bc9e44ca0e4a1660a91b3a30844c8ed520391f0b67751ce5dbe900cd2d87a9c21432ff61f92b303b80a4a5674c4f1c80076e0b54efa05e84f80999adf589d3d8f56281404fbf61cb9d26e82ed36c6671a797908e930c51717948c80b3efd2c87fa381944c1611af2b669756c3d1469a1ed44f9736a8b2391cfd821bc7c49ac40068efc222"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000180)={0x1, 0x3, 0x75cc, 0x200, 0x1, 0x5, 0x0, 0x7fffffff, 0x6, 0xfffffffb, 0x0, 0x8, 0x8}) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x5, 0x1, &(0x7f0000000080)=[0x6], &(0x7f00000000c0)=[0x2, 0x1, 0x4, 0xd8], &(0x7f0000000100)=[0xfffb]}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x6, {0x39, 0x4}, {0x0, 0x158}, @rumble={0x800, 0x4c8}}) [ 2440.069790][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2440.084429][ T3512] validate_nla: 1 callbacks suppressed [ 2440.084438][ T3512] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2440.115176][T13690] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2440.183104][ T3512] 8021q: adding VLAN 0 to HW filter on device bond512 [ 2440.201695][ T3516] __nla_validate_parse: 10 callbacks suppressed [ 2440.201704][ T3516] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2440.261604][ T3523] bond512: (slave veth2131): Enslaving as an active interface with a down link [ 2440.277809][T13690] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2440.289456][T13690] usb 5-1: can't read configurations, error -61 [ 2440.296803][T13690] usb usb5-port1: attempt power cycle [ 2440.315036][ T3567] bond512: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2440.364815][ T9549] usb 1-1: new high-speed USB device number 113 using dummy_hcd 19:08:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2440.412606][ T3572] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2440.464896][ T6153] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2440.467818][ T3585] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2440.487961][ T3523] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2440.496761][ T3795] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2440.555938][ T3523] bond512: (slave veth2133): Enslaving as an active interface with a down link [ 2440.568755][ T3588] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:08:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2440.604726][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2440.611932][ T3512] bond512: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2440.704797][ T6153] usb 4-1: Using ep0 maxpacket: 8 [ 2440.724825][ T9549] usb 1-1: config 0 has no interfaces? [ 2440.730906][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2440.743831][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.756660][ T3795] usb 6-1: Using ep0 maxpacket: 8 [ 2440.777680][ T9549] usb 1-1: config 0 descriptor?? 19:08:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x61de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2440.806104][ T3594] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2440.835653][ T6153] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2440.843781][ T6153] usb 4-1: config 0 has no interface number 0 [ 2440.853119][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2440.875692][ T3600] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2440.891831][ T3795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.908334][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 123, changing to 10 [ 2440.921944][ T3795] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2440.932098][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2440.944236][ T3795] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2440.954045][ T6153] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2440.963881][ T3795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.973783][ T6153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.988028][ T3795] usb 6-1: config 0 descriptor?? [ 2441.006705][T13690] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2441.017298][ T6153] usb 4-1: config 0 descriptor?? [ 2441.022755][ T3602] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2441.038671][ T2574] usb 1-1: USB disconnect, device number 113 [ 2441.046655][ T3513] raw-gadget gadget: fail, usb_ep_enable returned -22 19:08:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2441.066889][ T6153] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input858 [ 2441.136586][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2441.153829][ T3602] 8021q: adding VLAN 0 to HW filter on device bond513 [ 2441.176558][T13690] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2441.253410][ T6153] usb 6-1: USB disconnect, device number 42 [ 2441.325071][T13690] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2441.336770][T13690] usb 5-1: can't read configurations, error -61 [ 2441.337454][ T3795] usb 4-1: USB disconnect, device number 54 [ 2441.354626][ C0] xpad 4-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2441.369223][ T3603] bond513: (slave veth2135): Enslaving as an active interface with a down link [ 2441.449170][ T3605] bond513: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2441.544815][T13690] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2441.632911][ T3636] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2441.655066][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2441.664396][ T3602] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2441.693688][ T3603] bond513: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2441.717458][T13690] usb 5-1: too many configurations: 9, using maximum allowed: 8 19:08:54 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904000000000000a848050f1f010000000009057a03000e28aa1d57969628e46546d7f5a4fab8ce22be1357da7f72fd116f96953d2ce1ffb64c02f12bdae0daf91cbfd38877d6c402711b5597251d0733736bf7c10ee83b41f9b07ff59ec66e3956d5345df35c5dced4514b95143159935168d0609e"], 0x0) r0 = socket$inet6(0xa, 0xa, 0xfff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x7f0, 0x4, 0x0, 0x5, 0x1, [{0x2, 0x47, 0x7f, [], 0x4204}]}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000001f00), r3, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r3, 0x4, "fb0bdd", "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"}}, 0x110) [ 2441.829572][T13690] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2441.837598][ T2574] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2441.854271][ T3681] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2441.862003][T13690] usb 5-1: can't read configurations, error -71 19:08:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2441.878068][T13690] usb usb5-port1: unable to enumerate USB device 19:08:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x62de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2441.982426][ T3694] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2441.999145][ T3696] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2442.039439][ T3696] 8021q: adding VLAN 0 to HW filter on device bond514 [ 2442.050285][ T3731] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2442.132521][ T3732] bond514: (slave veth2137): Enslaving as an active interface with a down link [ 2442.145031][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2442.162185][ T3696] bond514: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2442.196570][ T3795] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2442.205187][ T6153] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2442.274947][ T2574] usb 1-1: config 0 has no interfaces? [ 2442.280826][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2442.293201][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.303121][ T2574] usb 1-1: config 0 descriptor?? [ 2442.325016][T13690] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2442.378329][ T3732] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2442.418569][ T3732] bond514: (slave veth2139): Enslaving as an active interface with a down link [ 2442.444774][ T6153] usb 4-1: Using ep0 maxpacket: 8 [ 2442.450076][ T3795] usb 6-1: Using ep0 maxpacket: 8 [ 2442.571872][ T2574] usb 1-1: USB disconnect, device number 114 [ 2442.575640][ T3795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2442.589159][ T6153] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2442.594557][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2442.609433][ T6153] usb 4-1: config 0 has no interface number 0 [ 2442.626090][ T3795] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2442.636343][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2442.652138][ T3795] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2442.671232][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 123, changing to 10 [ 2442.687922][ T3795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.696682][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2442.709626][ T6153] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2442.719317][ T3795] usb 6-1: config 0 descriptor?? [ 2442.724376][ T6153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.734698][T13690] usb 5-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 2442.745742][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2442.747753][ T6153] usb 4-1: config 0 descriptor?? [ 2442.784472][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.807275][ T3513] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2442.811229][T13690] usb 5-1: config 0 descriptor?? [ 2442.830062][ T6153] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input859 [ 2442.966203][ T2612] usb 6-1: USB disconnect, device number 43 19:08:55 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:08:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010012000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:08:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x63de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:55 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x600}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:55 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000beffdc708303000e68098aa502086a821f3def2804ed2b1fda271283890490b9a89c8cef65aaab5645e4ab21bc3655e3885cbcd28b974e1e4b9eff17d944d757b4c139cb0ccc3181196e81d836207178038b2766cbf1addebf4375b7b96bd8c50d61b42ba3a39a644530a53ec8b3dc0f35243e6103c5b3361f77366aa0caaab0d0e67a0718b29008d4c258"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) accept$unix(r0, 0x0, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0xf4, 0xc882) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2443.059622][ T6153] usb 4-1: USB disconnect, device number 55 [ 2443.182817][ T3785] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2443.193717][ T3793] FAULT_INJECTION: forcing a failure. [ 2443.193717][ T3793] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.210985][T13690] usb 5-1: string descriptor 0 read error: -71 [ 2443.228674][T13690] usb 5-1: USB disconnect, device number 16 [ 2443.268558][ T3793] CPU: 1 PID: 3793 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 2443.278234][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.288382][ T3793] Call Trace: [ 2443.292294][ T3793] dump_stack+0x18f/0x20d [ 2443.298045][ T3793] should_fail.cold+0x5/0x14 [ 2443.302659][ T3793] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2443.309694][ T3793] should_failslab+0x5/0xf [ 2443.314129][ T3793] __kmalloc+0x27d/0x340 [ 2443.318402][ T3793] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2443.323977][ T3793] tomoyo_realpath_from_path+0xc3/0x620 [ 2443.338656][ T3793] ? tomoyo_profile+0x42/0x50 [ 2443.345270][ T3793] tomoyo_path_number_perm+0x1cb/0x4d0 [ 2443.350747][ T3793] ? tomoyo_path_number_perm+0x183/0x4d0 [ 2443.352188][ T3785] 8021q: adding VLAN 0 to HW filter on device bond515 [ 2443.356399][ T3793] ? tomoyo_execute_permission+0x470/0x470 [ 2443.356417][ T3793] ? lock_acquire+0x1f1/0xad0 [ 2443.356431][ T3793] ? delayed_put_pid+0x30/0x30 [ 2443.356449][ T3793] ? find_held_lock+0x2d/0x110 [ 2443.356488][ T3793] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2443.356501][ T3793] ? lock_is_held_type+0xb0/0xe0 [ 2443.356520][ T3793] ? __fget_files+0x294/0x400 [ 2443.356546][ T3793] security_file_ioctl+0x50/0xb0 [ 2443.405400][ T3793] ksys_ioctl+0x50/0x180 [ 2443.409899][ T3793] __x64_sys_ioctl+0x6f/0xb0 [ 2443.415894][ T3793] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2443.421197][ T3793] do_syscall_64+0x60/0xe0 [ 2443.425625][ T3793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2443.431815][ T3793] RIP: 0033:0x45cba9 [ 2443.435709][ T3793] Code: Bad RIP value. [ 2443.439782][ T3793] RSP: 002b:00007f9969be2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2443.448198][ T3793] RAX: ffffffffffffffda RBX: 00000000004e7540 RCX: 000000000045cba9 [ 2443.456179][ T3793] RDX: 0000000000000000 RSI: 0000000000004b60 RDI: 0000000000000003 19:08:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2443.464167][ T3793] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2443.472133][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2443.480093][ T3793] R13: 0000000000000350 R14: 00000000004c5e84 R15: 00007f9969be36d4 [ 2443.521560][ T3793] ERROR: Out of memory at tomoyo_realpath_from_path. 19:08:55 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2443.584481][ T6153] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2443.602487][ T3851] FAULT_INJECTION: forcing a failure. [ 2443.602487][ T3851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2443.603019][ T3803] bond515: (slave veth2141): Enslaving as an active interface with a down link [ 2443.615711][ T3851] CPU: 1 PID: 3851 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 2443.615722][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.615726][ T3851] Call Trace: [ 2443.615747][ T3851] dump_stack+0x18f/0x20d [ 2443.615766][ T3851] should_fail.cold+0x5/0x14 [ 2443.615786][ T3851] __alloc_pages_nodemask+0x1a3/0x930 [ 2443.615806][ T3851] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2443.615832][ T3851] cache_grow_begin+0x8c/0xb20 [ 2443.615848][ T3851] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 2443.615864][ T3851] cache_alloc_refill+0x27b/0x340 [ 2443.615880][ T3851] ? lockdep_hardirqs_off+0x66/0xa0 [ 2443.615900][ T3851] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2443.615913][ T3851] __kmalloc+0x319/0x340 [ 2443.615933][ T3851] tomoyo_realpath_from_path+0xc3/0x620 [ 2443.615948][ T3851] ? tomoyo_profile+0x42/0x50 [ 2443.615965][ T3851] tomoyo_path_number_perm+0x1cb/0x4d0 [ 2443.615978][ T3851] ? tomoyo_path_number_perm+0x183/0x4d0 [ 2443.615993][ T3851] ? tomoyo_execute_permission+0x470/0x470 [ 2443.616012][ T3851] ? lock_acquire+0x1f1/0xad0 [ 2443.712206][ T3785] bond515: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2443.715256][ T3851] ? delayed_put_pid+0x30/0x30 [ 2443.715276][ T3851] ? find_held_lock+0x2d/0x110 [ 2443.715309][ T3851] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2443.715320][ T3851] ? lock_is_held_type+0xb0/0xe0 [ 2443.715338][ T3851] ? __fget_files+0x294/0x400 [ 2443.715357][ T3851] security_file_ioctl+0x50/0xb0 [ 2443.715374][ T3851] ksys_ioctl+0x50/0x180 [ 2443.715390][ T3851] __x64_sys_ioctl+0x6f/0xb0 [ 2443.715401][ T3851] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2443.715415][ T3851] do_syscall_64+0x60/0xe0 [ 2443.715431][ T3851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2443.715443][ T3851] RIP: 0033:0x45cba9 [ 2443.715452][ T3851] Code: Bad RIP value. [ 2443.715460][ T3851] RSP: 002b:00007f9969be2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2443.715473][ T3851] RAX: ffffffffffffffda RBX: 00000000004e7540 RCX: 000000000045cba9 [ 2443.715487][ T3851] RDX: 0000000000000000 RSI: 0000000000004b60 RDI: 0000000000000003 [ 2443.834475][ T6153] usb 4-1: Using ep0 maxpacket: 8 [ 2443.836665][ T3851] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2443.849647][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2443.857613][ T3851] R13: 0000000000000350 R14: 00000000004c5e84 R15: 00007f9969be36d4 19:08:56 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2443.878421][ T2612] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2443.941323][ T3857] FAULT_INJECTION: forcing a failure. [ 2443.941323][ T3857] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.958479][ T3857] CPU: 1 PID: 3857 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 2443.965121][ T6153] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2443.967086][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.967093][ T3857] Call Trace: [ 2443.967113][ T3857] dump_stack+0x18f/0x20d [ 2443.967134][ T3857] should_fail.cold+0x5/0x14 [ 2443.997435][ T3857] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2444.002820][ T3857] should_failslab+0x5/0xf [ 2444.004108][ T6153] usb 4-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 2444.007243][ T3857] __kmalloc+0x27d/0x340 [ 2444.007263][ T3857] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2444.007280][ T3857] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2444.007295][ T3857] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2444.007312][ T3857] tomoyo_encode+0x28/0x50 [ 2444.007328][ T3857] tomoyo_realpath_from_path+0x186/0x620 [ 2444.007348][ T3857] tomoyo_path_number_perm+0x1cb/0x4d0 [ 2444.007362][ T3857] ? tomoyo_path_number_perm+0x183/0x4d0 [ 2444.007380][ T3857] ? tomoyo_execute_permission+0x470/0x470 [ 2444.007393][ T3857] ? lock_acquire+0x1f1/0xad0 [ 2444.007405][ T3857] ? delayed_put_pid+0x30/0x30 [ 2444.007423][ T3857] ? find_held_lock+0x2d/0x110 [ 2444.007460][ T3857] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2444.007471][ T3857] ? lock_is_held_type+0xb0/0xe0 [ 2444.007490][ T3857] ? __fget_files+0x294/0x400 [ 2444.007511][ T3857] security_file_ioctl+0x50/0xb0 [ 2444.007527][ T3857] ksys_ioctl+0x50/0x180 [ 2444.007543][ T3857] __x64_sys_ioctl+0x6f/0xb0 [ 2444.007555][ T3857] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2444.007569][ T3857] do_syscall_64+0x60/0xe0 [ 2444.007585][ T3857] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2444.007597][ T3857] RIP: 0033:0x45cba9 [ 2444.007602][ T3857] Code: Bad RIP value. [ 2444.007610][ T3857] RSP: 002b:00007f9969be2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2444.007625][ T3857] RAX: ffffffffffffffda RBX: 00000000004e7540 RCX: 000000000045cba9 [ 2444.007634][ T3857] RDX: 0000000000000000 RSI: 0000000000004b60 RDI: 0000000000000003 [ 2444.007642][ T3857] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2444.007651][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2444.007660][ T3857] R13: 0000000000000350 R14: 00000000004c5e84 R15: 00007f9969be36d4 [ 2444.014478][ T3857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2444.069086][ T6153] usb 4-1: config 0 has no interface number 0 [ 2444.194373][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2444.204258][ T6153] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2444.228298][ T6153] usb 4-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 19:08:56 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2444.241912][ T6153] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2444.251330][ T6153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.268254][ T6153] usb 4-1: config 0 descriptor?? [ 2444.274546][T13690] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2444.286769][ T3803] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2444.374790][ T2612] usb 1-1: config 0 has no interfaces? [ 2444.380971][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2444.404928][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.421289][ T3859] bond515: (slave veth2143): Enslaving as an active interface with a down link [ 2444.431417][ T2612] usb 1-1: config 0 descriptor?? [ 2444.511591][ T3795] usb 4-1: USB disconnect, device number 56 [ 2444.529967][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2444.678652][T13690] usb 5-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 2444.692234][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2444.702913][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.718989][ T2612] usb 1-1: USB disconnect, device number 115 [ 2444.725600][T13690] usb 5-1: config 0 descriptor?? 19:08:57 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xf4, 0x10000) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:08:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:08:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x64de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2444.896819][T13690] usb 5-1: string descriptor 0 read error: -71 [ 2444.903885][ T3895] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:08:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x2, 0x0) [ 2444.937678][T13690] usb 5-1: USB disconnect, device number 17 19:08:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x10, 0x0) [ 2445.051189][ T3895] 8021q: adding VLAN 0 to HW filter on device bond516 [ 2445.140702][ T3916] bond516: (slave veth2145): Enslaving as an active interface with a down link [ 2445.186640][ T3947] bond516: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2445.310801][ T3960] __nla_validate_parse: 5 callbacks suppressed [ 2445.310811][ T3960] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2445.329855][ T2574] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2445.378379][ T3916] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2445.414374][T13690] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2445.419605][ T3895] bond516: (slave veth2147): Enslaving as an active interface with a down link [ 2445.514410][ T2612] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2445.614479][ T2574] usb 4-1: Using ep0 maxpacket: 8 [ 2445.675198][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2445.760452][ T2574] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2445.768986][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2445.776266][ T2574] usb 4-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 2445.789902][ T2574] usb 4-1: config 0 has no interface number 0 [ 2445.798665][T13690] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2445.807432][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2445.821108][T13690] usb 5-1: config 0 has no interface number 0 [ 2445.828500][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2445.841348][ T2574] usb 4-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2445.856123][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2445.869667][ T2574] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2445.879939][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2445.892456][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.901898][ T2612] usb 1-1: config 0 has no interfaces? [ 2445.907529][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2445.918800][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2445.929330][ T2574] usb 4-1: config 0 descriptor?? [ 2445.935011][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.943342][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.961645][ T2612] usb 1-1: config 0 descriptor?? [ 2445.972552][T13690] usb 5-1: config 0 descriptor?? [ 2446.026962][ T3926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2446.047360][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input860 19:08:58 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0x700}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:08:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x2270, 0x0) 19:08:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:08:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:08:58 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/171) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) [ 2446.170915][ T6153] usb 1-1: USB disconnect, device number 116 [ 2446.221712][ T3795] usb 4-1: USB disconnect, device number 57 [ 2446.263295][ T4003] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2446.273671][ T9549] usb 5-1: USB disconnect, device number 18 [ 2446.279720][ C0] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 19:08:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b2f, 0x0) [ 2446.375215][ T4003] 8021q: adding VLAN 0 to HW filter on device bond517 [ 2446.401692][ T4004] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2446.573574][ T4015] bond517: (slave veth2149): Enslaving as an active interface with a down link [ 2446.603882][ T4055] bond517: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2446.669545][ T3795] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2446.714216][ T6153] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2446.738595][ T4062] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2446.778538][ T4003] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2446.924533][ T3795] usb 4-1: Using ep0 maxpacket: 8 [ 2446.964533][ T6153] usb 1-1: Using ep0 maxpacket: 8 [ 2447.044902][ T3795] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2447.053994][ T3795] usb 4-1: config 0 has no interface number 0 [ 2447.063005][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2447.075253][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2447.089489][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2447.101485][ T6153] usb 1-1: config 0 has no interfaces? [ 2447.109977][ T3795] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2447.120876][ T6153] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2447.130755][ T3795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.139456][ T6153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.153170][ T3795] usb 4-1: config 0 descriptor?? [ 2447.163195][ T6153] usb 1-1: config 0 descriptor?? [ 2447.174350][T13690] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2447.200085][ T4012] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2447.216976][ T3795] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input861 [ 2447.428605][ T6153] usb 1-1: USB disconnect, device number 117 [ 2447.445875][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2447.463011][ T3795] usb 4-1: USB disconnect, device number 58 [ 2447.474133][ C1] xpad 4-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2447.584755][T13690] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2447.593175][T13690] usb 5-1: config 0 has no interface number 0 [ 2447.601384][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2447.615970][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2447.628625][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2447.643043][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2447.653213][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.670572][T13690] usb 5-1: config 0 descriptor?? [ 2447.695591][ T3926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2447.716511][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input862 19:09:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b30, 0x0) 19:09:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x65de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:00 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf7, 0x389a01) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2447.930287][T13690] usb 5-1: USB disconnect, device number 19 [ 2448.001630][ T4130] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b31, 0x0) [ 2448.072315][ T4131] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2448.156179][ T4131] 8021q: adding VLAN 0 to HW filter on device bond518 [ 2448.169874][ T4146] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b32, 0x0) [ 2448.313574][ T4148] bond518: (slave veth2153): Enslaving as an active interface with a down link [ 2448.314082][ T3795] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2448.322865][ T2612] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2448.371690][ T4170] bond518: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2448.424268][T13690] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2448.518755][ T4148] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2448.564316][ T3795] usb 4-1: Using ep0 maxpacket: 8 [ 2448.573574][ T4131] bond518: (slave veth2155): Enslaving as an active interface with a down link [ 2448.625677][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2448.684216][ T3795] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2448.686911][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2448.693264][ T3795] usb 4-1: config 0 has no interface number 0 [ 2448.709311][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2448.721194][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2448.733827][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2448.747022][ T3795] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2448.757953][ T3795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.764646][ T2612] usb 1-1: config 0 has no interfaces? [ 2448.771623][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2448.771720][ T3795] usb 4-1: config 0 descriptor?? [ 2448.790319][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.803439][ T2612] usb 1-1: config 0 descriptor?? [ 2448.819497][T13690] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2448.826500][ T4012] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2448.838028][T13690] usb 5-1: config 0 has no interface number 0 [ 2448.853224][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2448.866090][ T3795] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input863 [ 2448.871978][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2448.902845][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2448.922334][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2448.933586][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.970330][T13690] usb 5-1: config 0 descriptor?? [ 2449.004730][ T4133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2449.026303][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input864 [ 2449.088601][ T3795] usb 4-1: USB disconnect, device number 59 [ 2449.099134][T13690] usb 1-1: USB disconnect, device number 118 19:09:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b33, 0x0) 19:09:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x66de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:01 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {0x0, 0xff00}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2449.229355][ T4233] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2449.256306][ T2612] usb 5-1: USB disconnect, device number 20 19:09:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b34, 0x0) 19:09:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b35, 0x0) [ 2449.427908][ T4233] 8021q: adding VLAN 0 to HW filter on device bond519 19:09:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b36, 0x0) [ 2449.477304][ T4242] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b37, 0x0) [ 2449.613167][ T4245] bond519: (slave veth2157): Enslaving as an active interface with a down link [ 2449.634302][T30860] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2449.697807][ T4265] bond519: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2449.793923][ T3795] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2449.862303][ T4298] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2449.880538][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2449.916352][ T4233] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2450.004040][T30860] usb 1-1: config 0 has no interfaces? [ 2450.009974][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2450.022371][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.034996][T30860] usb 1-1: config 0 descriptor?? [ 2450.054973][T13690] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2450.064583][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2450.284440][T30860] usb 1-1: USB disconnect, device number 119 [ 2450.304112][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 2450.425164][T13690] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2450.433302][T13690] usb 5-1: config 0 has no interface number 0 [ 2450.439879][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2450.450963][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2450.454767][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2450.463127][T13690] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2450.479402][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2450.488893][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.511690][T13690] usb 5-1: config 0 descriptor?? [ 2450.555289][ T4133] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2450.576078][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input865 [ 2450.743905][ T3795] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2450.788326][ T4569] usb 5-1: USB disconnect, device number 21 19:09:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3a, 0x0) 19:09:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x67de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2450.896313][ T4341] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3b, 0x0) [ 2450.940707][ T4342] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2451.013826][ T3795] usb 4-1: device descriptor read/64, error 18 19:09:03 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x200, 0xfff, 0x1f, 0x0, 0x8000001f, 0x0, 0xfff}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r6, &(0x7f0000003900)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x0, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="b4d0c8abf2ffaf4144500e69f904550e406a91bf921a", 0x16}, {&(0x7f00000003c0)="bf4ced4b48b51dbabd75322f3af86df212f0ef52f666d0131ae93d6b8513c7a4823fb7eac1bb", 0x26}], 0x2, &(0x7f0000003b00)=[{0x110, 0x10c, 0x1f1, "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"}, {0xb0, 0x117, 0x1, "2c39700d9e9a050a31058fc41e9e2d1c40ea564db010e640f7fa260593287690e07a120fbcc0448c5807cf19078ea7e97feff6ade4ed03de8b538b524d313090750f872da1ff096b87785a1831b7c3da335270b16ed7382eb258fd22c63f24ff18dced920ff0648ca7c6d0c1ac78cf725d6471439ec5ba232f5efae5f80330fc940aca29871154ce3e6c45f4475258d8a9cc5dc5716e69a994d87ab80e946d"}, {0xf0, 0x115, 0xfff, "38fb998efd4383c8c39d5cb0ce19c7dc5e3a69690aed645b1c2a27170afb13f7c2f7517f3ebf389398470b0249d32fd8b95f1f8a673e79c20f7d7d0939660fcd65aa587bd847bb4ace0d3d00ed13390ed82e59cdf5b2896adaff8dea38abfbc7a79a7c20dd63995845b526156891f263e1d4bf634f2763bed2dd2b2758da54692722893e8fa1f30407a8e81283da1f20ee351c467a2338b97612f2bfe648334b9797609b557999ec057c54bc569edc47901a71f80685b8d811d9fc88469debe93f5faf043ca929075576208860d904d9452da95224d60d6320a5a9"}, {0x58, 0x100, 0x1, "65d83ec61adb7bb55ead03fe0f8614cf2eaf5dbf3698067d0cfdfd3189ad18e15abf47c5a7937d3cfa670e2e2e626aa1172cc03449b1245450597ec61ff66c8e8e81818388"}, {0x80, 0x107, 0x9, "26a64f351d45bb0a2cd956af72d37558e94c356142574e7996f90808ecdeee24f52476a54218f02ead4ba92646ab414a65e9328e0d399dc698ff9bf9503726427988c43d39afc968d984d38767bf92734144f278db651578d17de5659c384838bc3145373cfdfa85d64904"}, {0x40, 0x102, 0x4, "b3ccc087015155a8a3eee24a876f06caaf3afbcf864c0976cbceb275b6c11ccc5e51393d7b13b71d7e"}, {0x100, 0x10a, 0xfffffffe, "e13e195be54db29c9ed853496672fbb677d94bc7b23539a8d6e608294da2980d1614dc07798b05d06af0633694eb97427d1955ec623f30ef3ffd2a221776315723c17074627411aa8e5927a0124120cb6841636264b08b7c21629dadbcf853b901759b641122b78ac4d36c75079c08bb3dbf96a76cfa11a3fee3a1fc53a136f1b4d54104866ceb6878ed3a439fc8be4774270861af154b37c9444fb93550a7c1abf65ef1a1b76401b11b5c8444b1133c095d8de6864afab2bb0602f5586f4edfe14a4a0ff4b4207f777c14457afee8991057dc7d60f486356d487fdbb79d046c82c8f8f024c3cb45e3dfb4bb"}], 0x4c8}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x3}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000003a40)="d2621ae4ccc3352f81c75d9f1c8db82c80b619d2d59fb1ce2d08835a62b4943be9d2743fbb2f949223d6d6b7bd99d7e1b9d281169adba1da44a3f029a2651b2c17eea12a5af01813c8f419c3c7c64fcab89690566b670c90515618b1aa1aad234f927da413d3376667d7cc9d981e53c2c06f9108377b8a1b45711d80a33cb547bd34f6241b8c544c4fd3080134eddc1c83e97129a2e35a718d5c200e2de27db3079ee4cb05da2eb4a7", 0xa9}, {&(0x7f0000000980)="401d3b07babc197674fcae495b21cc2dc65b2e773a", 0x15}, {&(0x7f00000009c0)="bd5296f2e9a279552287e528e2b4c8b4f8deda6ea745861c7fb5a9376e4604d9071c4938c7fac8a79dad661748dd34aac757191d4ea7ad73ae0d15430ada96a79ee9b5bdc396b0fb7df3ffc24f009f753a514dd813d24234281342d434e4a7c0ea01e712ab5cef572a4d982fa0d1806dfc99f3ec5cc776d79e6614369b3b923fb03edd20272094dda3234877bb6b5fe644d67227df5d15bc834b649a4aaa59e9014ff98e021e9083ee6d26a4fb9dce226304c3b5ff1c423040edca238c1e64bd19fe94f335859d60325ff8912255c7b2a9ae236adfe2a8c14d", 0xd9}], 0x3, &(0x7f0000000440)=[{0x80, 0x105, 0x1, "ec0ab34db63b8acbb32787c0030a2f12058c6e42088041095d999551d7079d3ac413c9fab06fb0982649b9ae788f27d0a893a28e0d85cdccab0ec555e8a394c4c699d78ce42a5803bd41087eaff2c6c11d2287b252375e3c93303549024a42bb9e79b6b19a7a17cb51d611582cf961"}, {0x1d8, 0x29, 0xad, "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"}], 0x258}}, {{&(0x7f0000000c80)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000d00)="d238427a906bcf780817cdf1f00cad54d51ee8c8fafba64e8359bcac7859c3845d68723a8a378b4f09b5277ff27a3f1b469a1424a0bb60a75e7b2cb1f473a9ab8390578fa824a0ff784a28d7ce6319ce8843cbd107a6dae452c8557a87c81b94739ff3de5d9e44733fae83bfeb99e9771ded847f9f987e48c89c0921b24ea2ae05fe9da71317999a04973d4f5e4e3e5b6b36e44cfa623f75d36532f83eb2d22269a0f5c63c997f942e467e174cdd", 0xae}, {&(0x7f0000000dc0)="6edbb65cf0234e44705ae5840241e3a2c5dc1ec05114b688ef3e43fe596afbc9c164ae6e377cf0667de97009f36115e88cc31484fe0bce19465dd4ac5381e734938762e65a7c2f71594a9465acf151b8c32e6f6eb427680e944d9c32c1b0750b6bce93529808093d1ce0c7a260bc467a1fd896418a2276f616fb4abafd2690306b2ec7222dcc5015a38cb3641dd243d988a293d3938221c58103df042cd1e63fb4c5a092f3675c9ef200d971497be5205f5424fe0007acbad65df974562da52b3e82e5e3902843f18732b8fa2dd968420ac645179f594c0d62489f95b30adbec77581a9a9fe1d6ad985bc6d385389871807af476e33614cb8b9dfa745deb21c86febc1c87ab01ad619fd345902115165186217454d8e72c03682d707c50ba68d5d7c2c4283b745dfa1b251ef1a156302f594a6590567bfdae60030e344182b9886e8ff7e5da906e9964891e18bfca0c95cee59f6b2b07f63b2e1af0727ebb26a21846241f4fc2adc2e0588a26f717445c7a48072e2cc26fa1b027f61059e9be623c4f4f94d55331913e958095d151733b230b1b5e2b21ae65d53fe1bea226ee987f34c8a299c89001eab444e70daa41f812e560c626b70736be4f1e51f9d500408284f1fa54e8a057682d65338db8a0d9d780c1c6fdf32f91806243239492002572e67007747b7c83a133c123f5f8d6b4307013f3b9e5921d66f2a2aed54c1db3c52819a51c789dc200524c28ff15ec0bb4e495f0ceeefc95ad8e9cd42792f3fe99702b0c495560fc9573526aa7311a52a058f44db1ebbdd1df1119f2d768199e7418f08997a3b240cdf3fe2b66681cc8e4d2598fef2d74c67ad946f4853a70ea5124b4a1901f5f0bd9765b2480a8e78474045b356ab85191b7203e20d6b3b35a97613b7efd332a3e38b0b72c31a8727a93748f2041c6e7a77e896ac8a4449aaba15170b3212237431f2b9ab0c3cda3217f66101b292aa1d4dbadd06fee5e60fed1581ef156ca88c54328651a2651870dc9e69d9421b45a101c13dd479c80bf53c649b39e9bff5d686cc6a41057d23a8a5ea01fa82980d38cb191768e3259e4131e49af4a6973d4c22afe174a6d2742030605182a1fd825f391a7a7bf0341c9c42a032d98850df76fb12d217a7abbc39052eafa10911a3b85768ede930855f88fe45a02f25b2cb5338e4c497d8c5e70114dbb7723fad46c6c207539ccdd72ff0b74f159f4918c8f04a9c06968099b8bf71bd5898d88cc12b73959e2bbeef97ebf57482c96a9c8b27cc6c611ef7706e30ca4fcf191faeae19a4136e4f8beeb30e10a9b6a69c0a0505c208ca21a82b0ea599130bcabcb176d555e0f9e097bfa6fbb77a3856fedc6fd922d55d4d78732aadb46d8863bb3b66c48ed3948cef3d4c3c34d098b72f7535598a5aca9ae991fbbe26ed1a7eeb03a6532a84e755637467aa9cf1752b960b982ce3106788428744207088f1fc5f160ba83013950112f7d77d488080f6d12c03f9e2106eb2577a42ba154ebda1b9bb4af87d1f450c60c7ad14676c2e26e9c1dadecb937a2c49bef0a390ff84dbce7fd3a1c2630eb2eb99a124549675083ac88967cce7cae28e2b97ea3f00af228e38e123c8346a4910afd9a257736d1d2e2e9c8b83a9bb489ecf94c2f185b85ee72579a818dd0c8e94780a5571595768945ad3bbf8e3f625b60cba415b3542b49873576db2567712754f39b3b8e45e25cbb1a2346cbb9342eb2538ed3bfc2d8e0283f68a4b26b76ab8b3a8d423c8257837eedf4a4f994657a67665f6747dc39cd39ef0ac41200655df333cb5d43df84d910f77d745e330f4913da77ea1fdf327be4128e6e7c016666d29973236f177066908a35fdbb76438662a67b31bb15ac21217cd04bb1fe5e87b63707e1fb188a661af91d0c4e8614a89837052fe6967b1bff6f9a6f7e3fc5e52e7ff22882af32a730bcbf651a4d7b4855fb9d285a5181706bd28c3814663ba17aac8da8b71d937726dafdc359b4b11f4cde8ded00615772ed2e7f3f37092eccefe57920891b4dd10b379b18cdd74e4547c7a1e3029cc9615da2196c24b80c4fce5fd729170d58bcc6064a209b9edf8ac2d0eab70107d37b28cdd15c90be6513182102e61bdc6982a8daac2f6ad44afdb26e37324f3e14427e507835ebee9d1465a85769f2a2360a7d9a3b2b50b42ae80edd8d5c9df07b4ff07e4cdb83fc3c7b437395ef9d954f1042d1b4bbb440d8ed998d74c9fbf553241cfcc313370435476b2669c84b46889384770575e86b9ce797621966b3a3074aa0702bb55ab3dc5bff02e0c447495febc5823ddb65f6c3fe697086faa792753417eb3fc09e7a5e9ac5cdd0152059be9430ab60ad3f0f9ba345964de29491393f3bc662cfc7ba7abd9a2e1504bff2dfe3809b0b3876e9ddbaabfa1e8918c6d825ce4543b149b8f607df6a1ceb4a632075f9f41ee7d8d2e0ef093d03c72409363c3ae832dd67303fea785cf661ede2eab664e1860be85548520c54502b3191badbea336c39f023bd828e57b55cd7c5c769efba0006754e3a0de019be0ace1debbd3fe4655092c1db7febaa191b92705d366a13c50894b81aeecec25745b26685675fab7667173afc642826dfa14c5378c2121191ccb79c8eacbdca9da1948503c2728f4b17865db9802b52cf5d46487c28322df489f85a0ce03666fcf0a389c5340e53e0a9dcdc6d9687ec93f61227f905be5de8fb36d200b13130ff9b3acc8ad01100e712ab8d8741da5d88490b1ef7442848d2a145ec6312f49f5dfb9b3b0ecf531afa89683cdefc3aae12a1285b7e08d28daa6e0ec5015c037c82674cdbd38c48762c334e14746b8b96e5cad4c7806d1728bb9c82185f7cb9064a06c33555d7d4d410bd15171228378574e9468f72c603755c2a014e79055a303ac7f99137251c091624ce719e086db732d51816cab1c38a1500ff724c9e50d6512a2365eb76044b6055b709cb231fd1a873221bf93e41fbcae13b6238aec25f591eef6095f7129a578dab54b0f44505248053da8f815cadba9bdbb135c86da8af5d5dc1886ca68ef9888634c54063cc568a95f29a0815b31fa4fab5ca0723fca69feb654c160281611fff6c196be7aaf93ad1b3600f571686df7e48751eb3f3b43bec1269a7c4540e2d6522385225e5639544fb26d45190e660702c2b387cc1a8ca33ad8f95f4124e38e85d5fc719d381a2c0fb701427b9236b42e9b7c9f1d9897a5c1df6bc2379e883470cd5e9aace0afa09a328d662e00c97a6f2d1ce12560e9da01ea5410b5736a5e30746486f671b853b1a1721192ae0fef7bf509745717e66de4e52f5aa06577c412f6cc4eb57384f0d0e2c40578a5758bb0f5bd7877ffcea14ecf7d371ae35cb14f8e4b6f687bc20d4a6ca85a11290cccbe562910e030fe29e4f97cf65c20e5d5db721216276b431ddaaf7f2706b879e3091239402cb1218f12b59e9b39c2a36dfe719e22df3ade2e364376e27a44e28bc8e18c736755c9dcfd585d28e923e0d2d37d8906173510a74583aabc5b8ddf68762127ec912d6171f0a2f2538323ac34cddc2a31500b7bae22cb34de3dd1d751ae91e9108196ebc7f4bdb81151edbdee8ca3b92177a12849953522f05062b3e6faa1fda88f8c9963518628bf16d6974c485ff0c6c34f736e92e2787deb5c5357ae45359b4e1de58511ea65fa7356e3f037c1aec2e2b3c532e5eab7a2e5592e99490ac15cb355e0b7452d5f12478477c6fcd27935d0c59436987a30b58ddc837198e0e4ee7315fb5c20bcbd68eb7476f3e69edc04840d8180969015b498ac2fdcfaa4581f7c390d7a7b910fc4de0b14e980bc43365bb3e4434fa599be57e7d65991895ec4187128d53795b59f87f21f98d7d725dcc5b05a0784f56e280492e09be62f0364900c0aecc0cb4d13acf41642b5ca2863b2fad7c09b90234d847e7258916e4f6afcba0a3203e32b5cf54fd0ce13455063c0154307fdf5b22979bfe5a176dd8ef85dbb5fe96f2fb267313238050a7fc35bfec9e0e815becc41ce7cde9a0ffbe6bde14ff2ad468b42baa1cfead82cabb6d2d46949f53d122de08da90a128cb361cc5a7959861251adef416e8d9f66a8a46e3c62f67aead3938e1210fee6f319b49e95b9a09521ed8be628f73bb4e6fd67da602c68acfd93ce5017fb64f1e9ef12341c6a7a6566c6eab51a0f7041d3c7f30d93002ade5c409788695496c4df3e35bb362a543213cddcb3a1b49825e8dcf9c740db7e7341dfefc6c894bfddef00e7060dc4d93e0000ecca48e968bb0ef8462bd0d429e59b40f353cb25d81f54ee0b5415d38ae9753a2b5c0f28ec71ca2f902ea4dbe8407679c6a6a1d8db99afa0b8b7b889f1405f5a1d9c4c5a92b81e00e4a52d6d62a56d1aeb0df5109baf26316c55895f3bd08b071250657ab0ab763a2d36c85cfe15797b69808b7920996916bb3868c0303eb2f5247fcd4a9897b545d5d96e83c2eebc3441fd52f4548841645034fbd6c647011292a964a95d4645e4e077ed082732789a6a76427b4ee9fa1b99b5f746b27a97638d41a7fbec9bb398b2f4e7e29d60501e68d00f49a8ba4b9423a66373b8700bbc52df0ce01a939758730581ca61edad4382699025263106cccb6ddc3b379f30ff48db3b3f88a57bcb056c138e4570cf15b4847777c663606618c365de4fa577ab04d25fe00f59dc98256708fa16d98f0ff88344e5817dfb28f4a99fcdb020d62b184e98c070b270d57d7e6813907536cd83212e2df678e8226475b238592371ba2d97020b5350794e951e50601fd661af5597ced7d3411ac5a42af0d28f01f9a5d85fcf5c4834deb97a7b4dabc72d33651f9d3eb2ec0e74433e3294ce6d321d6e9c72308bfa5e0805bf4efddbbfdb06cd54602642436d422ca1c1c7e0b66ebeba540c452d547b95b0ed6e1f413bef8cc4441aebb20d784e14640d6d4069afb2fd0ea93e9ce80f62f003600959eea3449f4a65ef0bc70ead4bf609be216082db3929aa61cbd90c2f6da62b9945e83532fe4f60d69f3071958eff22d68ef4ab36b9cbcf94e8b8992a5474abc490bcabe60e336d26f6a5ee9711545c915c2d29a66bc39a38dd0b6959f4ef34841e40f200c5f2e1e2589d5fb258dc8a42425291752398cb0b97e905712f4e3449dc1df563650ef9bdda2ba83f85a3aaf1da4a95118d0c65bfba499d71aaf44905d913067bbf4b7937abf5f8d4977133053eec278851016bf8d06b0b0f58e96ca0f773da4c097c9283cb3a218f745a48ae39ac4be3181eb9dbd7eebaa770626a1ec5f62fea283be08566c6be9150e9562e4f7feee5b04311658349c2be23edd2912f2f26e4f3fa609e93252973b224fe37d0a1f0b6d649af0e4d520df38ec3e412e554d91c46b06c26b0b5d328c8239d724cbf7f98c040f75bc33ae4094782e70474ef45ca9e8ada183da2042e4dfbd71f7c00c76739ed404e418a3c460a16d527f34ada6d28d553c05e0e12362561cc70bbbd70f148a12d206afd192bb8c4ef1987b221a72aa80f42d1fa496b89f2b313998294a167376ddacc33084164ecaba408b4d9a50910514a403844c666539416b5f9e931930de439a85d65ce5115d94696b323f50b723099ef49542d73ce9ba4f91ae4957aa17e9ed71cb4702492aba9ce100efa39afec91ae1908804b9a533daec7efd4c2870b3cce9aa5770bcc3601f57db354044e82c45192bd06fc5682a0fe624d9481662beb99f12d2f330122daf6aca7be0a376ff252ba9439944f8ac5c85412947152f6997b2b4b84163642dead3c", 0x1000}], 0x2, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x2a8}}, {{&(0x7f00000020c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002140)="fe127be8be08969464856137daebc81ee636cd985fa41d180412b695414e2a9416bae76a40792d738bf563fb66bce075cde456ec5881a4c746c0961371cff4873f597158c88cdfbc02fe21e90a4bac414d6f24563f9daade1e8f51579fe9f54d8c2a560806befd03d0e01243129e55e97c416f133f75b9bb1ae18c304467de70300dea9c0143401d8dd15a59ed3d8090c16d6643990839185c7716164696935de4eee3c72160f9e2f6be31fb3b9ee5604a3ccf6be4716896911e113999a46566340b4837f9d68327a2e74e99c4559616feaed1bc6016a277b80da61b", 0xdc}, {&(0x7f0000002240)="8ad498713e1595163b93e33ca4d30eb88b603f88560dfa0675bb6129a4afc1ed9afe5e32eb915e0ec1b0d07ae5853b523ab16ca6828b39cbde653c0f12e613f004261c1ca7c373842d8658103efa8e61a42e16535a04f7cd60b822a2058c7be07f638ae52b1ec46a161af3601a2e2e339cc4a83a29f34a98732dca97633a5ce1067b3ea3edd9d9938aadd85ea6453c03440f588b9a7f3679aefd2871f8c524ec80764f042f39fee946f5e7eab7dc9d508d505020dba40bee9644c7b73016f2b3e7a4590127965c8da1416e", 0xcb}, {&(0x7f0000002340)="cca0caf96978f8acac6eea76ef2d5bf2cb50a7732467769f1997e501265bdaa962fa27c61e98f6d7e913a03f4db44f5c9fe43d0e045f9a240585fc87cafecc68ae095dcc84ca68417d77fbbd380cc6a03c3239d92a9a7c0f4805e2f6351d09f7ce15ec8030bb09006845fdd10fc67ea33fd8c74ed25e50bf70933c638358769dc1f45d7bb74b71d7deafd26196", 0x8d}], 0x3, &(0x7f0000003540)=[{0xc8, 0x110, 0xfff, "41210245fadc1b6f89cf22142428d9fd94b49872810a32ae4090f83189defcf98e01724f027ac73c49d70291f7f1989d646e9ff470d119fef7c2cb13aca904a46023d7b4a599ba64cc3c5cb1ddc630068bfa5c87d1248fe7c2a9e86884c8f09465b1c27cc2330056c9b040c5413bac3093c5291282192cf54f717eb6a9af3eca88323ff948b5cde9e337a7eb59d4b1c68e579f4188d32a34b0bb9a391807a07299a7a28cdd30a5aa7448f8a35d1ee1749de04463"}, {0xd0, 0x10c, 0xffff, "ee334764869c7d75a9967fed77de9700086fb7ad5c354af8c868b5e08490e8e41fa98ad33a56d675208ebf6662e74b4a099ffccc694cc8f6ecf56006ed1943b59d3ac1f4c6b4b3b5f323181882199c91dde5d0c33394da7aa175608123e5d8aa77793ad3c5bcbc9e55c21b32fc68443809a0e8854006a1e459f19b76152478f0ada2692e5515ff305152c7c3e10d62274665af529525fd444af85a201bf3e12367a6298abb6de93722eb9d3300f8f5bb2cc9eb1e5dc9af3ff9"}], 0x198}}, {{&(0x7f0000003700)=@nl=@kern={0x10, 0x0, 0x0, 0x200}, 0x80, &(0x7f0000002440)=[{&(0x7f0000003780)="298480eaf0b43057ad673b81f863e5c82b1ced1270a5d59fca99b045333d9115237b558c5fa527ae4b682acabd943fc4d5ffac9cdf5530ff5f50fdc56d1003c60456c3a8f8983625d55de6492613b52d10a1dd1f3698845ce0be5be2181aa783fb6890be3f9ef325d035996e052ab87864dbd4bbb3c4eb5f6e1648d607aad5c7184dc15537dd7ee9d67bc264dbfe27008ede507033611d6410d1afe6dd9fd81f140b35ab75c9c721b6e771f61d79ab8c0b8ffda5828bc539cbc7907f3eaa7a9e82592fcac87925", 0xc7}], 0x1, &(0x7f0000003880)=[{0x80, 0x10e, 0x3, "cd6ba311c1a34948abaa2fb09487136c0d7e49f5f175d8ff19ab95ed1c29c81b1c2612fdf184bd9f19ee992506f817fc48810bf1694df22e2d7c372fc621474bfd9d5e35fc0d8a12359dfd9f2df85949c44e6c05a656940ccd046121fde5243ef5e36d1843b119ec4780c8401b9eaf"}], 0x80}}], 0x5, 0x0) r7 = socket(0x1e, 0x4, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000002480)=ANY=[@ANYRES64, @ANYBLOB="92993a8376f06a4adbe14a6d003b063b3a37021aa5801f7ac101e268ce0a967720b69358", @ANYRES32=r7, @ANYRES16=r0, @ANYRES32, @ANYRESDEC=r2, @ANYRESOCT=r7, @ANYRESDEC=r5, @ANYBLOB="1b87a00d09863b38f5b3c388b23b3cdd963e928a68012b11b9074358d17862aa360734717f573b04b2a4286bd59260daf1827607df115e1069a35eda1cb24ab1b6018652882044055ca46add25703196834bfb670f653d2aa001106282981c1e5471dcadba094395b91b0d8bd385e015d8624080ae1968dccd9c70e89d6f287fd7408c2b85fbf424dbe431724b4918d4c830db54fb3cc8acce5c2d2c0cb9ac36288e540861df924a466372f9179f4846236cb05388b2b060346d5d97b34d20335145cd4c2d1d9ce114d7b501d6b561775f34774a484a059b8e134d2cbfab8440f6e061698ac4050d0e391cab096aef25487aa0680cb177d9bab3905390ae64da3af6a3230a47a2c5d046f603902324f97ee47ec1920dcbd056119359aa31458b78a1cdf7205d67ab4565f669299e9a283c705021380139d7dfa024cb20ab55f40a941f2608e4eeeed6b41656eba7ff7ff471d69267ad2432e21b234d622df4ab6ed3e7573aeb9c09e81d10d2bf170d818d01c2316c0c0ab69dfecd722e48fc79d03371c363e30dc1eefe698278a2d76de2831f1d405cf9d85f3e9f0b4e9ac16539ef798e09dad0628c77af4fa3e234973421157c5e6ba1a853dce3520abf1b230554e3e26c257ff786cfd8375a93691e96b8b7d690ee95f2e1d4188dbc1dddad15f9702648ab61aa9b70267c458c30ab8b18ea08c1529046b6be0e07c6bd4f6ca9394dad512a660bf207a9519e1fd3fff7e826495b2caf2a799bcccbd8d260792a240c655f5e3256bc1bd591fe998af0c3e5cf6ddaff80f9356946f7f185cfdecc902d3ab80d13188e5c36f1272b4dc1f6c064851a6bedafa494b88799c0c31a06947ee019a2e519e6a6a4d5889f0a8bea005d4f5965fc55112c75e14a22c24489c1734288a711bc5bc569a3048e22eefb463b50d4c2f477644cd88535c2548e6f69d6a73d8462557dc91cc47c7f3145b0355689f4460470649cda32e7bf00880810cfd086a2015ac46068b7d7ead5f48546d591fbd4024c93f6b775a68212415e22e33dd1841371d7124764d7d5f2a5def14d6c6310583006c99c3235f2c35939e0214be7539cd6aa28b726a60f0373d9598dd55f028a9b784f9f5d9ebe532544c5345466f80dc3012f9da2813a49c0ada16f55b065fac16a0947943d82d980d1254e5932e00d8e3252154f61e1aa18586cf83aec30e6cdcc1eb0c6a08b0687b799e36fcdbc30bef59a9749abbeba41fe855610ede4733c2b79ff4e07ce2a822cb7f77eadc11042bb07959f80e44bfeb5d9e3ac43c27ff05d80918a4f5a822c821b6d4335c2b0ca2c7aa3c42c344248ff45fc3d5562b74571a0167ef1702ba018988d90749050ec8d746e9a49f4418e89cb423cdc91589e5892d39700d464a527f70939750996f04bfc7930187eeff5c57e40239aca5d72af761d96fe993b2c95578056463473e4a7b61840156989f87b4f5c80b688fcefb38d7bc1e6c23209c7bd3cf9fbdffa106a5086f9f108dde9ddfc9bc443fbeaef981abd59c05fe85fba1ec8b8011110953190858d216d2d6599bb2d10acc326c44c4159db0cb14e5451a5194a64533bd9d5766f4fe6738afe70dee33e9b7ce6a959c266701b0b37e4660beab66f203b3057000afde891bfee68fc24d27e2dba46ab01ff86244fc3178ee3149bb957db0d4c9471b8b69c1b79ede7a088ae2372545ee5023c84f04e49dd7e2615e03a7c9deb15769f1efcfb15a076e8e6f670e661180355b9bc0b39cb50fd0dcbe4ed4eb464c235d82622c360ec6248ddfb6980fa3d2481aef36c0c5f5e9b267ea7fc20da3ccb3b9a1630deeb61ece1749d4ba4d78081e8ff0016f192094a1fe322b7e2c0501c4552acbbb6b84f9d4f38cefd2b8d0722c62d7b044a3c0cc0396c49576cc101e07e942fb204c650078a2cc85941175fcec3bb7fe5c66745bb071463489ad1ec036700eb0f2427aede7b794deeeeb42874d30e0d3999cfc3a4324936a940e8d9f664e8ab65cce486d6609a1b69e1a5399f954880c2129013b75556b28cbbec98c0506167cf671c84861d00cca025a72cfd5a1144bc24d312d0566d44dee168eff62eadfa3e324dce338e13fa5477a716ea647d6d497f28cc98f495a707b3a269aea2d59e0709eea433a9518e63ddab34f54c8432a94f467b5aa57da0ab34ad75e0e8aee235b40ca55ad97be05e42917a524a2c0a41d0f684ef7c5505ed38324bef1b31f442a47b5e4b86fc757b563b5223b445271161ddaf58d6c44164ee778a8152deab6bf90fba4ce3d337a6ca1c381f767d2e6ade9a1ed05ed1603b3ee8cd770fd82408de41b6a23bbd9c5f384d5e67c54dc21e18ece4ebd8765847ff5804af6ec417eb2276cb5f6875442198d9029650254793c586034e8e62ab2cff1336bf2cb7b5ad28ac4c40c7021ad950082ef29c5c12b624b9c19ed081540779fb1d9b4c4185cfba94b1f50ef2ea2a883a2a56674ab931239958b8e9fe343584cea821e84d0f2c37e724f16b73c2614e5fa36835c725621f97d1b9cf63a869702a3fa6ae02214e223c2d1ce253a012009292781d6c9f307e928acb70bab55cfb2da7f1f168290656716d6cd573c6eb4f5135a1a9d83c2d0df4786c166aeac330bafe88fcda68ea714e3ff836d12ec25f2b9b0b2f464ab8ca58abe0ca8bd0588106e873b98dad0c564086ff45fc1d0413bf69b5770fee159be78cd5865e757f1f896aa4ba710979d767893323a77384d4077bcbdceac861282e3705ccb2ccb1e39ab9812b7fd74b5a158e8e7b57bbec435ee1f97aab9c7c146e6853552a4ab4aa3d0b95f3886c36ddd3983d171e7042bba26ff1aa5a7a1e9e7e38e33f459b2a1361318f3e12b08516aa6fb953056716dabe6e3d69680f22bd4b9e7a481dff7e4ee620f4c99d978d7ea31eeeba9b03ce109c279ab8f2bf4522350d848a2632827bf089c02517abd17d4dc519df6a0e2d0412180c6f5fb1a82f230a62017d7a798db8ffd87747e0461cb22821bda5cec86f65b04b0c2f83b730eda8e475d77d626fd50c83ba127cffc570b3855cabea12e9fc5832a0c4cf7e03da2f03554ae955375fae85e66b519290f93312d2fbd9ccbb72ad1ee9e2826b5687c060f8640c62fb5e88cea98855c171e37a1bd9045896cd1bba30fe59eab6e579e6ed60db93fad510d5f1d19fb47abecb10a311f28a830209a5d1e3b5a68422c2be71b370656f9bc052deb5c1459c956adda1598467330316f781b485a6750c19f9fe1bfe316629117e9bf51f1537cf098c657c62f750867cd9bd51dc53bb464041ef700ea37dc92e3874db3dc179d9d32b1c767451bbbda546f00bde49cf6bd605ae18139f93fbac3300597e8ce98f541475d5c3dfc8d9312134a09caaffdeee6bf885660e3ef2af0b5e4e2d7da5f45e098a3816e97ef5014d29f05a42fb91503b23401208e63f91ed4a9bc9cb25ef714605761c3639a66d00585d23995f8709664a7dbcbf0986b9faa9f851ccf4b9967ff73126276b8d976ab714f440201a1cc445a6a95cda9cb58e73bdac6640f76c782be97de0a6b93fc54d00c0b550624aa197018771aa0c6cad6043ed2f7eecabf6e11826f53a76168b2fc87d236ecbcc6faa5326354acebd9723018cd1018b9ba87455d7eb74c50b0af947919c2aa5375de190c716a18d9212cc45bd12308ede7d590de0505e20391fe3ce565c60f812b76a61119f641dee348503bc646079da8f59b47f2a7a516aea9d6869a049342dcf5c93d5422daff925ebd1372a28a3fddd259389341fdb1a49c3510d739fda01e293b16b98646e7ec272409c2bc048566a1b8d4f3f0cf8579e5caa4c71fa49fad34782f196c4f2a64578a03d6ab611b02b24ef4b842e6e370507d87c09fde1617bf4ceaf889641991a25c991f30691cda220f090bb46d6f5e82f388c2a6a1a266fce76d3d3170568c4acb85253454a955d7392db532d1cb98b9742c5598505ad0bee462489f099ffe435b71e3f945146e749aeacbc036588ed967ceb43b77a71880850e8d1c1859bfcdc98fb0c5af5b6da6fd31b4b18aa3363f682ec4134f34c5030ca724fec1f7217d5a514f2f2cbd6b310eec845a37a1570e90aa931717a73d9aa57e5e6538bcf05dfbc7ea07053c0934bbe8a25c8aa88b677c725f27068e5ec4d343606fe4d148e250113874c73051d58080227560ab56fce518a6b96964e05822e2de23bb92c58f7db3636004f5d6fa80b61b96ff513dbe6144a3d48a47da8b08afd8a77dd7a9553355622fe5bebecb40bb82d7e988ec20b800c8c8456ccf0e232f876fbd7c33f83f803b21adb602be5eaac0c7a8406c021d052b1da4fb0e0db3052e5dae6176384e80eba121c84a43d146d90168804b7f929f83f5ab1158b8ef20a8659b9f4fbab42e22b3a23f39d7285308e8a004be8fd9c4d4c6fa5964ddcf645c557845893a6e4b16a2de0e92e6857bfadc603aba2df52c882bebf3b8007362413136012387275dcaabc0c22e72e81435aac5f96c84c7159a846a7b1a22313d42bb35bbd55fb34da55814fe63ef92d859526376df75c7b5e74805f2a707f69a76744453f3b728ab5eae57126a7b90158a833a5a4c9c0607c806a2e1eba027e4d8e69681bffac1d3f72e04581a33b39bf1d6691273ee761a8f6fcff3d7e9d1fa41d9cfc5a0103a7abcdd4dbc0e77e3171056f537520e9d069fefb14aea8aed68070fe20ca7e605f3a08c38b7ad4cf27b4805311ec1e3b00f20b9b74977973ec9d04d2b0a229808a1dfed02753357b1eae505c4ea12334386d4c466192c11345594894f2c5f7a150ef939604020ae0b74a72e21110efd56c3d376fdbecd7748de0b046c6e7e059fe925dd304a6842eb4f327789c4ea8b55eb893242e952a37165204e0475c7260487eb39efd8120753f5eecd6e7beb4d8e8750e49cd9f16086c7d71b4994e429d716e503f56123b5e48af4ae259b528461cbb2764594ad1ff9fe8ac3403ab83863e01ecd32bc16a788ca41639f21e92c7d20fafdbc532cfd77240bd6a7b204d40fae8f569021d9587a046fa27526c29528d13426422e14216ac14acbe9bab6dfb20066a4d598457b30f90ef6612fbb093aa9c83ad40332a5fcdb12b5ecea73f539122f06787604b852b1a1b9c6073aea98d16a1549d1836677495aa28208e251c37eb8828a68d78abc051d3cc9bb3e7c7f302cae246e4de3a329c2459fa7494d8e4275053f47f29ece21ef7384a7de10a523dec0ee88f3576393b4ce16d98f9eb988af3b617cc07b068a5dd052b2f590eae94ed58354b5e16bb04b6712e7a65998952a3ef32fc086ec81944745f3b2e9565f32c0f7ad61a72825bc3abf591289e22c678338640795342fa940bcacbf7f5dfe7479384cde57d4db85871f7471ac7a12890ffc1042cfc5c0766f5d8737cc99e6f685493739cff2e088b3f678ddeb30878f9b48aca9b446f54475262656ccd77a070986b1387d5019ef9588212a8cdd21d7dc82fe36f641fea18bd850c8ea0fb881ff0a405fe6b2948b618f7627655555beb7d15859668d97904fd9d4078f58635e79dd64e3b4e2b3150f39719134602fcc5555c1bb405eeb3f0364518b095cbf0c3c5ea6df21689e7f0a7db74fd6b27510e14621e0b532589989b8391cc3258e4d05449d9e04c09b03ad0ca22d1aafe412bf25b3f2c16612de7c7811e50d2d7c1c27edb0a71964e78600a5c3f952d28c2c731b6fe05ce65aad35ff99d468657b5eba7c9b17890a547dadc683d2c407493854515a44324dc3a8e3f30ab1f023cb0715e9fd8", @ANYRES16=r4], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2451.063976][T13690] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2451.128985][ T4342] 8021q: adding VLAN 0 to HW filter on device bond520 19:09:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3c, 0x0) [ 2451.326642][ T4350] bond520: (slave veth2159): Enslaving as an active interface with a down link [ 2451.351841][ T4349] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2451.398187][T13690] usb 1-1: Using ep0 maxpacket: 8 [ 2451.406071][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2451.421929][ T4358] bond520: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2451.524236][ T3795] usb usb4-port1: attempt power cycle [ 2451.551058][T13690] usb 1-1: config 0 has no interfaces? [ 2451.560058][T13690] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2451.572967][T13690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.601640][T13690] usb 1-1: config 0 descriptor?? [ 2451.722183][ T4342] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2451.865557][T30860] usb 1-1: USB disconnect, device number 120 [ 2452.233739][ T3795] usb 4-1: new high-speed USB device number 62 using dummy_hcd 19:09:04 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e9f957586ab34333f044de323ac5ee09d94dbd36e1b5feebe27c9429d1f7b7df544306e8004d10d0c099183e1d80d99ad0a4e5d61af3db4e446b2d76f010b5b8fe60a38914878fd9c7a8d937fb22295cf03022546676b640a183dee08aca06a8e07c91b475db39a49f932fd3b7826fcb9af0fbf144721b059678f51197b6a2fcf01326bef84bc6ddc9e6e3e8651940d714bcd4811cf3e0be0750bde148d0d2a34b8bbcb8040cca4f8a228aee1fb131a2b3b89e56ed9949fec3f7483"], 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xf4, 0x100) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x206082, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) 19:09:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b3d, 0x0) 19:09:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:04 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12019e8014da2108ab12a190eb090000000109b4240001360b00000904410f1f01884a66000e5ae4784137233cb53a13a700"/62], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x8, 0xfffffffe, 0x2, 0x20000007}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) dup2(r1, r2) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x4, 0x4, 0x2}, 0xffffffff}}, 0x18) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:04 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2452.341055][ T4422] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2452.344168][ T3795] usb 4-1: device descriptor read/8, error -71 19:09:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b40, 0x0) [ 2452.393397][ T4423] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b41, 0x0) [ 2452.508077][ T4423] 8021q: adding VLAN 0 to HW filter on device bond521 19:09:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b44, 0x0) [ 2452.573467][ T4431] bond521: (slave veth2161): Enslaving as an active interface with a down link [ 2452.583364][ T4432] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2452.593799][ T9549] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2452.613761][ T3795] usb 4-1: device descriptor read/8, error -71 [ 2452.613770][ T2612] usb 1-1: new high-speed USB device number 121 using dummy_hcd 19:09:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b45, 0x0) 19:09:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b46, 0x0) [ 2452.691885][ T4437] bond521: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2452.845592][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2452.859952][ T4483] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2452.874974][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2452.907523][ T4431] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2452.965966][ T4431] bond521: (slave veth2163): Enslaving as an active interface with a down link [ 2452.976636][ T4490] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2452.994244][ T2612] usb 1-1: config 0 has no interfaces? [ 2452.999807][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2453.004107][ T9549] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2453.035979][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.053237][ T2612] usb 1-1: config 0 descriptor?? [ 2453.113710][ T3795] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2453.134017][ T9549] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2453.141736][ T9549] usb 5-1: can't read configurations, error -61 [ 2453.213813][ T3795] usb 4-1: Using ep0 maxpacket: 8 [ 2453.301841][ T9549] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2453.323335][T13690] usb 1-1: USB disconnect, device number 121 [ 2453.333664][ T3795] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2453.353933][ T3795] usb 4-1: config 0 has no interface number 0 [ 2453.360343][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2453.379880][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 159, changing to 11 [ 2453.399527][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2453.420351][ T3795] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2453.431472][ T3795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.446096][ T3795] usb 4-1: config 0 descriptor?? [ 2453.470180][ T4433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2453.490899][ T3795] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input866 [ 2453.543681][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2453.694018][T30860] usb 4-1: USB disconnect, device number 63 [ 2453.710024][ T9549] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2453.838039][ T9549] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2453.846268][ T9549] usb 5-1: can't read configurations, error -61 [ 2453.852705][ T9549] usb usb5-port1: attempt power cycle [ 2454.113579][ T2612] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2454.353486][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2454.485845][ T2612] usb 1-1: config 0 has no interfaces? [ 2454.491491][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2454.502196][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2454.518245][ T2612] usb 1-1: config 0 descriptor?? [ 2454.563620][ T9549] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2454.564374][ T4569] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2454.654809][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2454.783053][T30860] usb 1-1: USB disconnect, device number 122 [ 2454.818497][ T9549] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2454.836321][ T4569] usb 4-1: Using ep0 maxpacket: 8 [ 2454.964259][ T9549] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2454.972020][ T9549] usb 5-1: can't read configurations, error -61 [ 2454.984763][ T4569] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2454.992874][ T4569] usb 4-1: config 0 has no interface number 0 [ 2455.003002][ T4569] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2455.019497][ T4569] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 159, changing to 11 [ 2455.031745][ T4569] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2455.045007][ T4569] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2455.055785][ T4569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.072268][ T4569] usb 4-1: config 0 descriptor?? [ 2455.096045][ T4433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2455.116904][ T4569] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input867 [ 2455.123473][ T9549] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2455.227809][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2455.362345][ T4569] usb 4-1: USB disconnect, device number 64 [ 2455.363517][ T9549] usb 5-1: unable to get BOS descriptor or descriptor too short 19:09:07 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r3, 0x29, 0xf7, 0x6, 0x1000, 0x0, @private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}, 0x1, 0x40, 0x8000, 0x9}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x4, 0x0, {}, 0x0, 0x0}}) 19:09:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b47, 0x0) 19:09:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000016558000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:07 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x2, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x68020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:07 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2455.454077][ T9549] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2455.461712][ T9549] usb 5-1: can't read configurations, error -71 [ 2455.479239][ T4563] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2455.501576][ T9549] usb usb5-port1: unable to enumerate USB device 19:09:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b48, 0x0) 19:09:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b49, 0x0) [ 2455.586904][ T4563] 8021q: adding VLAN 0 to HW filter on device bond522 [ 2455.597903][ T4576] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2455.610366][ T4577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:09:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4a, 0x0) 19:09:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4b, 0x0) 19:09:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4c, 0x0) 19:09:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4d, 0x0) [ 2455.804129][ T3795] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2455.836449][ T4580] bond522: (slave veth2165): Enslaving as an active interface with a down link [ 2455.883542][ T9549] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2455.918823][ T4617] bond522: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2456.020962][ T4620] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2456.053304][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2456.059019][ T4569] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2456.076629][ T4563] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2456.135873][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2456.145695][ T4646] bond522: (slave veth2167): Enslaving as an active interface with a down link [ 2456.170476][ T4563] bond522: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2456.173780][ T3795] usb 1-1: config 0 has no interfaces? [ 2456.192900][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2456.205862][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.218620][ T3795] usb 1-1: config 0 descriptor?? [ 2456.263627][ T9549] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2456.280516][ T9549] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2456.300804][ T9549] usb 5-1: can't read configurations, error -22 [ 2456.324641][ T4569] usb 4-1: Using ep0 maxpacket: 8 [ 2456.454429][ T9549] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2456.455222][ T4569] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2456.471994][ T4569] usb 4-1: config 0 has no interface number 0 [ 2456.477227][ T3795] usb 1-1: USB disconnect, device number 123 [ 2456.494004][ T4569] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2456.506968][ T4569] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2456.519534][ T4569] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2456.531862][ T4569] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2456.548727][ T4569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.563291][ T4569] usb 4-1: config 0 descriptor?? [ 2456.586131][ T4621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2456.605429][ T4569] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input868 [ 2456.693284][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2456.813329][ T9549] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2456.821207][T13690] usb 4-1: USB disconnect, device number 65 [ 2456.822686][ T9549] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2456.852990][ T9549] usb 5-1: can't read configurations, error -22 [ 2456.859967][ T9549] usb usb5-port1: attempt power cycle [ 2457.273236][ T4569] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2457.409812][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2457.529063][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 2457.574458][ T9549] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2457.664717][ T4569] usb 1-1: config 0 has no interfaces? [ 2457.665160][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2457.670410][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2457.690881][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.707659][ T4569] usb 1-1: config 0 descriptor?? [ 2457.723376][T13690] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2457.794901][ T9549] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2457.804042][ T9549] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2457.812577][ T9549] usb 5-1: can't read configurations, error -22 [ 2457.957318][ T4569] usb 1-1: USB disconnect, device number 124 [ 2457.969574][ T9549] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2457.993154][T13690] usb 4-1: Using ep0 maxpacket: 8 [ 2458.073579][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2458.114144][T13690] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2458.122369][T13690] usb 4-1: config 0 has no interface number 0 [ 2458.129733][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2458.140846][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2458.152125][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2458.163760][T13690] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2458.172792][T13690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2458.191943][T13690] usb 4-1: config 0 descriptor?? [ 2458.193519][ T9549] usb 5-1: config index 0 descriptor too short (expected 24063, got 36) [ 2458.220457][ T9549] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2458.239687][ T4621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2458.241541][ T9549] usb 5-1: can't read configurations, error -22 [ 2458.260277][ T9549] usb usb5-port1: unable to enumerate USB device [ 2458.265173][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input869 19:09:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b4e, 0x0) 19:09:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x68de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:10 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x3, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:10 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc00800, 0x0) fanotify_mark(r0, 0x30, 0x1011, r1, &(0x7f0000000080)='./file0\x00') syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2458.499903][T13690] usb 4-1: USB disconnect, device number 66 19:09:10 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x3, 0x1, 0x1ff, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x7fff, 0x8002, 0x5, 0x40, 0x1, 0x4e, 0xfffffffc, r2}, 0x20) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) finit_module(r4, &(0x7f0000000040)='/dev/input/event#\x00', 0x1) 19:09:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b52, 0x0) [ 2458.580911][ T4724] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b61, 0x0) [ 2458.709528][ T4724] 8021q: adding VLAN 0 to HW filter on device bond523 [ 2458.729616][ T4726] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b62, 0x0) [ 2458.801066][ T4733] bond523: (slave veth2169): Enslaving as an active interface with a down link 19:09:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b63, 0x0) [ 2458.856176][ T9549] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2458.879087][ T4767] bond523: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:09:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b64, 0x0) [ 2458.913214][ T4569] usb 1-1: new high-speed USB device number 125 using dummy_hcd 19:09:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b65, 0x0) 19:09:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2459.010238][ T4781] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2459.046401][ T4724] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b66, 0x0) [ 2459.073409][T13690] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2459.113151][ T9549] usb 5-1: Using ep0 maxpacket: 8 19:09:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x69de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2459.157711][ T4733] bond523: (slave veth2171): Enslaving as an active interface with a down link [ 2459.167494][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 2459.174313][ T4800] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2459.222122][ T4806] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2459.240606][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2459.261899][ T9549] usb 5-1: config 0 has no interface number 0 [ 2459.288540][ T4806] 8021q: adding VLAN 0 to HW filter on device bond524 [ 2459.298560][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2459.299960][ T4808] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2459.312852][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2459.331167][ T4569] usb 1-1: config 0 has no interfaces? [ 2459.331199][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2459.331215][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.333998][ T4569] usb 1-1: config 0 descriptor?? [ 2459.366874][T13690] usb 4-1: Using ep0 maxpacket: 8 [ 2459.386752][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2459.433770][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2459.456836][ T4810] bond524: (slave veth2173): Enslaving as an active interface with a down link [ 2459.461490][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.499111][ T4806] bond524: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2459.521725][ T9549] usb 5-1: config 0 descriptor?? [ 2459.526432][T13690] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2459.535417][T13690] usb 4-1: config 0 has no interface number 0 [ 2459.542110][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2459.554913][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2459.563532][ T4727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2459.571713][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2459.586979][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input870 [ 2459.595887][T13690] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2459.615032][T13690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.626228][T13690] usb 4-1: config 0 descriptor?? [ 2459.645057][ T4740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2459.675545][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input871 [ 2459.683927][ T3795] usb 1-1: USB disconnect, device number 125 [ 2459.813476][ T9549] usb 5-1: USB disconnect, device number 30 [ 2459.887586][T13690] usb 4-1: USB disconnect, device number 67 [ 2459.917004][ T4806] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2460.403542][ T9549] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2460.642863][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2460.663632][ T3795] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2460.725744][T13690] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2460.763207][ T9549] usb 1-1: config 0 has no interfaces? [ 2460.768975][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2460.778635][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.790915][ T9549] usb 1-1: config 0 descriptor?? [ 2460.903383][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2460.973078][T13690] usb 4-1: Using ep0 maxpacket: 8 [ 2461.023338][ T3795] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2461.031584][ T3795] usb 5-1: config 0 has no interface number 0 [ 2461.037236][ T4569] usb 1-1: USB disconnect, device number 126 19:09:13 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x4, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2461.063792][ T3795] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2461.083028][ T3795] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2461.111792][ T3795] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2461.124303][ T3795] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2461.135660][ T3795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.139192][T13690] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2461.161145][ T3795] usb 5-1: config 0 descriptor?? [ 2461.165554][T13690] usb 4-1: config 0 has no interface number 0 [ 2461.193675][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2461.194282][ T4727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2461.204968][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2461.229274][T13690] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2461.235055][ T3795] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input872 [ 2461.241486][T13690] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2461.273054][T13690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.282469][T13690] usb 4-1: config 0 descriptor?? [ 2461.339463][ T4740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2461.357887][T13690] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input873 [ 2461.461428][T13690] usb 5-1: USB disconnect, device number 31 [ 2461.472732][ C1] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 19:09:13 executing program 4: syz_usb_connect(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100270ae2353501de3f00000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x200000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x3, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x57) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000001f00), r3, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xbe06, @mcast1}, r3}}, 0x30) [ 2461.535740][ T4569] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2461.566237][ T3795] usb 4-1: USB disconnect, device number 68 19:09:13 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000014da211fab12a190eb0900000001090224000100000000090400ee4f335046b672ebe19682829102ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) pipe2$9p(&(0x7f0000000040), 0x80800) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x57, 0x0, 0x0, {}, {}, @rumble={0xfffb, 0x1}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x308, @tick, 0x1f, {0x2, 0x5}, 0x1, 0x2, 0x20}) 19:09:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b67, 0x0) 19:09:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6ade0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2461.694869][ T4952] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b68, 0x0) [ 2461.795577][ T4569] usb 1-1: Using ep0 maxpacket: 8 19:09:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b69, 0x0) [ 2461.871035][ T4952] 8021q: adding VLAN 0 to HW filter on device bond525 [ 2461.890471][ T4953] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6a, 0x0) 19:09:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6b, 0x0) [ 2461.923127][ T4569] usb 1-1: config 0 has no interfaces? [ 2461.928695][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2461.963078][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.999012][ T4569] usb 1-1: config 0 descriptor?? 19:09:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6c, 0x0) [ 2462.032779][T13690] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2462.052279][ T4958] bond525: (slave veth2175): Enslaving as an active interface with a down link 19:09:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b6d, 0x0) [ 2462.109433][ T4970] bond525: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2462.132902][ T3795] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2462.254818][T30860] usb 1-1: USB disconnect, device number 127 [ 2462.276843][ T5006] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2462.307793][ T4952] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2462.367693][ T4970] bond525: (slave veth2177): Enslaving as an active interface with a down link [ 2462.413162][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2462.413211][T13690] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2462.429054][T13690] usb 5-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 2462.440557][T13690] usb 5-1: config 0 has no interface number 0 [ 2462.447082][T13690] usb 5-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2462.464299][T13690] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2462.474488][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.488237][T13690] usb 5-1: config 0 descriptor?? [ 2462.740461][T13690] usb 5-1: USB disconnect, device number 32 [ 2462.806046][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2463.073464][ T3795] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2463.073593][ T2574] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2463.332671][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2463.343412][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2463.464593][ T2574] usb 1-1: config 0 has no interfaces? [ 2463.470143][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2463.482671][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.496877][ T2574] usb 1-1: config 0 descriptor?? [ 2463.524959][ T9549] usb 5-1: new full-speed USB device number 33 using dummy_hcd 19:09:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b70, 0x0) [ 2463.732746][ T3795] usb 4-1: device descriptor read/64, error 18 [ 2463.754342][T30860] usb 1-1: USB disconnect, device number 2 [ 2463.855131][ T3795] usb usb4-port1: attempt power cycle [ 2463.892697][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2463.901373][ T9549] usb 5-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 2463.916901][ T9549] usb 5-1: config 0 has no interface number 0 [ 2463.924257][ T9549] usb 5-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2463.939068][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2463.951169][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.963969][ T9549] usb 5-1: config 0 descriptor?? 19:09:16 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="628c7da770c6b417ed4bfb40dec5b26b5dbf8ca12b293809c271d6da297a85927b135df83a8a5f2470a093f13068c81fcba2"], 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x25}, &(0x7f00000000c0)=0x0) timer_getoverrun(r2) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2464.214394][ T9549] usb 5-1: USB disconnect, device number 33 [ 2464.572508][ T3795] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2464.663246][ T3795] usb 4-1: Invalid ep0 maxpacket: 31 19:09:16 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001001000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6bde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:16 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x5, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b71, 0x0) 19:09:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b72, 0x0) 19:09:17 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7f, 0x80000) [ 2464.794606][ T5087] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2464.845194][ T5088] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4bfa, 0x0) 19:09:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4bfb, 0x0) 19:09:17 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/11) [ 2464.956811][ T5088] 8021q: adding VLAN 0 to HW filter on device bond526 19:09:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4c01, 0x0) [ 2465.045709][ T9549] usb 1-1: new high-speed USB device number 3 using dummy_hcd 19:09:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5206, 0x0) [ 2465.141987][ T5092] bond526: (slave veth2179): Enslaving as an active interface with a down link [ 2465.154427][ T5093] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2465.219095][ T5116] bond526: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2465.297785][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2465.332541][T30860] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2465.343975][ T3795] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2465.356591][ T5092] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2465.409621][ T5092] bond526: (slave veth2181): Enslaving as an active interface with a down link [ 2465.423960][ T9549] usb 1-1: config 0 has no interfaces? [ 2465.433070][ T3795] usb 4-1: Using ep0 maxpacket: 8 [ 2465.442405][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2465.451857][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.477687][ T9549] usb 1-1: config 0 descriptor?? [ 2465.563043][ T3795] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2465.571538][ T3795] usb 4-1: config 0 has no interface number 0 [ 2465.580869][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2465.586493][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2465.600202][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2465.613738][ T3795] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2465.628282][ T3795] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2465.638756][ T3795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.653843][ T3795] usb 4-1: config 0 descriptor?? [ 2465.674311][ T5091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2465.702652][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2465.711036][T30860] usb 5-1: config 0 has no interface number 0 [ 2465.718149][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2465.731424][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2465.743819][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2465.750461][T13690] usb 1-1: USB disconnect, device number 3 [ 2465.766030][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2465.786420][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.812671][T30860] usb 5-1: config 0 descriptor?? [ 2465.833975][ T5143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2465.854929][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input874 [ 2465.922549][ T3795] usb 4-1: string descriptor 0 read error: -71 [ 2465.948974][ T3795] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input875 [ 2465.975898][ T3795] usb 4-1: USB disconnect, device number 72 [ 2466.079203][ T9549] usb 5-1: USB disconnect, device number 34 [ 2466.552385][T13690] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2466.812815][T13690] usb 1-1: Using ep0 maxpacket: 8 [ 2466.817984][ T2574] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2466.922977][ T9549] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2466.933642][T13690] usb 1-1: config 0 has no interfaces? [ 2466.939799][T13690] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2466.951185][T13690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.961067][T13690] usb 1-1: config 0 descriptor?? [ 2467.094168][ T2574] usb 4-1: Using ep0 maxpacket: 8 [ 2467.162377][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2467.207690][T30860] usb 1-1: USB disconnect, device number 4 [ 2467.223013][ T2574] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2467.231238][ T2574] usb 4-1: config 0 has no interface number 0 [ 2467.259163][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2467.273835][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2467.282945][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2467.287902][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2467.299724][ T9549] usb 5-1: config 0 has no interface number 0 [ 2467.307452][ T2574] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2467.317025][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2467.334273][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2467.343086][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.346157][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2467.366390][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2467.368658][ T2574] usb 4-1: config 0 descriptor?? [ 2467.395437][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.415930][ T5091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2467.419922][ T9549] usb 5-1: config 0 descriptor?? [ 2467.453506][ T5143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2467.474627][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input876 [ 2467.681950][ T9549] usb 5-1: USB disconnect, device number 35 [ 2467.682149][ C1] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2467.713641][ T2574] usb 4-1: string descriptor 0 read error: -71 [ 2467.721897][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input877 19:09:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5409, 0x0) 19:09:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:20 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x6, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:20 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$invalidate(0x15, r1) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:20 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0xa01) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2467.820498][ T5256] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2467.855657][ T2574] usb 4-1: USB disconnect, device number 73 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540b, 0x0) [ 2467.941398][ T5256] 8021q: adding VLAN 0 to HW filter on device bond527 [ 2467.956663][ T5261] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540c, 0x0) 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540d, 0x0) [ 2468.123240][T13690] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2468.148842][ T5267] bond527: (slave veth2183): Enslaving as an active interface with a down link 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540e, 0x0) [ 2468.205897][ T5281] bond527: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x540f, 0x0) [ 2468.342495][ T9549] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2468.344003][ T5310] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5410, 0x0) [ 2468.386580][T13690] usb 1-1: Using ep0 maxpacket: 8 [ 2468.397100][ T5256] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5412, 0x0) 19:09:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6cde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2468.442203][ T2574] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2468.480669][ T5338] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2468.505452][ T5342] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2468.518389][T13690] usb 1-1: config 0 has no interfaces? [ 2468.526715][T13690] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2468.552708][T13690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.567652][T13690] usb 1-1: config 0 descriptor?? [ 2468.602533][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2468.615831][ T5342] 8021q: adding VLAN 0 to HW filter on device bond528 [ 2468.626481][ T5343] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2468.707969][ T2574] usb 4-1: Using ep0 maxpacket: 8 [ 2468.722625][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2468.730976][ T9549] usb 5-1: config 0 has no interface number 0 [ 2468.740433][ T5344] bond528: (slave veth2185): Enslaving as an active interface with a down link [ 2468.750621][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2468.787870][ T5381] bond528: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2468.805359][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2468.825403][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2468.837162][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2468.860502][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.873071][ T2574] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2468.881192][ T2574] usb 4-1: config 0 has no interface number 0 [ 2468.900157][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2468.906691][ T9549] usb 5-1: config 0 descriptor?? [ 2468.925958][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2468.954670][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2468.960551][ T3795] usb 1-1: USB disconnect, device number 5 [ 2468.979984][ T5272] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2468.981505][ T2574] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2468.995940][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input878 [ 2469.036168][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2469.069204][ T2574] usb 4-1: config 0 descriptor?? [ 2469.094015][ T5269] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2469.119220][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input879 [ 2469.136701][ T5342] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2469.209483][ T2574] usb 5-1: USB disconnect, device number 36 [ 2469.212035][ C0] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2469.498076][T13690] usb 4-1: USB disconnect, device number 74 [ 2469.642235][ T3795] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2469.882103][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2470.002565][ T3795] usb 1-1: config 0 has no interfaces? [ 2470.008113][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2470.034436][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.043985][ T3795] usb 1-1: config 0 descriptor?? [ 2470.102639][T30860] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2470.282017][ T9549] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2470.301422][ T2574] usb 1-1: USB disconnect, device number 6 19:09:22 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x7, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2470.342222][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2470.462113][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2470.470456][T30860] usb 5-1: config 0 has no interface number 0 [ 2470.478655][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2470.490550][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2470.503152][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2470.516131][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2470.526334][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.535749][ T9549] usb 4-1: Using ep0 maxpacket: 8 [ 2470.546490][T30860] usb 5-1: config 0 descriptor?? [ 2470.563441][ T5272] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2470.584416][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input880 [ 2470.652911][ T9549] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2470.661036][ T9549] usb 4-1: config 0 has no interface number 0 [ 2470.683355][ T9549] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2470.711914][ T9549] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2470.727695][ T9549] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2470.761044][ T9549] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2470.772808][ T2574] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2470.776921][ T9549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.789530][ T9549] usb 4-1: config 0 descriptor?? [ 2470.805256][T13690] usb 5-1: USB disconnect, device number 37 [ 2470.845070][ T5269] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2470.884393][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input881 19:09:23 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da3a08ab32a190eb09000000010902240001000000000904410002ff5d010009050f1f01000000000905a395f3abb9e1b57aa2b5384a5d16d468471665bf8ffe9366ae161605fac0e39cf976575d447546dcee7f7fbad05dd50c4cf248206d143fd5f0ab607bd80c75c407008230cd1b55278449d01ed516d74da32a56ec54d1d88a56bb38ed5e67ef1b98558be60d49549465b6aae48b6377821a6f2ae57dfed65d791c340a4ef4f7a59e8786e9913a8a4f793c8cab5cbe2c47d46b6db0182cdfc759f4de7deb9e134a0beb89713cc314452f1f00c227c0780f0449eec04d910000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5413, 0x0) 19:09:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010081000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6dde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2470.953253][ T23] usb 4-1: USB disconnect, device number 75 [ 2471.022211][ T5489] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2471.052082][ T2574] usb 1-1: Using ep0 maxpacket: 8 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5414, 0x0) 19:09:23 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xa, 0x35a401) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f00000002c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a5d0cb6b1427c95fb08a9b5ec12bf5de58aeef", @ANYRES16=r1, @ANYBLOB="01002ebdf927bd7000fbdbdf2501000000080001000300000008000200010000000cc90b800504030005000000080002000200000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6a19119ba4295bc2b02a0b00dc73b8fe70da3f", @ANYRES16=r1, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b00193f6e2b82a65ef26278126c67a7f1b5b0249f7d19ff6a5e4c1345e9db30000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000ffdbdf250200000008000200020000000800010003000000100008800c00078008000600730000000800010002000000180008801400078008000500ff03000008000300b300000008000100030000002c00048005000300070000000500000000050003000000000005000300060000000500030807000000080002000100000008000100010000000800020001000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0f298c9000042c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x174, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f2ac61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fe1a49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2722bcae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e72078b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35de492}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54e79a78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x741f193b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a265422}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x453c1152}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d7e50d1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682b4eac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54586a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44fa20f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e6e90f7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79dbba89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70173c8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f6df08d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x703d15b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x454dfd40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc640373}]}, {0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="04002bbd7000fedbdf250400000004000c80c80008802c000780080006000f000000080700001a91c9290800050008f1f42908000500006cfb47080005004cb1480d24000780080005008038c90f0800060051000000080005007e9ed36508000600f00000003c00078008000500dc258a4808000600130000009f7a461fd17808000500b24ca30d080006009300000008000500fc59247b080005001953ac2e08000600a0000000240007800800060015000000eaa4a608000600850000000800050006bea64a080006006f00000014000780080006006e00000008000500c6"], 0xe0}, 0x1, 0x0, 0x0, 0x40028891}, 0x20014840) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbdf250100000064000c80090000000000000096040000080009000233785808498a00e10009fcb8ae3434080008000a00eb7e000008000900b329084208000900c434914124000b80080009005a14281508000900ff36a71009000900712d7b6f080009002616ec7308000200"], 0x80}, 0x1, 0x0, 0x0, 0x20040804}, 0x60040001) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x7fffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7908ad}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4433}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcb1ec5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ecf}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a7fd3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dc978ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e048aaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc0, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1457d5e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9258}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4065337b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d31cd73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc71d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x3}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8001}, 0xc880) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5415, 0x0) [ 2471.193937][ T2574] usb 1-1: config 0 has no interfaces? [ 2471.199870][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2471.222174][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2471.238303][ T2574] usb 1-1: config 0 descriptor?? [ 2471.251638][ T5489] 8021q: adding VLAN 0 to HW filter on device bond529 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5416, 0x0) [ 2471.319919][ T5490] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5418, 0x0) [ 2471.410866][ T5498] bond529: (slave veth2187): Enslaving as an active interface with a down link 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541b, 0x0) [ 2471.451382][ T5507] bond529: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2471.492506][ T23] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2471.493482][ T9549] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2471.526769][ T3795] usb 1-1: USB disconnect, device number 7 19:09:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541c, 0x0) [ 2471.705803][ T5548] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2471.746363][ T5498] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2471.755649][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 2471.764409][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2471.882081][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2471.883364][ T23] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2471.890220][ T9549] usb 5-1: config 0 has no interface number 0 [ 2471.899300][ T23] usb 4-1: config 0 has no interface number 0 [ 2471.911227][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2471.919164][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2471.924750][ T23] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 2471.945871][ T23] usb 4-1: New USB device found, idVendor=32ab, idProduct=90a1, bcdDevice= 9.eb [ 2471.948368][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2471.955483][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2471.972856][ T23] usb 4-1: config 0 descriptor?? [ 2471.985434][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2471.998632][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2472.017351][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.036414][ T9549] usb 5-1: config 0 descriptor?? [ 2472.072365][ T5538] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2472.104219][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input882 [ 2472.246941][ T9549] usb 4-1: USB disconnect, device number 76 [ 2472.298513][ T5538] device lo entered promiscuous mode [ 2472.331854][T30860] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2472.393970][ T5590] Y­4`Ò˜: renamed from lo [ 2472.440921][ T6153] usb 5-1: USB disconnect, device number 38 [ 2472.581935][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2472.704001][T30860] usb 1-1: config 0 has no interfaces? [ 2472.709545][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2472.719269][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.734457][T30860] usb 1-1: config 0 descriptor?? 19:09:25 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x8, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2472.977854][ T6153] usb 1-1: USB disconnect, device number 8 [ 2473.142211][T30860] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2473.292422][ T2574] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2473.382893][T30860] usb 4-1: Using ep0 maxpacket: 8 [ 2473.441844][ T6153] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2473.504563][T30860] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2473.514936][T30860] usb 4-1: config 0 has no interface number 0 [ 2473.521042][T30860] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2473.533081][T30860] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 2473.544518][T30860] usb 4-1: New USB device found, idVendor=32ab, idProduct=90a1, bcdDevice= 9.eb [ 2473.553981][T30860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.563499][T30860] usb 4-1: config 0 descriptor?? [ 2473.578113][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 2473.681731][ T6153] usb 1-1: Using ep0 maxpacket: 8 [ 2473.722678][ T2574] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2473.730803][ T2574] usb 5-1: config 0 has no interface number 0 [ 2473.738940][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2473.756654][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2473.768508][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2473.780585][ T2574] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2473.791124][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.802910][ T6153] usb 1-1: config 0 has no interfaces? [ 2473.808064][ T2574] usb 5-1: config 0 descriptor?? [ 2473.814309][ T6153] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2473.815969][ T2612] usb 4-1: USB disconnect, device number 77 [ 2473.833826][ T5538] raw-gadget gadget: fail, usb_ep_enable returned -22 19:09:26 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="125511f314da2108ab1280000000000000006c19080000000000000009050f1f010000000009058303000e0000eeffffffffffffff000000d4d783f5a672596b68fda398bca02536c2ec8282650a55598d2a32ff4a436a7abb348830b135699e7ffd07b4d855a471413b0654ad8c9efd92a58301d4b8d60cf6fd5a522a5737755152707d5148e5e4762a44de9b54fddbed1548fa5eb25390f0f55f390ee417519a7abfbef9ac3b9ad6d04dc0c2059891c74448eba5"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0xfffb, 0x4) 19:09:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541d, 0x0) 19:09:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6e000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2473.866843][ T6153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.874330][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input883 [ 2473.900249][ T6153] usb 1-1: config 0 descriptor?? [ 2473.957083][ T5646] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541e, 0x0) [ 2474.039252][ T5647] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2474.066965][ T6153] usb 5-1: USB disconnect, device number 39 [ 2474.140407][ T5647] 8021q: adding VLAN 0 to HW filter on device bond530 [ 2474.206998][ T9549] usb 1-1: USB disconnect, device number 9 [ 2474.305414][ T5653] bond530: (slave veth2189): Enslaving as an active interface with a down link [ 2474.326697][ T5654] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x541e, 0x0) 19:09:26 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x400500) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010be6000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2474.362587][ T2612] usb 4-1: new high-speed USB device number 78 using dummy_hcd 19:09:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5421, 0x0) [ 2474.419677][ T5660] bond530: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:09:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5422, 0x0) 19:09:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5423, 0x0) [ 2474.587946][ T5713] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2474.616383][ T5660] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2474.640582][ T5722] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2474.660278][ T2612] usb 4-1: device descriptor read/64, error 18 [ 2474.750788][ T23] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2474.992273][T30860] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2475.011657][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 2475.092786][ T2612] usb 4-1: device descriptor read/64, error 18 [ 2475.141728][ T23] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2475.149841][ T23] usb 5-1: config 0 has no interface number 0 [ 2475.156808][ T23] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2475.169766][ T23] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2475.183213][ T23] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2475.196330][ T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2475.206708][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.222333][ T23] usb 5-1: config 0 descriptor?? [ 2475.231549][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2475.242031][ T5711] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2475.263817][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input884 [ 2475.361509][ T2612] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2475.365118][T30860] usb 1-1: config 0 has no interfaces? [ 2475.391200][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2475.409068][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.431682][T30860] usb 1-1: config 0 descriptor?? [ 2475.470210][ T6153] usb 5-1: USB disconnect, device number 40 [ 2475.662017][ T2612] usb 4-1: device descriptor read/64, error 18 [ 2475.678791][T30860] usb 1-1: USB disconnect, device number 10 19:09:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6e020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2475.737002][ T5758] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2475.786568][ T5758] 8021q: adding VLAN 0 to HW filter on device bond531 [ 2475.842780][ T5793] bond531: (slave veth2191): Enslaving as an active interface with a down link [ 2475.875601][ T5758] bond531: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2476.045245][ T5793] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2476.101690][ T2612] usb 4-1: device descriptor read/64, error 18 [ 2476.106555][ T5802] bond531: (slave veth2193): Enslaving as an active interface with a down link [ 2476.222771][ T2612] usb usb4-port1: attempt power cycle [ 2476.331527][T30860] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2476.571971][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2476.691770][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2476.699880][T30860] usb 5-1: config 0 has no interface number 0 [ 2476.709008][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2476.721553][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2476.734175][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2476.746832][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2476.757218][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.770914][T30860] usb 5-1: config 0 descriptor?? [ 2476.792824][ T5711] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2476.813812][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input885 [ 2476.944630][ T2612] usb 4-1: new high-speed USB device number 80 using dummy_hcd 19:09:29 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x300, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5424, 0x0) 19:09:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6e030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2477.042122][ T2574] usb 5-1: USB disconnect, device number 41 [ 2477.054670][ T5826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:29 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000001980)={&(0x7f0000001800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000140)}, {&(0x7f0000001880)=""/15, 0xf}], 0x2, &(0x7f0000001900)=""/127, 0x7f}, 0x12000) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000180)={0x4, [[0x60, 0x0, 0x1, 0x0, 0x8, 0x0, 0x2, 0xffffffff], [0x3, 0x4a51, 0x0, 0x53, 0xfffffffd, 0x80000001, 0xfffffffa, 0x1ff], [0x4, 0x830, 0x4, 0x2, 0xee89, 0x0, 0x60f, 0x10000]], [], [{0x200, 0xfff, 0x1, 0x0, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xff, 0x1}, {0xffffffff, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x10000, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x2800, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x8, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x0, 0x1}, {0xbdd, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x7, 0xb90, 0x1, 0x1, 0x0, 0x1}], [], 0x7fffffff}) sendmmsg$sock(r1, &(0x7f0000001680)=[{{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="cd4b21db80f20255f9f364dfb72517c7481482d7fa69c5f175b4d4c842fcb030a98ac43bf0074b5b0e134c5ea5c03af7df100754d915de20f187f089447410aa220db175a96c8c2aafc55296406e0da4f4ebe8b371b820ef7f3f4de943a4dff20b3f7f4e3f38355a5543760cf75a1e94856eb44b38374a536df27f5c5482d7410758ede106627056e33a2b9fc0ebed68f21dbe1aefcd0e274619449425e087ae5dc4edaa5f79b1baa4441250a4ee43fbe61e", 0xb2}, {&(0x7f0000000540)="49365a33e3c6e6ba776fe166eaff1cd104cd59364439b3a597e73fb63da0c0b183f1337be3ec16d55c01f6c029621ea9efa4d344c9c7c49b7c26853632d8ba68732a67fe1c57da225ca2248709fd561317f257f5484a194798", 0x59}, {&(0x7f00000005c0)="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", 0x1000}], 0x3, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xb16}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2b61}}, @mark={{0x14, 0x1, 0x24, 0xf2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}], 0xc0}}], 0x1, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='o\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012cbd7000fbdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x80, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x48080) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2477.092350][ T2612] usb 4-1: device descriptor read/8, error -71 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5425, 0x0) 19:09:29 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000800904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5427, 0x0) 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5428, 0x0) 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5429, 0x0) [ 2477.290735][ T5826] 8021q: adding VLAN 0 to HW filter on device bond532 [ 2477.322656][ T2612] usb 4-1: device descriptor read/8, error -71 [ 2477.330164][ T5828] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5437, 0x0) [ 2477.383140][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd 19:09:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5441, 0x0) [ 2477.505111][ T5834] bond532: (slave veth2195): Enslaving as an active interface with a down link [ 2477.539147][ T5845] bond532: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2477.631550][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 2477.655795][ T5893] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2477.705981][ T5826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2477.750875][ T5834] bond532: (slave veth2197): Enslaving as an active interface with a down link [ 2477.767815][ T23] usb 1-1: config 0 has no interfaces? [ 2477.774904][ T2574] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2477.783440][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2477.795655][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2477.810303][ T23] usb 1-1: config 0 descriptor?? [ 2477.817296][ T2612] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2478.031872][ T2612] usb 4-1: device descriptor read/8, error -61 [ 2478.042496][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 2478.078841][ T23] usb 1-1: USB disconnect, device number 11 [ 2478.182398][ T2574] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2478.191794][ T2574] usb 5-1: config 0 has no interface number 0 [ 2478.197919][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2478.209427][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2478.222686][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2478.236741][ T2574] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2478.246271][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2478.263269][ T2574] usb 5-1: config 0 descriptor?? [ 2478.283124][ T5888] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2478.304171][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input886 [ 2478.334710][ T2612] usb 4-1: device descriptor read/8, error -61 [ 2478.462885][ T2612] usb usb4-port1: unable to enumerate USB device [ 2478.522423][T30860] usb 5-1: USB disconnect, device number 42 [ 2478.851882][ T9549] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2479.091346][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2479.211972][ T9549] usb 1-1: config 0 has no interfaces? [ 2479.217706][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2479.227811][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.242485][ T9549] usb 1-1: config 0 descriptor?? [ 2479.391282][T30860] usb 5-1: new high-speed USB device number 43 using dummy_hcd 19:09:31 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x500, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5450, 0x0) 19:09:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6ede0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2479.487220][ T2612] usb 1-1: USB disconnect, device number 12 [ 2479.570790][ T5959] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2479.631447][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2479.663615][ T5959] 8021q: adding VLAN 0 to HW filter on device bond533 [ 2479.675879][ T5958] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2479.742949][ T5966] bond533: (slave veth2199): Enslaving as an active interface with a down link [ 2479.751405][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2479.760233][T30860] usb 5-1: config 0 has no interface number 0 [ 2479.773093][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2479.785903][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2479.798123][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2479.820099][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2479.830043][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.846661][T30860] usb 5-1: config 0 descriptor?? [ 2479.882657][ T5888] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2479.898750][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input887 [ 2479.906527][ T5997] bond533: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2480.011081][ T2612] usb 1-1: new high-speed USB device number 13 using dummy_hcd 19:09:32 executing program 3: r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x80000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x2, 0x7, {0x7, 0x22, "70bdf1db0a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x5, 0x8d, "ed844075d16a2cc19ab80625e37450882872cde7d6510e809389fff76e5e77f1951e1b55b15c85e642a3f068dc71dddaf4f01b7456b162b3eb15b4543f236b2453d42e76164a199ecee9c408874cba830ed03b9c6080d12ca6b44df7ade5c52d727376770636fcb1fbf7e47c9641bef1bf83a57efbe23b1aa5d8e33c1475f1ad715ca6c55d71f378f61d2cfa04"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x23}}) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) 19:09:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5451, 0x0) [ 2480.138187][T30860] usb 5-1: USB disconnect, device number 43 19:09:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5452, 0x0) 19:09:32 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) read$FUSE(r0, &(0x7f0000000180), 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d08, &(0x7f0000000080)=0x15) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010003400000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2480.267022][ T5998] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2480.281872][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2480.304607][ T5959] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x545d, 0x0) [ 2480.377968][ T5966] bond533: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2480.415264][ T2612] usb 1-1: config 0 has no interfaces? [ 2480.429944][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2480.461156][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.492723][ T2612] usb 1-1: config 0 descriptor?? 19:09:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5460, 0x0) 19:09:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5501, 0x0) [ 2480.646717][ T6045] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2480.693123][ T6057] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2480.761587][T30860] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2480.770542][ T9549] usb 1-1: USB disconnect, device number 13 [ 2481.002347][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2481.121416][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2481.129780][T30860] usb 5-1: config 0 has no interface number 0 [ 2481.137333][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2481.151054][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2481.162995][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2481.176464][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2481.186518][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.199813][T30860] usb 5-1: config 0 descriptor?? [ 2481.222775][ T6040] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2481.243681][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input888 [ 2481.449503][ T6153] usb 5-1: USB disconnect, device number 44 [ 2481.553389][ T2612] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2481.833418][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2481.951870][ T2612] usb 1-1: config 0 has no interfaces? [ 2481.957446][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2481.968048][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.977804][ T2612] usb 1-1: config 0 descriptor?? 19:09:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x600, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5509, 0x0) 19:09:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6fde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f000000050000000002000001fffff00000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:34 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000d5ff7310d1f15ff1cab1a4010902240001000000000904410002ff5d010009050f1f"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2482.238510][T30860] usb 1-1: USB disconnect, device number 14 [ 2482.293822][ T6100] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2482.303912][ T6153] usb 5-1: new high-speed USB device number 45 using dummy_hcd 19:09:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5600, 0x0) [ 2482.339543][ T6101] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5601, 0x0) [ 2482.467425][ T6101] 8021q: adding VLAN 0 to HW filter on device bond534 [ 2482.550879][ T6153] usb 5-1: Using ep0 maxpacket: 8 [ 2482.556369][ T6113] bond534: (slave veth2201): Enslaving as an active interface with a down link [ 2482.568524][ T6114] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2482.598686][ T6129] bond534: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2482.614799][ T9549] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2482.672790][ T6153] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2482.686400][ T6153] usb 5-1: config 0 has no interface number 0 [ 2482.700054][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2482.715032][T30860] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2482.725159][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2482.749134][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2482.762762][ T6153] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2482.772958][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.787508][ T6153] usb 5-1: config 0 descriptor?? [ 2482.804543][ T6101] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2482.815186][ T6040] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2482.833241][ T6153] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input889 [ 2482.880804][ T9549] usb 4-1: Using ep0 maxpacket: 8 [ 2482.921710][ T9549] usb 4-1: too many configurations: 213, using maximum allowed: 8 [ 2482.934606][ T6101] bond534: (slave veth2203): Enslaving as an active interface with a down link [ 2482.970914][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2483.020141][ T6113] bond534: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2483.041412][ T9549] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2483.055786][ T9549] usb 4-1: can't read configurations, error -61 [ 2483.081903][ T6153] usb 5-1: USB disconnect, device number 45 [ 2483.094984][T30860] usb 1-1: config 0 has no interfaces? [ 2483.100603][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2483.130414][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:09:35 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e3c71ffedb52e4d27c2135bb88377e0d28635aac789aa711626eda1bd84dc3b7b7ece6307f2c4634575cf20445b998cc61d890756c69b296d6b7bf03fbaa5a71fe926a6b2edec2ee6ee0aa771f83bbc772e6d4f0917f95b71cc97cf4748637a9d"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x600) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d04c304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0xf9, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x20, 0x18, &(0x7f0000000100)=""/24) [ 2483.173875][T30860] usb 1-1: config 0 descriptor?? 19:09:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5602, 0x0) 19:09:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2483.231489][ T9549] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2483.272747][ T6188] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5603, 0x0) 19:09:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x70de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2483.356656][ T6203] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2483.388499][ T6206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2483.418689][ T6206] 8021q: adding VLAN 0 to HW filter on device bond535 [ 2483.466650][ T2574] usb 1-1: USB disconnect, device number 15 [ 2483.470804][ T9549] usb 4-1: Using ep0 maxpacket: 8 [ 2483.511724][ T9549] usb 4-1: too many configurations: 213, using maximum allowed: 8 [ 2483.558248][ T6206] bond535: (slave veth2205): Enslaving as an active interface with a down link [ 2483.585726][ T6240] bond535: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2483.645768][ T9549] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2483.667669][ T9549] usb 4-1: can't read configurations, error -61 [ 2483.676140][ T9549] usb usb4-port1: attempt power cycle [ 2483.700846][ T6153] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2483.764168][ T6240] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2483.813486][ T6240] bond535: (slave veth2207): Enslaving as an active interface with a down link [ 2483.940763][ T6153] usb 5-1: Using ep0 maxpacket: 8 [ 2484.060869][ T6153] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2484.068980][ T6153] usb 5-1: config 0 has no interface number 0 [ 2484.076493][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2484.088456][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 60, changing to 9 [ 2484.102711][ T6153] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2484.115631][ T6153] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2484.125439][ T6153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2484.139921][ T6153] usb 5-1: config 0 descriptor?? [ 2484.161017][ T6199] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2484.187898][ T6153] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input890 [ 2484.290743][ T3795] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2484.396786][ T6199] udc-core: couldn't find an available UDC or it's busy [ 2484.400695][ T9549] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2484.410114][ T6199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2484.433450][T30860] usb 5-1: USB disconnect, device number 46 [ 2484.440677][ C1] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2484.501242][ T9549] usb 4-1: Using ep0 maxpacket: 8 [ 2484.540924][ T9549] usb 4-1: too many configurations: 213, using maximum allowed: 8 [ 2484.549452][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2484.672023][ T3795] usb 1-1: config 0 has no interfaces? [ 2484.677598][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2484.686914][ T9549] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2484.695750][ T9549] usb 4-1: can't read configurations, error -61 [ 2484.702587][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2484.716014][ T3795] usb 1-1: config 0 descriptor?? [ 2484.861692][ T9549] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2484.960807][ T9549] usb 4-1: Using ep0 maxpacket: 8 [ 2484.968559][ T2574] usb 1-1: USB disconnect, device number 16 19:09:37 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x700, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5605, 0x0) 19:09:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x71de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2485.001374][ T9549] usb 4-1: too many configurations: 213, using maximum allowed: 8 [ 2485.075475][ T6297] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2485.107569][ T6299] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2485.121028][ T9549] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2485.128625][ T9549] usb 4-1: can't read configurations, error -61 [ 2485.139413][ T9549] usb usb4-port1: unable to enumerate USB device [ 2485.171508][ T6299] 8021q: adding VLAN 0 to HW filter on device bond536 [ 2485.223658][ T6307] bond536: (slave veth2209): Enslaving as an active interface with a down link [ 2485.233077][ T6305] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2485.279949][ T6340] bond536: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2485.296527][ T9549] usb 5-1: new high-speed USB device number 47 using dummy_hcd 19:09:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5607, 0x0) 19:09:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:37 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x0, 0x2, 0x0, 0x4}}, 0x26) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2485.487474][ T6351] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2485.497345][ T2574] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2485.539118][ T6307] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2485.540837][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2485.600302][ T6307] bond536: (slave veth2211): Enslaving as an active interface with a down link [ 2485.614680][ T6359] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2485.670822][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2485.679448][ T9549] usb 5-1: config 0 has no interface number 0 [ 2485.686554][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2485.697618][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 60, changing to 9 [ 2485.709654][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2485.721662][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2485.731661][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2485.745347][ T9549] usb 5-1: config 0 descriptor?? [ 2485.772075][ T6199] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2485.792910][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input891 [ 2485.793846][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2485.823139][ T23] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2485.981660][ T2574] usb 1-1: config 0 has no interfaces? [ 2485.987203][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2485.998018][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2486.011171][ T2574] usb 1-1: config 0 descriptor?? [ 2486.040986][ T2612] usb 5-1: USB disconnect, device number 47 19:09:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5608, 0x0) 19:09:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x72010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:38 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0x258, 0x1a8, 0x348, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x2, 0x0, 0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x8}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x62, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0x0, 'vlan0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x4}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x3, @ipv6=@local, 0x4e20}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x7}}, @common=@ah={{0x30, 'ah\x00'}, {[0x101, 0x8000]}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @remote, 0x0, 0xff, 'ip6erspan0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x6, 0x2, 0x42}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1, 0x9}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x6, 0x0, 0x1, 0x4], 0x2, 0x1}, {0x0, [0x3, 0x7, 0x2, 0x4, 0x2, 0x4], 0x4, 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x40, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) sendto$packet(r3, &(0x7f0000000680), 0x0, 0x800, &(0x7f00000006c0)={0x11, 0x1, r6, 0x1, 0x40, 0x6, @broadcast}, 0x14) [ 2486.156255][ T6395] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2486.165505][ T23] usb 4-1: device descriptor read/64, error 18 19:09:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5609, 0x0) [ 2486.246234][ T6395] 8021q: adding VLAN 0 to HW filter on device bond537 [ 2486.257175][ T6397] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2486.284519][ T3795] usb 1-1: USB disconnect, device number 17 [ 2486.379462][ T6402] bond537: (slave veth2213): Enslaving as an active interface with a down link [ 2486.419158][ T6395] bond537: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2486.506141][ T6445] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2486.555770][ T6395] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2486.571327][ T2612] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2486.590727][ T23] usb 4-1: device descriptor read/64, error 18 [ 2486.617952][ T6395] bond537: (slave veth2215): Enslaving as an active interface with a down link [ 2486.890575][ T2612] usb 5-1: device descriptor read/64, error 18 [ 2486.896886][ T23] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2487.050584][ T3795] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2487.180680][ T23] usb 4-1: device descriptor read/64, error 18 [ 2487.290858][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2487.312499][ T2612] usb 5-1: device descriptor read/64, error 18 [ 2487.410529][ T3795] usb 1-1: config 0 has no interfaces? [ 2487.416187][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2487.432666][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2487.443908][ T3795] usb 1-1: config 0 descriptor?? [ 2487.590450][ T23] usb 4-1: device descriptor read/64, error 18 [ 2487.596692][ T2612] usb 5-1: new high-speed USB device number 49 using dummy_hcd 19:09:39 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0xff00, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560a, 0x0) 19:09:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x72030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2487.683415][ T2574] usb 1-1: USB disconnect, device number 18 [ 2487.710897][ T23] usb usb4-port1: attempt power cycle [ 2487.740081][ T6470] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560b, 0x0) 19:09:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560c, 0x0) [ 2487.826786][ T6470] 8021q: adding VLAN 0 to HW filter on device bond538 [ 2487.842420][ T6471] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2487.900742][ T2612] usb 5-1: device descriptor read/64, error 18 [ 2487.958561][ T6476] bond538: (slave veth2217): Enslaving as an active interface with a down link [ 2487.996688][ T6470] bond538: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2488.098134][ T6516] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2488.144577][ T6525] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2488.187158][ T6470] bond538: (slave veth2219): Enslaving as an active interface with a down link [ 2488.217853][ T6470] bond538: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2488.246074][ T2574] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2488.326450][ T2612] usb 5-1: device descriptor read/64, error 18 19:09:40 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x36377924, 0x90940) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[&(0x7f0000000180)="332f9c49b7b69202cdfe39201f00fde65142fa580ce92e9b5cad3f8a31d67c9b17655e1c7ccb75ce457845b4bb92a95a84ea1dc1fc89af63ca6c52995ffe3c700c12fe52b8841fdd4684183657ebe6e6ce1c5b56ec551459388d2f4838b62c30bf9cac78c200b87a9c90a6a64aa3728043d79054a8661a6a04120895df95087ee56627d3f2a44ec4e524e9d28473b08a9a576aef2da8b054f4635d49481fa669c9eb57eef7c313cd3a2fbfee3f65e2f08225f01b508046ffd6f21c6252a5159c8fe8ba2e30e3832650ffba2cd20f473bd11b4bc6c4bcdf", &(0x7f0000000280)="893f3ac6a832c9439c553e8b05871bc3d2e266f6de04e13be8d3d332d21f1cf97d0f258cb25ab2bb0ad16118832068c0fefca9b902669015dccf8627bac594030f92cd201fac3b44ed1bb4a066dbcd486f894a4c6665d4510bb2e89b6a5cb4d0a0f905de38c96273f111faee1953fa8a18c7dc80307e377bc807a35c32562a5a6a94ef3e03c0022f975e48c19726e0355c4dc31d4ec6ce20dcaf9187da85487e9e1073d5e9c23454eae90e16f025ddb3d8ac1db2520c6238eea3a2360e2142a4bd0a8300c201c9ecbc7f186c754271268f85722e1fdbb3661c7d201cc3d06b", &(0x7f0000000380)="6c6e9e5ed85b8689d71df6d18d4565202f2a465d0a45ae37a136239680dbc08b22892c03787f02d09f69a9f132bff2b49c96559f2d8f3fc3c69892de7ddca7d1c87b468e782899e3919e920a2a1ebf6dc02ebf273875fb4727259419ff0ce1b11608c6071ab89a552266ea7b9aca3af3108c88e744e22d446b7d48d7d2cbfa24aa99837ff9a617e2cc95c27b014040223842cf30a9870affdcd680d27b6176cace755763add4c47fbd365fff54637b8a94ed255402fd87a348765df3d320c08e2440b9662c2d3c587b075520fd8d335aa21c306dad5215e772bd79bb91304c37ab5a225f1f618ba727c2"]}) 19:09:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560d, 0x0) 19:09:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000000600100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x72de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2488.450742][ T23] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2488.459624][ T2612] usb usb5-port1: attempt power cycle [ 2488.472265][ T6541] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2488.500355][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2488.537787][ T6541] 8021q: adding VLAN 0 to HW filter on device bond539 [ 2488.558799][ T6540] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2488.621924][ T6562] bond539: (slave veth2221): Enslaving as an active interface with a down link [ 2488.632834][ T2574] usb 1-1: config 0 has no interfaces? [ 2488.638349][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2488.647506][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2488.657745][ T2574] usb 1-1: config 0 descriptor?? [ 2488.702352][ T6541] bond539: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2488.801904][ T6581] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2488.856118][ T6541] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2488.887441][ T6541] bond539: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2488.904901][ T4569] usb 1-1: USB disconnect, device number 19 [ 2488.970418][ T23] usb 4-1: device not accepting address 88, error -71 19:09:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x6, r1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffff292, 0x0) 19:09:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560e, 0x0) [ 2489.220861][ T2612] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2489.370304][ T23] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2489.461406][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 2489.600885][ T23] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2489.609540][ T23] usb 4-1: config 0 has no interface number 0 [ 2489.618573][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2489.629788][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2489.642565][ T23] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2489.655009][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2489.665640][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.680467][ T3795] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2489.686848][ T23] usb 4-1: config 0 descriptor?? [ 2489.710360][ T2612] usb 5-1: device not accepting address 50, error -71 [ 2489.732444][ T6543] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2489.752636][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input892 [ 2489.930223][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2489.973947][ T2574] usb 4-1: USB disconnect, device number 89 [ 2489.980192][ C0] xpad 4-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2490.050397][ T3795] usb 1-1: config 0 has no interfaces? [ 2490.056610][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2490.067364][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.079596][ T3795] usb 1-1: config 0 descriptor?? [ 2490.094451][ T2612] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2490.224080][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2490.326475][ T23] usb 1-1: USB disconnect, device number 20 [ 2490.360472][ T2612] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 19:09:42 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x73de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x560f, 0x0) [ 2490.372433][ T2612] usb 5-1: config 0 has no interface number 0 [ 2490.403160][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2490.428069][ T6659] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x6364, 0x0) [ 2490.448549][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2490.448772][ T6658] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2490.473414][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2490.487716][ T2612] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2490.498093][ T2612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.516040][ T2612] usb 5-1: config 0 descriptor?? [ 2490.541918][ T6607] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2490.562319][ T2612] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input893 19:09:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8912, 0x0) [ 2490.626333][ T6658] 8021q: adding VLAN 0 to HW filter on device bond540 [ 2490.665616][ T6666] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2490.782311][ T4569] usb 5-1: USB disconnect, device number 51 [ 2490.790035][ C1] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2490.819261][ T6664] bond540: (slave veth2223): Enslaving as an active interface with a down link [ 2490.830280][ T2574] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2490.880098][ T6671] bond540: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2490.896379][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2491.077166][ T6664] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2491.113041][ T2574] usb 4-1: Using ep0 maxpacket: 8 [ 2491.170243][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 2491.251601][ T2574] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2491.259744][ T2574] usb 4-1: config 0 has no interface number 0 [ 2491.267810][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2491.279671][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2491.292488][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2491.305595][ T2574] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2491.315880][ T23] usb 1-1: config 0 has no interfaces? [ 2491.322465][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2491.333856][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.343280][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.356174][ T2574] usb 4-1: config 0 descriptor?? [ 2491.374999][ T23] usb 1-1: config 0 descriptor?? [ 2491.382813][ T6543] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2491.424618][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input894 19:09:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8914, 0x0) 19:09:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000000800100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2491.532737][ T2574] usb 4-1: USB disconnect, device number 90 [ 2491.614183][ T6755] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2491.673091][ T23] usb 1-1: USB disconnect, device number 21 [ 2491.681102][ T6757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8933, 0x0) 19:09:44 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100010000000000000000934e0000000000df97c60b29ccc341c5112fe401bfae472c698a72769a2e38a939bf929b7e1aa1329d1054ef30c3a9a5de63e00fe47c"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(0x0, r1) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x1}, [{0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x5}, {}, {0x8, 0x4}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x5, r1}, {0x8, 0x0, r2}, {}], {}, {0x20, 0x5}}, 0x74, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x100008, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@euid_lt={'euid<', r3}}, {@fsname={'fsname', 0x3d, 'cmdline\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0xfe, 0x5, 0x8}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x10000, 0x4) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000180)={0x3, 0x3}) 19:09:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae01, 0x0) [ 2491.847462][ T6757] 8021q: adding VLAN 0 to HW filter on device bond541 [ 2492.018753][ T6762] bond541: (slave veth2225): Enslaving as an active interface with a down link [ 2492.036522][ T6768] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2492.112682][ T6791] bond541: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2492.254327][ T2574] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2492.337246][ T6757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2492.470521][ T2612] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2492.579930][ T2574] usb 4-1: device descriptor read/64, error 18 [ 2492.729909][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2492.859950][ T2612] usb 1-1: config 0 has no interfaces? [ 2492.865639][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2492.887412][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.913981][ T2612] usb 1-1: config 0 descriptor?? [ 2492.980420][ T2574] usb 4-1: device descriptor read/64, error 18 [ 2493.170333][ T23] usb 1-1: USB disconnect, device number 22 19:09:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x2, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x74de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae41, 0x0) [ 2493.269896][ T2574] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2493.314444][ T6833] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xae80, 0x0) [ 2493.372281][ T6840] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2493.447181][ T6840] 8021q: adding VLAN 0 to HW filter on device bond542 [ 2493.460648][ T6841] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000000a00100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x400454ca, 0x0) 19:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40045506, 0x0) [ 2493.559928][ T2574] usb 4-1: device descriptor read/64, error 18 19:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4004550a, 0x0) [ 2493.710561][ T23] usb 1-1: new high-speed USB device number 23 using dummy_hcd 19:09:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40049409, 0x0) [ 2493.959872][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 2493.973433][ T6843] bond542: (slave veth2227): Enslaving as an active interface with a down link [ 2493.984016][ T2574] usb 4-1: device descriptor read/64, error 18 [ 2494.017771][ T6883] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2494.043884][ T6840] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2494.109456][ T23] usb 1-1: config 0 has no interfaces? [ 2494.118793][ T2574] usb usb4-port1: attempt power cycle [ 2494.125379][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2494.148169][ T6898] bond542: (slave veth2229): Enslaving as an active interface with a down link [ 2494.150222][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.165739][ T6899] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2494.204808][ T23] usb 1-1: config 0 descriptor?? [ 2494.284305][ T6840] bond542: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2494.484087][ T4569] usb 1-1: USB disconnect, device number 23 19:09:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40085503, 0x0) [ 2494.860553][ T2574] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2494.897499][ T6922] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2494.961545][ T6923] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2495.289798][ T4569] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2495.350674][ T2574] usb 4-1: device not accepting address 93, error -71 [ 2495.539754][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 2495.680281][ T4569] usb 1-1: config 0 has no interfaces? [ 2495.686217][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2495.696447][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.710287][ T4569] usb 1-1: config 0 descriptor?? 19:09:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x3, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x75de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:48 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x2, 0x1}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fc0009003c0800240042ef42000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) socket$qrtr(0x2a, 0x2, 0x0) syz_usb_disconnect(r0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "8fcdbd48", {0x3, 0x1, 0x0, 0x6a, 0x3, 0x3, 0x20}}) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$RTC_AIE_ON(r2, 0x7001) unshare(0x400) 19:09:48 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req={0x6998, 0xcf9f, 0x9, 0x9}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r4, 0x390c179b360adb45}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x80, "6731fef2fa73483494658dd399012d384e645d67f73573975c8ac72a394e4626d6d9da45d1c5c27dd44742f0d7416fd2c8b5034669e246b46b63a215617723e965df97269f5610358ee458c7e12911a96f84834d0e04ea3940e2daf4d5398f854057d42720a124543d23c2fc7f91de9d115e006e96374423ad0adcec87090e95162aded17f757191febf6a42a5f83c674692aa38825d9d5afcfad3ee1ff2dfa7091733c5495a2d95c9dd20b97329945e6d9d660c55f57eeafdb613d0a54762f08cf8b371f5ab8f2e6198bf3458d56298c490d4863b6309764c9c3b59b90415876ee793fd3f10b537d16f31bcdda6b21586657febd630476516378c108c9a9bcfd614b31d76da4736aaa92bca5d44f48f9ddeb0c92a98eac089a56c20fa4397319be1a786a301d56306a10f78d9781634b5a8e3fa5a4601bd9b5498e83dbde6022de39c26c1b59c121fc384544f461679c8205345b8db2e9d6b732f5921b243fe76757cf566ad69f588b023042321e07a62fcf42a775bd86897752eb8e8ee4c7319615c2ff7695c0640e34fd12dbc213461c41ef3935131c056904aef2294d2e24cfd86fd265dc89f2810a308b108d1232422f243f7cd5fb1c1c6843aa15861cb27e99467d218396dfb7ac89f244ceaa62b9a5205537c20a476670cc7d86dc76a56a9be00e03ce2a90bb51a6a674f68d01d2f2ed72fcc7ff55d194cd2825c209d"}) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40086602, 0x0) 19:09:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2495.953251][T13809] usb 1-1: USB disconnect, device number 24 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40095505, 0x0) [ 2496.045140][ T6953] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4010ae67, 0x0) 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x40186366, 0x0) 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x401c5820, 0x0) [ 2496.186953][ T6953] 8021q: adding VLAN 0 to HW filter on device bond543 [ 2496.217234][ T6954] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2496.295336][ T6963] bond543: (slave veth2231): Enslaving as an active interface with a down link [ 2496.304810][ T3795] usb 5-1: new full-speed USB device number 52 using dummy_hcd 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4020940d, 0x0) [ 2496.335508][ T6996] bond543: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4020ae46, 0x0) [ 2496.469629][T13809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2496.484455][ T2574] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2496.506090][ T7004] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2496.573094][ T6963] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2496.600082][ T3795] usb 5-1: device descriptor read/64, error 18 [ 2496.600416][ T2574] usb 4-1: Using ep0 maxpacket: 8 [ 2496.618294][ T6953] bond543: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2496.709583][T13809] usb 1-1: Using ep0 maxpacket: 8 [ 2496.750186][ T2574] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2496.758765][ T2574] usb 4-1: config 0 has no interface number 0 [ 2496.766748][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2496.787253][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2496.799909][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2496.813809][ T2574] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2496.825924][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.830437][T13809] usb 1-1: config 0 has no interfaces? [ 2496.844757][ T2574] usb 4-1: config 0 descriptor?? [ 2496.850205][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2496.871674][ T6955] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2496.884640][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.894611][T13809] usb 1-1: config 0 descriptor?? [ 2496.903015][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input895 [ 2496.989548][ T3795] usb 5-1: device descriptor read/64, error 18 [ 2497.107994][ T6955] udc-core: couldn't find an available UDC or it's busy [ 2497.116971][ T6955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2497.152488][ T2574] usb 1-1: USB disconnect, device number 25 [ 2497.260572][ T3795] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 2497.531226][ T3795] usb 5-1: device descriptor read/64, error 18 [ 2497.920331][ T3795] usb 5-1: device descriptor read/64, error 18 [ 2498.010325][T13809] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2498.039673][ T3795] usb usb5-port1: attempt power cycle [ 2498.238320][ T6955] udc-core: couldn't find an available UDC or it's busy [ 2498.245683][ T6955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2498.254102][T13809] usb 1-1: Using ep0 maxpacket: 8 [ 2498.263109][ T6955] udc-core: couldn't find an available UDC or it's busy [ 2498.272002][ T6955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2498.379515][T13809] usb 1-1: config 0 has no interfaces? [ 2498.386018][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2498.395423][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.410156][T13809] usb 1-1: config 0 descriptor?? 19:09:50 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x4, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4090ae82, 0x0) 19:09:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2498.653074][ T2574] usb 1-1: USB disconnect, device number 26 [ 2498.673519][T13809] usb 4-1: USB disconnect, device number 94 [ 2498.750825][ T3795] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 2498.777906][ T7064] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2498.857009][ T7077] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2498.921036][ T3795] usb 5-1: device descriptor read/8, error -61 19:09:51 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000011a52557001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x181000, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 19:09:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x76de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:51 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) read$FUSE(r0, &(0x7f0000000180), 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d08, &(0x7f0000000080)=0x15) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x41015500, 0x0) 19:09:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80044d01, 0x0) [ 2499.063249][ T7089] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2499.096753][ T7087] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2499.129521][ T3795] usb 5-1: device descriptor read/8, error -71 [ 2499.158098][ T7087] 8021q: adding VLAN 0 to HW filter on device bond544 [ 2499.170566][ T7095] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80045432, 0x0) [ 2499.212228][ T2574] usb 1-1: new high-speed USB device number 27 using dummy_hcd 19:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80045440, 0x0) [ 2499.329464][ T4567] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2499.367899][ T7099] bond544: (slave veth2233): Enslaving as an active interface with a down link [ 2499.406996][ T7087] bond544: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2499.489367][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2499.521923][ T7135] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2499.574312][ T7148] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2499.586770][ T7087] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2499.599354][ T4567] usb 4-1: Using ep0 maxpacket: 8 [ 2499.620293][ T2574] usb 1-1: config 0 has no interfaces? [ 2499.625823][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2499.646434][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.650029][ T3795] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2499.671815][ T2574] usb 1-1: config 0 descriptor?? [ 2499.740919][ T4567] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2499.749048][ T4567] usb 4-1: config 0 has no interface number 0 [ 2499.758077][ T4567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2499.759418][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2499.771829][ T4567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2499.791678][ T4567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2499.804076][ T4567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2499.813988][ T4567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.834870][ T4567] usb 4-1: config 0 descriptor?? [ 2499.861300][ T7086] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2499.902154][ T4567] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input896 [ 2499.949635][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2499.957265][ T3795] usb 5-1: can't read configurations, error -61 [ 2499.971418][ T9549] usb 1-1: USB disconnect, device number 27 [ 2499.989410][ T3795] usb usb5-port1: unable to enumerate USB device [ 2500.137046][ T4567] usb 4-1: USB disconnect, device number 95 [ 2500.859236][ T4567] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2501.120009][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2501.249562][ T4567] usb 1-1: config 0 has no interfaces? [ 2501.255475][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2501.268582][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.283482][ T4567] usb 1-1: config 0 descriptor?? 19:09:53 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x5, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x8004552d, 0x0) 19:09:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x77de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2501.528014][ T3795] usb 1-1: USB disconnect, device number 28 [ 2501.600369][ T7195] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2501.667106][ T7195] 8021q: adding VLAN 0 to HW filter on device bond545 [ 2501.735924][ T7201] bond545: (slave veth2235): Enslaving as an active interface with a down link [ 2501.776989][ T7195] bond545: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2501.939239][ T7201] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2501.980803][ T7201] bond545: (slave veth2237): Enslaving as an active interface with a down link [ 2501.999151][ T3795] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2502.020514][ T7195] bond545: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:09:54 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) 19:09:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80085502, 0x0) 19:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x80086301, 0x0) 19:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0045878, 0x0) [ 2502.218761][ T7253] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2502.240168][ T3795] usb 1-1: Using ep0 maxpacket: 8 [ 2502.252222][ T7257] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.3'. 19:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0045878, 0x0) [ 2502.275066][ T7257] CBQ: class ffff0000 has bad quantum==14, repaired. [ 2502.288745][ T7266] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:09:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x78de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:54 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/11) [ 2502.359690][ T3795] usb 1-1: config 0 has no interfaces? [ 2502.365245][ T3795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2502.394834][ T3795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.409395][ T3795] usb 1-1: config 0 descriptor?? [ 2502.448797][ T7280] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2502.503612][ T7280] 8021q: adding VLAN 0 to HW filter on device bond546 [ 2502.559399][ T7280] bond546: (slave veth2239): Enslaving as an active interface with a down link [ 2502.569069][ T9549] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2502.595444][ T7319] bond546: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2502.667314][ T4567] usb 1-1: USB disconnect, device number 29 [ 2502.719204][ T2574] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2502.763529][ T7319] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2502.808995][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2502.815773][ T7319] bond546: (slave veth2241): Enslaving as an active interface with a down link [ 2502.929362][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2502.938796][ T9549] usb 5-1: config 0 has no interface number 0 [ 2502.946537][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2502.960775][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2502.974815][ T9549] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2502.987316][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2502.999532][ T2574] usb 4-1: Using ep0 maxpacket: 8 [ 2503.009846][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.027925][ T9549] usb 5-1: config 0 descriptor?? [ 2503.069372][ T7259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2503.092733][ T9549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input897 [ 2503.134201][ T2574] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 2503.149169][ T2574] usb 4-1: config 0 has no interface number 0 [ 2503.155383][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2503.199637][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2503.229431][ T2574] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2503.256094][ T2574] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2503.271271][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.299110][ T2574] usb 4-1: config 0 descriptor?? [ 2503.312393][ T23] usb 5-1: USB disconnect, device number 56 [ 2503.319193][ C1] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2503.341052][ T7279] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2503.363383][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.65/input/input898 [ 2503.563322][ T4567] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2503.625310][ T2574] usb 4-1: USB disconnect, device number 96 [ 2503.818928][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2503.960858][ T4567] usb 1-1: config 0 has no interfaces? [ 2503.966860][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2503.978266][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.988094][ T4567] usb 1-1: config 0 descriptor?? [ 2504.168924][T30860] usb 5-1: new high-speed USB device number 57 using dummy_hcd 19:09:56 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x6, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:09:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc00464c9, 0x0) [ 2504.242349][ T4567] usb 1-1: USB disconnect, device number 30 [ 2504.343951][ T7398] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2504.409965][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2504.416337][ T7401] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2504.529598][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2504.537739][T30860] usb 5-1: config 0 has no interface number 0 [ 2504.547115][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2504.559738][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2504.572125][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2504.586037][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2504.596075][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.605695][T30860] usb 5-1: config 0 descriptor?? [ 2504.630732][ T7259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2504.651182][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input899 [ 2504.738984][ T4567] usb 1-1: new high-speed USB device number 31 using dummy_hcd 19:09:57 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:09:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x79de0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:09:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0085504, 0x0) [ 2504.857304][ T2574] usb 5-1: USB disconnect, device number 57 19:09:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000061200100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x2}}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000ed1f63455210af60e3a0a125f465379ab8b109da32f1418aa0388a89c37bba4f0ca4d625b2af83166892bcbb4bd32d13c6ee5a0ebbcb9c0edb1e034c0d05f48af16ce4a5da59be5605f60ca1c0f72938b996648226fd74a2a50b0c895560648651de335898f04f647d7dd89be4f159dd0fc582c1b303393a9381811413010e9d5aa18dc78"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000280)=""/186, &(0x7f0000000340)=0xba) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)={0x85, "fcfaecf18e07014b789c755f6003cfd6e248c3a15cc54a0aadda4e2845d9be7d834011b7da8860968ae25b15d5659fe004a05f5ca58537dd187772be44e8217e1ff97c5b553699346949a21892458c8d072f78d8f2c74723000ac93eef825b528cfec840a310b4a6f1bae50e75166e31380060aad06bdd01a93cc0e1a4e5474f6a4cae000eb17ed499c7cb0b17030ec2b26064ebee2b1e0a4d717f8d06cae5448eb54d66d57221d0bc68178a141e6efab17f007cbdde685f905764f08a63a9e33c1dcbe414cc90c8ff37385efa4f5fff9b895eeb466fe55e8ef55ff187f1f8d623f97687ec285ec53f4b447cc1f7607d6604683683c76327d37ee73f04897e42bee8a6c27ac94f2b186e078c7deb903c0cd63f5429779763316f4f060c2e5ce8c9ba96e015d837e4766973598fe800af6b5a9e90cb662c1d7d5453c578be42e6f2d772e0a53400be6f97f89bba3a4bb52adcbb56a44f6dc4ea016a19409cb142d6c4eb5d25cd9d4f018882bc9889c4240c2b5a002f6d6b657bc8b459af3498309cfb8695f8557a32c65acc590f92c9db2dbc8642a46e301faf91fca89132fd0f0753f57abdfff891cdf982c5b2d23199260f2b3b6b4a16c55710367a80a0378b5e02459a810bfc37bf7992b56c38b866a76e2d667ad3cf262260bb5d9b94146dbaf82e47f26026415ad61a7850e5dfc9e2ffe97684a83e7ae699c72d82c75832"}) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x1) [ 2504.950598][ T7425] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2504.995750][ T4567] usb 1-1: Using ep0 maxpacket: 8 19:09:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc00c4809, 0x0) 19:09:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0189436, 0x0) 19:09:57 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) write(r0, &(0x7f0000000000), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x5) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000040)) [ 2505.132933][ T4567] usb 1-1: config 0 has no interfaces? [ 2505.142250][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2505.147751][ T7425] 8021q: adding VLAN 0 to HW filter on device bond547 [ 2505.151522][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.155810][ T4567] usb 1-1: config 0 descriptor?? [ 2505.250701][ T7427] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2505.324577][ T7435] bond547: (slave veth2243): Enslaving as an active interface with a down link [ 2505.359380][ T7458] bond547: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2505.419819][ T2574] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2505.431736][ T4567] usb 1-1: USB disconnect, device number 31 [ 2505.498415][ T7488] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2505.535111][ T7425] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2505.678860][ T2574] usb 5-1: Using ep0 maxpacket: 8 [ 2505.818886][ T2574] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2505.827518][ T2574] usb 5-1: config 0 has no interface number 0 [ 2505.834079][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2505.846287][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 209, changing to 11 [ 2505.857664][ T2574] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2505.869040][ T2574] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2505.878216][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.891118][ T2574] usb 5-1: config 0 descriptor?? [ 2505.910329][ T7434] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2505.930990][ T2574] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input900 [ 2506.136481][T30860] usb 5-1: USB disconnect, device number 58 [ 2506.230486][ T2574] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2506.489033][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2506.610998][ T2574] usb 1-1: config 0 has no interfaces? [ 2506.616650][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2506.626258][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.635610][ T2574] usb 1-1: config 0 descriptor?? 19:09:59 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:09:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc02064a4, 0x0) 19:09:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x3, 0x1, 0x1ff, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x5, 0x30}, &(0x7f00000000c0)=0xc) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/109) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:09:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000001300100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:09:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2506.882586][ T2574] usb 1-1: USB disconnect, device number 32 19:09:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc020660b, 0x0) [ 2506.966774][ T7544] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2506.994427][ T3795] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2506.995479][ T7542] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:09:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) [ 2507.132544][ T7542] 8021q: adding VLAN 0 to HW filter on device bond548 [ 2507.234466][ T7549] bond548: (slave veth2245): Enslaving as an active interface with a down link [ 2507.245262][ T7554] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2507.256022][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2507.294957][ T7566] bond548: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2507.389642][ T3795] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2507.397886][ T3795] usb 5-1: config 0 has no interface number 0 [ 2507.409124][ T2574] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2507.410282][ T3795] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2507.435207][ T3795] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 209, changing to 11 [ 2507.447545][ T3795] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2507.462231][ T3795] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2507.472719][ T3795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2507.487568][ T3795] usb 5-1: config 0 descriptor?? [ 2507.520203][ T7527] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2507.533000][ T7549] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2507.545212][ T3795] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input901 [ 2507.666200][ T7549] bond548: (slave veth2247): Enslaving as an active interface with a down link [ 2507.679885][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2507.750039][ T3795] usb 5-1: USB disconnect, device number 59 [ 2507.758502][ C0] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 19:10:00 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108a912a190eb09000000010900240001000000000904410002ff5d010009050f1f01000000000905830b000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8000, @empty, 0x9}, 0x1c) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="080001000200000008000100000000000c0099003403000002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19:10:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0385720, 0x0) 19:10:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$snddsp(r0, &(0x7f0000000000)="150bf098165f898744828feb2c28d2e67467c234ed5747efae76287bf3589ace0e6df1e949c8168afc099f62a0158536962a66b86c9b7084b45b27aa071856c67f6ef9152f59934e7c637149d2fc1c7cc2f646dd42c1e081bf7375860f7462ce122ddea0c3113b6c5d64372ef2d57ace437a3b3173b0e91bb6760f1131bd587adb8396e81e1e2f581843a2ee16f177192bec8ccc6b5315a9fe", 0x99) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004010}, 0x20000084) ioctl$GIO_FONT(r1, 0x4b60, 0x0) 19:10:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7ade0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2507.801592][ T2574] usb 1-1: config 0 has no interfaces? [ 2507.807575][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2507.818409][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2507.864808][ T2574] usb 1-1: config 0 descriptor?? [ 2507.866926][ T7628] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2508.015202][ T7628] 8021q: adding VLAN 0 to HW filter on device bond549 [ 2508.026612][ T7632] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2508.087078][ T7640] bond549: (slave veth2249): Enslaving as an active interface with a down link [ 2508.118237][ T7659] bond549: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2508.161254][T30860] usb 1-1: USB disconnect, device number 33 [ 2508.282691][ T7682] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2508.333852][ T7640] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2508.349200][ T3795] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2508.413152][ T7640] bond549: (slave veth2251): Enslaving as an active interface with a down link [ 2508.438138][ T7628] bond549: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2508.590437][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2508.750860][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2508.764860][ T3795] usb 5-1: can't read configurations, error -61 [ 2508.928487][ T3795] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2508.969318][ T2574] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2509.189253][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2509.228663][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2509.358563][ T2574] usb 1-1: config 0 has no interfaces? [ 2509.359829][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2509.368562][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2509.388855][ T3795] usb 5-1: can't read configurations, error -61 [ 2509.404287][ T3795] usb usb5-port1: attempt power cycle [ 2509.405898][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.439104][ T2574] usb 1-1: config 0 descriptor?? 19:10:01 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0xc0506617, 0x0) 19:10:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7bde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2509.705726][ T2574] usb 1-1: USB disconnect, device number 34 [ 2509.775889][ T7720] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2509.877594][ T7720] 8021q: adding VLAN 0 to HW filter on device bond550 [ 2509.903257][ T7724] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x228e00, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000100)=[0x5eea, 0x2, 0x5, 0xa2a0, 0x6, 0x101, 0x3], &(0x7f0000000140)=[0x2e, 0x4, 0x48, 0x2, 0x0], &(0x7f0000000180)=[0x0, 0x7e0, 0x0, 0x81]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r2 = socket(0x1e, 0x5, 0x40000) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1000, 0x4) [ 2510.138334][ T3795] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2510.158051][ T7727] bond550: (slave veth2253): Enslaving as an active interface with a down link 19:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "eb55456d35510f9422b3867a846fba64"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "f0ae065ad90bb4abe79f22fbb0565a5b"}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x3a}}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) [ 2510.205732][ T7765] bond550: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2510.228486][ T2574] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2510.230588][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2510.414426][ T7766] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2510.464191][ T7720] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2510.473944][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2510.488400][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2510.489033][ T3795] usb 5-1: can't read configurations, error -61 [ 2510.619890][ T2574] usb 1-1: config 0 has no interfaces? [ 2510.625646][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2510.640932][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.651675][ T2574] usb 1-1: config 0 descriptor?? [ 2510.674282][ T3795] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2510.779002][ T3795] usb 5-1: Using ep0 maxpacket: 8 19:10:03 executing program 4: syz_usb_connect(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1000000000000, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8) 19:10:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e23, @multicast1}}) 19:10:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000003f00100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2510.897916][ T2574] usb 1-1: USB disconnect, device number 35 19:10:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7c010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2510.958549][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2510.966171][ T3795] usb 5-1: can't read configurations, error -71 [ 2510.999594][ T7799] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2511.018626][ T3795] usb usb5-port1: unable to enumerate USB device [ 2511.056715][ T7801] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2511.120858][ T7801] 8021q: adding VLAN 0 to HW filter on device bond551 [ 2511.141434][ T7805] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2511.375595][ T7834] bond551: (slave veth2255): Enslaving as an active interface with a down link [ 2511.467864][ T7801] bond551: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2511.708474][ T2612] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2511.786503][ T7842] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2511.827918][ T7801] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2511.854245][ T7852] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2511.970805][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2512.098588][ T2612] usb 1-1: config 0 has no interfaces? [ 2512.104245][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2512.114641][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.124784][ T2612] usb 1-1: config 0 descriptor?? 19:10:04 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x300, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x12000, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x7ff}, 0x36, 0x4, 0xf14, 0xc4c, 0x9, 'syz0\x00', "8bbaf2b3c0c8fd6ed9a06841ef9ed600cdf9e8c7d5c380bf33200d017a3e1627", "63b9015ce81beb9aae05c00b349a75479fe44beb9ffc34d317ab97172ad8bcdd", [{0x5, 0x49f7, {0x0, 0xffff}}, {0xff, 0x1f, {0x0, 0x1000000}}, {0x5, 0x6, {0x2, 0x2}}, {0x3, 0xffff, {0x2, 0x3}}, {0x100, 0xf971, {0x1, 0x8}}, {0x2000, 0x8, {0x2}}, {0x7, 0x2, {0x0, 0xd8a}}, {0x4, 0xe9, {0x0, 0x9}}, {0x4, 0xfd78, {0x2, 0x2}}, {0x1, 0x6, {0x0, 0x9}}, {0x5, 0x9, {0x2, 0x3}}, {0x1, 0x2, {0x1, 0x48c4}}, {0x3ff, 0x1182, {0x0, 0x4}}, {0x5, 0x5, {0x2, 0x7fff}}, {0x9, 0x1e, {0x2, 0x8}}, {0x1, 0x718, {0x2, 0x3}}, {0x8000, 0x1ff, {0x1, 0x9de4}}, {0xff, 0x101, {0x3, 0x2}}, {0x5, 0x8000, {0x2, 0x7a0f}}, {0x2, 0x3, {0x1, 0x7}}, {0xffc1, 0x20b, {0x0, 0x30}}, {0x7, 0x4, {0x3, 0x7}}, {0xca, 0x9, {0x1, 0x3}}, {0x8, 0x7, {0x1, 0xffffffff}}, {0x0, 0xc81d, {0x3, 0x1}}, {0x8000, 0x3, {0x0, 0x3}}, {0x47, 0x3, {0x3, 0x10000}}, {0x0, 0x2800, {0x1, 0x3}}, {0x7f, 0x5, {0x0, 0x5}}, {0x8, 0xd802, {0x1, 0x1ff}}, {0x3b9, 0x3, {0x1, 0xc4e}}, {0x7, 0x8, {0x2, 0x32ce}}, {0x7, 0x7, {0x3, 0x401}}, {0x2, 0x200, {0x2, 0x4ba}}, {0xfffa, 0x0, {0x0, 0x9}}, {0x1, 0xfe, {0x2, 0x7ff}}, {0xfff9, 0x1, {0x0, 0x8}}, {0x5, 0xa1e, {0x1, 0x4d4}}, {0x6, 0x80, {0x3, 0x80000000}}, {0x200, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0xd01}, 0xff, 0x3, 0x59, 0x4, 0x1, 'syz1\x00', "84e17483a9ed19dc8e3cdcd9207b4dde0c878f4bcc579728a7ade3d8c2b02100", "c7901fba130dbb259733cce5c6ccff7fdd634ffecd2da29c2291f5c201148e62", [{0x7fff, 0x7fff, {0x2, 0x8}}, {0x8, 0x4, {0x2, 0x76f}}, {0xa7e, 0x8, {0x2, 0x1}}, {0x2, 0x7, {0x0, 0x9}}, {0x8, 0x8001, {0x1, 0x6}}, {0x3, 0x1, {0x3, 0xa}}, {0x3ff, 0x8001, {0x1, 0x131}}, {0x800, 0x2, {0x1, 0x34d}}, {0xfffa, 0x4, {0x1, 0x3}}, {0x81, 0x6, {0x1, 0x9}}, {0x3ff, 0x20, {0x0, 0x1f}}, {0x101, 0x3}, {0x6, 0xe, {0x2, 0x7ff}}, {0x9, 0x200, {0x2, 0xfff}}, {0x800, 0x0, {0x2, 0xffffffff}}, {0x8, 0x9, {0x1, 0x3f}}, {0xf, 0x2, {0x2}}, {0x2, 0x4, {0x2, 0x20}}, {0x1ff, 0x3, {0x2, 0x800080}}, {0x800, 0x4, {0x0, 0xff}}, {0x40, 0x1ff, {0x2, 0x1ff}}, {0x2, 0x6, {0x1, 0x3f}}, {0x3ff, 0x7f, {0x0, 0x4101}}, {0x8, 0x3, {0x2, 0xdb}}, {0x9, 0xdd, {0x1}}, {0xdb, 0xca1, {0x0, 0x819}}, {0x100, 0x9, {0x1, 0xffffffff}}, {0x7ff, 0x9, {0x3, 0x8}}, {0x5, 0xfffe, {0x2, 0x3}}, {0xf56, 0x3, {0x3, 0x7fff}}, {0x40, 0x100, {0x2, 0x8}}, {0x9, 0x8, {0x0, 0x9}}, {0x7f, 0xbb0, {0x1, 0x1f}}, {0x1, 0x8, {0x3, 0x2}}, {0x3, 0x8, {0x0, 0x2}}, {0x7, 0x5, {0x702f81a71229ad16, 0x5}}, {0x7f, 0x8001, {0x0, 0x1}}, {0xafc, 0x4, {0x3, 0x80000001}}, {0x7fff, 0x6, {0x0, 0x8}}, {0xff, 0x4, {0x0, 0x401}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0xd840}, 0x81) 19:10:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7cde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:04 executing program 4: syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb0900000001050024000100000000090441f502ff4d014009050f1f01000e0000000000000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/196) 19:10:04 executing program 3: r0 = socket(0x1e, 0x4, 0xe0d4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7, 0x1, 0x401, 0x2, {{0x1a, 0x4, 0x0, 0x18, 0x68, 0x68, 0x0, 0xb9, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x2, 0x7, "16cd0dd16e"}]}, @lsrr={0x83, 0x7, 0x80, [@dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp={0x44, 0x14, 0x2d, 0x0, 0x2, [0x100, 0x0, 0x9, 0xb7b]}, @lsrr={0x83, 0x27, 0xde, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010102]}]}}}}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x2000000}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'gretap0\x00', r4}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000017c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x110, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) 19:10:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2512.382299][ T2612] usb 1-1: USB disconnect, device number 36 [ 2512.473507][ T7870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:10:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000040)={0x6, 0x3, 0x75b5, 0x3, &(0x7f0000000000)=[{0x8, 0x101, 0x6, 0x1}, {0x3, 0x88, 0x200, 0x8000}, {0x6, 0x8, 0xfff, 0x401}]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f0000000080)=[0x1, 0x0]}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2512.552356][ T7869] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2512.565907][ T7871] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2512.635972][ T7871] 8021q: adding VLAN 0 to HW filter on device bond552 19:10:04 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x2, 0x4, 0x59, 0x7, 0x2, 0x6, 0x4, 0x20, 0x9, 0x81, 0xff, 0x7f, 0x40}, 0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000040)={{0x8}, 0x1, 0x9, 0x4, {0x3, 0x3}, 0x8, 0x9}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) [ 2512.702957][ T7882] bond552: (slave veth2257): Enslaving as an active interface with a down link [ 2512.714457][ T7870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2512.740514][ T3795] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2512.777432][ T7889] bond552: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x3, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x57) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000001f00), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000001f00), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0x8, @loopback, 0x7}, r1}}, 0x38) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r6, 0x4b60, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x460002, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000180)={0x2, 0x1cd}) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000000)=0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) ioprio_set$uid(0x0, r8, 0x4) [ 2512.898260][ T2612] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2512.972779][ T7891] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2513.026569][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2513.036062][ T7871] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:05 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x101000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) [ 2513.148073][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2513.188510][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2513.195751][ T7889] bond552: (slave veth2259): Enslaving as an active interface with a down link [ 2513.198545][ T3795] usb 5-1: can't read configurations, error -61 [ 2513.216835][ T7956] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2513.284390][ T2612] usb 1-1: config 0 has no interfaces? [ 2513.293779][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2513.298556][ T7960] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2513.309426][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.339681][ T2612] usb 1-1: config 0 descriptor?? [ 2513.358062][ T3795] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2513.584990][ T9549] usb 1-1: USB disconnect, device number 37 [ 2513.598072][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2513.758066][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2513.766026][ T3795] usb 5-1: can't read configurations, error -61 [ 2513.790035][ T3795] usb usb5-port1: attempt power cycle [ 2514.388717][ T4567] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2514.517986][ T3795] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2514.608395][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2514.638193][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2514.769112][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2514.776732][ T3795] usb 5-1: can't read configurations, error -61 [ 2514.789779][ T4567] usb 1-1: config 0 has no interfaces? [ 2514.795481][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2514.805794][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.819882][ T4567] usb 1-1: config 0 descriptor?? [ 2514.928617][ T3795] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2515.018729][ T3795] usb 5-1: Using ep0 maxpacket: 8 19:10:07 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x500, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7dde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2515.076304][ T2612] usb 1-1: USB disconnect, device number 38 [ 2515.143169][ T7987] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2515.154303][ T7986] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2515.188437][ T3795] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2515.196166][ T3795] usb 5-1: can't read configurations, error -61 [ 2515.203815][ T7986] 8021q: adding VLAN 0 to HW filter on device bond553 [ 2515.218817][ T7992] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2515.267338][ T3795] usb usb5-port1: unable to enumerate USB device [ 2515.305157][ T7986] bond553: (slave veth2261): Enslaving as an active interface with a down link [ 2515.345739][ T8003] bond553: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:07 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="4f01000014da2108ab12a190eb09000000010902247901000000000904410000000000000000071f010000000009058312000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80000000, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:07 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x3, 0x1, 0x1ff, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r2, &(0x7f0000000040)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r3, 0x4b60, 0x0) 19:10:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x2c, 0x19}, 0x18) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x31e, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x8d5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48081}, 0x51) ioctl$GIO_FONT(r0, 0x4b60, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @reserved="739db16fac51b42be89877f6f8d2ce601bb4e097e7000de73ddb32dcaee5115b"}}) [ 2515.501037][ T8039] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2515.518964][ T2612] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2515.534005][ T7986] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7e030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2515.584812][ T8050] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2515.642214][ T8053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2515.692372][ T8053] 8021q: adding VLAN 0 to HW filter on device bond554 19:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2515.758562][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2515.793470][ T8053] bond554: (slave veth2263): Enslaving as an active interface with a down link [ 2515.833711][ T8090] bond554: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2515.903848][ T2612] usb 1-1: config 0 has no interfaces? [ 2515.909929][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2515.917916][ T3795] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2515.920737][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2515.946093][ T2612] usb 1-1: config 0 descriptor?? [ 2516.052782][ T8053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2516.083368][ T8090] bond554: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2516.158490][ T3795] usb 5-1: Using ep0 maxpacket: 8 [ 2516.195419][T30860] usb 1-1: USB disconnect, device number 39 [ 2516.277953][ T3795] usb 5-1: config index 0 descriptor too short (expected 31012, got 36) [ 2516.286536][ T3795] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2516.296327][ T3795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.310628][ T3795] usb 5-1: config 0 has no interface number 0 [ 2516.316753][ T3795] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2516.327641][ T3795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.344280][ T3795] usb 5-1: config 0 descriptor?? [ 2516.599938][ T2612] usb 5-1: USB disconnect, device number 68 [ 2516.988551][ T2574] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2517.239846][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2517.378145][ T2574] usb 1-1: config 0 has no interfaces? [ 2517.378550][ T3795] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2517.383697][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2517.403172][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.416098][ T2574] usb 1-1: config 0 descriptor?? [ 2517.628428][ T3795] usb 5-1: Using ep0 maxpacket: 8 19:10:09 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x600, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KDADDIO(r1, 0x4b34, 0x5063) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20, 0x0, 0x9}, 0x10) ioctl$GIO_FONT(r0, 0x4b60, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) 19:10:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000006c00100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:10:09 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) [ 2517.662405][T30860] usb 1-1: USB disconnect, device number 40 [ 2517.729202][ T8148] __nla_validate_parse: 2 callbacks suppressed [ 2517.729212][ T8148] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2517.748141][ T3795] usb 5-1: config index 0 descriptor too short (expected 31012, got 36) [ 2517.777340][ T3795] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2517.804871][ T3795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2517.832633][ T3795] usb 5-1: config 0 has no interface number 0 [ 2517.847654][ T3795] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2517.857168][ T3795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.876192][ T3795] usb 5-1: config 0 descriptor?? [ 2517.921211][ T8159] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:10 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a19ceb090000000109022400e7ffffffff0904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2518.117735][T30860] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2518.140953][ T4567] usb 5-1: USB disconnect, device number 69 19:10:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7ede0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000440)) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x8, 0xb, 0x1ea, &(0x7f0000000000)="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"}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:10 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/186, 0xba}], 0x1, 0x8000000) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/170, 0x56}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fb}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) [ 2518.292893][ T8177] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x3, 0x1, 0x1ff, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x7, 0x68, 0x4, 0xf740, 0x1c, 0x8, 0x81}, 0x9c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x1, 0x1a1}) [ 2518.333499][ T8180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2518.362455][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2518.488798][T30860] usb 1-1: config 0 has no interfaces? [ 2518.496567][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2518.518479][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:10:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000003c0)=@req3={0x1, 0x800, 0x10001, 0x2, 0x1, 0x5, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000300)=0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0103000000000000000076dc313c04000000"], 0x18}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0xffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x100, 0x5, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2518.541050][T30860] usb 1-1: config 0 descriptor?? [ 2518.556344][ T8180] 8021q: adding VLAN 0 to HW filter on device bond555 19:10:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x101, 0x180000, 0x10001, 0x6, 0x0, "4bfc1fc87a9d13bf78f7a4dcfd76bac88b814d"}) [ 2518.680982][ T4567] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2518.795644][ T2574] usb 1-1: USB disconnect, device number 41 [ 2518.886205][ T8184] bond555: (slave veth2265): Enslaving as an active interface with a down link [ 2518.933859][ T8185] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2518.957834][ T4567] usb 5-1: Using ep0 maxpacket: 8 [ 2519.041872][ T8187] bond555: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2519.082392][ T4567] usb 5-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 2519.112275][ T4567] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 231 [ 2519.157542][ T4567] usb 5-1: config 255 has no interface number 0 [ 2519.165226][ T4567] usb 5-1: config 255 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2519.200542][ T4567] usb 5-1: config 255 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2519.244812][ T4567] usb 5-1: config 255 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2519.292444][ T4567] usb 5-1: New USB device found, idVendor=12ab, idProduct=9ca1, bcdDevice= 9.eb [ 2519.318463][ T4567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.383245][ T4567] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 2519.406864][ T4567] usb 5-1: no configuration chosen from 1 choice [ 2519.431561][ T8227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2519.484553][ T8184] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2519.534217][ T8243] bond555: (slave veth2267): Enslaving as an active interface with a down link [ 2519.566357][ T8180] bond555: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2519.672885][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2519.710401][ T4567] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2519.967500][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2520.108095][ T4567] usb 1-1: config 0 has no interfaces? [ 2520.113862][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2520.124950][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.134571][ T4567] usb 1-1: config 0 descriptor?? 19:10:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$P9_RLOCK(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000140)={0x4, 0x3a}) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r4 = accept(r1, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000280)=0x8000) 19:10:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:12 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2520.393687][ T4567] usb 1-1: USB disconnect, device number 42 [ 2520.464343][ T8281] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2520.549543][ T8288] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2520.887853][ T4567] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2521.168057][ T4567] usb 1-1: Using ep0 maxpacket: 8 19:10:13 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x32001) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x7fde0c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x40601) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x3, 'team_slave_1\x00', {0x6c3}, 0x6}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:10:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2521.262405][ T2612] usb 5-1: USB disconnect, device number 70 [ 2521.307947][ T4567] usb 1-1: config 0 has no interfaces? [ 2521.313579][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2521.343012][ T8299] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) mq_getsetattr(r1, &(0x7f0000000000)={0xc7, 0xffffffffffffffff, 0x6, 0x3ff}, 0x0) 19:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000062de40924eb354593f1b7000000000000", @ANYRES16=r1, @ANYBLOB="030b0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, r1, 0x308, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x799}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfd2f}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c4d}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24018004}, 0x8000) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2521.365033][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.401410][ T4567] usb 1-1: config 0 descriptor?? 19:10:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$ppp(r0, &(0x7f0000000000)="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", 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, 0x0) [ 2521.541671][ T8299] 8021q: adding VLAN 0 to HW filter on device bond556 [ 2521.553058][ T8300] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2521.650513][ T2574] usb 1-1: USB disconnect, device number 43 19:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, r5, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x24}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) [ 2521.747456][ T2612] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2521.805898][ T8309] bond556: (slave veth2269): Enslaving as an active interface with a down link [ 2521.854425][ T8328] bond556: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c8, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x80}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xfff}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40d4}, 0x80) [ 2522.012812][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2522.023891][ T8357] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2522.071261][ T8299] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2522.140628][ T8299] bond556: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2522.159292][ T2612] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2522.170256][ T2612] usb 5-1: config 0 has no interface number 0 [ 2522.177073][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2522.218618][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2522.251490][ T2612] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2522.278188][ T2612] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2522.289810][ T2612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2522.308171][ T2612] usb 5-1: config 0 descriptor?? [ 2522.332981][ T8303] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2522.365463][ T2612] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input902 [ 2522.593384][T30860] usb 5-1: USB disconnect, device number 71 [ 2522.607185][ C0] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2522.616459][ T4567] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2522.835601][ T8414] __nla_validate_parse: 3 callbacks suppressed [ 2522.835611][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2522.889192][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2523.038856][ T4567] usb 1-1: config 0 has no interfaces? [ 2523.044427][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2523.054281][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.064345][ T4567] usb 1-1: config 0 descriptor?? 19:10:15 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0xff00, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2523.321970][ T4567] usb 1-1: USB disconnect, device number 44 [ 2523.417837][T30860] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2523.678389][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2523.757539][ T4567] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2523.818621][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2523.826748][T30860] usb 5-1: config 0 has no interface number 0 [ 2523.834106][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2523.846585][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2523.860984][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2523.874415][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2523.885747][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.905028][T30860] usb 5-1: config 0 descriptor?? [ 2523.932060][ T8303] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2523.949894][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input903 [ 2523.997053][ T4567] usb 1-1: Using ep0 maxpacket: 8 [ 2524.117389][ T4567] usb 1-1: config 0 has no interfaces? [ 2524.123115][ T4567] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2524.133988][ T4567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.143633][ T4567] usb 1-1: config 0 descriptor?? [ 2524.156785][T30860] usb 5-1: USB disconnect, device number 72 19:10:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x135}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x140f, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x60004001) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:16 executing program 5: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7b6, 0x7c840) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$revoke(0x3, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r2, 0x37, 0x6b}, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)="a4462ef5a8c024046e287c3febe35423acc8354c6974160765cf00f55fe1a62140763fc334fd4387e7b13dd23417bf89663dae9f644810", &(0x7f0000000300)="a2604c80d30c957cbf00449b4a0d671b1d11c47d7dcbc36cc15159bb56e4ae49cddbd0a83687161faadd6416acc62c4c8a2b7ba562eed36836dd1462e8a237597548daf48b5b4df69374a432dd7b0c76babd4f5f6d87df3f8b6a487e44135beba5979ec7a66c9f739c7d2f") r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmmsg(r5, &(0x7f0000000280), 0x4000021, 0x20008011) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x668, 0xf8, 0x4a8, 0xffffffff, 0x0, 0xf8, 0x598, 0x598, 0xffffffff, 0x598, 0x598, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff, 0xff], [0xffffff00, 0x0, 0xffffff, 0xffffff00], 'team_slave_1\x00', 'wg2\x00', {}, {0xff}, 0x88, 0x9, 0x6}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"c676", 0x1}}, @common=@frag={{0x30, 'frag\x00'}, {[0x400, 0x10000], 0x9, 0x22, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv6=@mcast2, @icmp_id=0x68, @port=0x4e22}}}, {{@uncond, 0x0, 0x208, 0x268, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x2, 0x4}}, @common=@rt={{0x138, 'rt\x00'}, {0x81, [0x200, 0x2], 0x101, 0x10, 0x7, [@local, @loopback, @ipv4={[], [], @empty}, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x42}, @ipv4={[], [], @private=0xa010101}, @local, @remote, @dev={0xfe, 0x80, [], 0x2c}, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @private2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1, @empty], 0x7}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x8, 0x800, 0x6, 0x5, 0xfffff001}}}, {{@ipv6={@private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0xff, 0x0, 0xff000000], 'ip6_vti0\x00', 'nr0\x00', {}, {}, 0x2f, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@remote, @ipv6=@mcast2, @icmp_id=0x65, @port=0x4e21}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 19:10:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$P9_RLERRORu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe) ioctl$KDSKBLED(r0, 0x4b65, 0x8) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2524.255012][ T8455] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = dup2(r1, r0) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @mcast2, 0x3ff}}, 0x24) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1000, 0x4, 0x9, 0x5}]}, 0x10) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2524.375838][ T8455] 8021q: adding VLAN 0 to HW filter on device bond557 [ 2524.395735][ T4567] usb 1-1: USB disconnect, device number 45 19:10:16 executing program 3: setrlimit(0x2, &(0x7f0000000000)={0x871, 0x6}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2524.461394][ T8454] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) tgkill(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r3, r2) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x100, 0x100000001}) r4 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000000000)=""/76) r5 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x5f9, 0x200000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000001c0)={0x7f}, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x3, 0x1, 0x1ff, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r6, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x8, 0x3, 0xfffd, 0x7, 0x2, 0x9, 0x8, {r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x7, 0x8, 0x5, 0x20, 0x5}}, &(0x7f0000000200)=0xb0) [ 2524.585198][ T8482] bond557: (slave veth2271): Enslaving as an active interface with a down link 19:10:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x82040, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0xfffff183, 0x6, 0x4, 0xe000, 0xd93c, {0x77359400}, {0x5, 0x1, 0x3f, 0x9, 0x9, 0x8, "a1375a90"}, 0x5, 0x4, @offset=0x1a, 0x1, 0x0, r2}) fsetxattr$security_evm(r0, &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@v1={0x2, "5598e1694a7c7dfb1d0bcf34d79e3aab68a8cc"}, 0x14, 0x3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0x401) [ 2524.642757][ T8502] bond557: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000000)={{0x2, 0xd000, 0x3, 0x4f, 0x0, 0x20, 0x0, 0x7f, 0xa2, 0x7f, 0x2, 0x5}, {0x15000, 0x1000, 0x10, 0x42, 0x7, 0x4, 0x8, 0x3b, 0x1, 0x6, 0x3}, {0x4, 0x6000, 0xf, 0x81, 0x80, 0x67, 0x9, 0x5, 0x3f, 0x6, 0x4, 0x20}, {0x6000, 0x100000, 0xa, 0x1, 0x7, 0x5, 0x81, 0x2, 0xc0, 0x6, 0x5, 0x4}, {0x0, 0x10000, 0x0, 0xea, 0xc1, 0x6, 0x39, 0x7, 0x3, 0xed, 0xff, 0x1}, {0x12000, 0x4000, 0x10, 0xf7, 0x4b, 0x6, 0x3f, 0x1f, 0x99, 0x21, 0x1f, 0x5c}, {0x3000, 0x100000, 0x4, 0x4, 0x81, 0x2e, 0x80, 0x7, 0x4, 0x88, 0x8, 0x2}, {0xd000, 0x100000, 0x3, 0x3, 0x5, 0x2, 0x3, 0x3f, 0x1f, 0x0, 0x5}, {0x2, 0x2}, {0x3000, 0x9}, 0x4, 0x0, 0x1, 0x502010, 0xb, 0x0, 0xd000, [0xc69, 0xd9b, 0x3c3]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2524.767034][T30860] usb 5-1: new high-speed USB device number 73 using dummy_hcd 19:10:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f000000050000000002000001000008a000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2524.821516][ T8516] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2524.872568][ T8455] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2524.916341][ T8539] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2524.985569][ T8542] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2525.027724][T30860] usb 5-1: Using ep0 maxpacket: 8 [ 2525.158998][T30860] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2525.167475][T30860] usb 5-1: config 0 has no interface number 0 [ 2525.173567][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2525.177070][ T2574] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2525.190011][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2525.206750][T30860] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2525.219097][T30860] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2525.230657][T30860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.240933][T30860] usb 5-1: config 0 descriptor?? [ 2525.257622][ T8503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2525.290233][T30860] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input904 [ 2525.437078][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2525.558473][ T2574] usb 1-1: config 0 has no interfaces? [ 2525.564009][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2525.575865][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.585969][ T2574] usb 1-1: config 0 descriptor?? [ 2525.833661][T13809] usb 1-1: USB disconnect, device number 46 19:10:18 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2526.296954][T13809] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2526.558610][T13809] usb 1-1: Using ep0 maxpacket: 8 [ 2526.688042][T13809] usb 1-1: config 0 has no interfaces? [ 2526.693791][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2526.706114][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.720426][T13809] usb 1-1: config 0 descriptor?? [ 2526.966406][T13809] usb 1-1: USB disconnect, device number 47 19:10:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x86030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8923, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]}) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030367", @ANYRES16=r4, @ANYBLOB="00022abd7000fddbdf253fcc642f020000002b3cf7b0d044f14d88000500030000004400035f31000000000600040007000000060007004e080001000000140006050000000000000000000000000000000020000381080005007f000001140002006d61637365633000000000000000000008ba7200a80a00000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a16e02b3", @ANYRES16=r4, @ANYBLOB="00032abd7000fcdbdf25040000000800050000000100080006000000000008000400ff0000000800060007000000080005009c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x393}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40844}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c080}, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000080)) [ 2527.293648][ T2574] usb 5-1: USB disconnect, device number 73 19:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000080)=[0xa6, 0x7ff], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r0, 0x3f, 0x80000}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2527.365063][ T8581] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2527.400673][ T8583] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='o\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7000fbdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x20}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x40}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x8001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb6}, {0x6, 0x11, 0x9b2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2527.478415][ T8583] 8021q: adding VLAN 0 to HW filter on device bond558 [ 2527.490477][ T8586] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xa20000, 0xfffffff9, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0903, 0x5, [], @p_u16=&(0x7f0000000000)=0x1}}) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x50d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x217}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40f2752a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fda6f42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f028719}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49d7353d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9442}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x553ad5f6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47d24bce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e2d798b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b19}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72538207}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcb447f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7951}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1aa7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb60c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32638f32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x217c8805}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd654}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb87711}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc07}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa83b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75b6994a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x223d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe771}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x221e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46f475f3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa06a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a59bd61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cf5b2ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a7e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x604b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce5b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x631a46b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dfd84ff}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 19:10:19 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$setopts(0x4200, 0x0, 0x2, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000340)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000300)={&(0x7f0000000280)}}, &(0x7f0000000400)=0x18) r0 = socket(0x4, 0xa, 0x7ffffffc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000004c0)=@req={0xea, 0x1000, 0x6, 0x1}, 0x10) r1 = socket(0x1e, 0x807, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req3={0x1, 0x8, 0x20, 0x0, 0x5, 0xa2e5, 0x41}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x100, 0x7fff, 0x5d7}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000500)=""/172, 0xac}], 0x1, 0x3) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x803, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040), &(0x7f00000000c0)=[0x401, 0xd569]}) r3 = socket(0x1e, 0xa, 0x2) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000480)=@req3={0x64a, 0x2, 0xaab, 0x1c, 0x5, 0x2ef, 0x2}, 0x1c) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x0, 0x4, 0xf, r3, 0x0, &(0x7f0000000040)={0x9909de, 0x80000000, [], @ptr=0x2}}) ioctl$GIO_FONT(r4, 0x4b60, 0x0) [ 2527.803577][ T8590] bond558: (slave veth2273): Enslaving as an active interface with a down link 19:10:20 executing program 3: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000001440)={0x6, &(0x7f0000000000)=""/4096, &(0x7f0000001380)=[{0x5, 0x19, 0xa8, &(0x7f0000001000)=""/25}, {0x3, 0x91, 0x8, &(0x7f0000001040)=""/145}, {0x400, 0x7, 0x4, &(0x7f0000001100)=""/7}, {0x9, 0xee, 0x5, &(0x7f0000001140)=""/238}, {0x7, 0xae, 0x1, &(0x7f0000001240)=""/174}, {0x3, 0x41, 0x0, &(0x7f0000001300)=""/65}]}) [ 2527.867232][ T2612] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2527.869762][ T8583] bond558: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:20 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) dup3(r2, r1, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r3, 0x4b60, 0x0) [ 2528.115497][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2528.194082][ T8644] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2528.214798][ T8666] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2528.238932][ T2612] usb 1-1: config 0 has no interfaces? [ 2528.244567][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2528.267854][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.295038][ T2612] usb 1-1: config 0 descriptor?? [ 2528.382628][ T8669] bond558: (slave veth2275): Enslaving as an active interface with a down link [ 2528.411669][ T8670] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2528.554661][T13809] usb 1-1: USB disconnect, device number 48 19:10:20 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8800, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e21, @local}, 0x91, 0x0, 0x0, 0x0, 0xef8, &(0x7f0000000040)='veth0_to_batadv\x00', 0x3, 0xfffffffffffffffb, 0x1}) 19:10:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x88400000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2528.712722][ T8690] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2528.829835][ T8690] 8021q: adding VLAN 0 to HW filter on device bond559 [ 2528.854519][ T8693] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2529.023327][ T8695] bond559: (slave veth2277): Enslaving as an active interface with a down link [ 2529.086720][T13809] usb 1-1: new high-speed USB device number 49 using dummy_hcd 19:10:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000080)={0x1, 0x2, &(0x7f0000000000)=[0xf, 0xbef6], &(0x7f0000000040)=[0x9, 0xdd, 0x1f, 0x3], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2529.123089][ T8720] bond559: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) r2 = accept4(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x800) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) [ 2529.346656][T13809] usb 1-1: Using ep0 maxpacket: 8 [ 2529.399183][ T8732] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2529.442712][ T8695] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2529.496684][T13809] usb 1-1: config 0 has no interfaces? [ 2529.502494][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2529.534679][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.573231][T13809] usb 1-1: config 0 descriptor?? 19:10:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0xa2041) syz_usb_disconnect(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b60, 0x0) [ 2529.615541][ T8751] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2529.717713][ T8760] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2529.771151][ T8764] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2529.866285][ T9549] usb 1-1: USB disconnect, device number 49 [ 2529.966815][T13809] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2529.989943][ T8764] 8021q: adding VLAN 0 to HW filter on device bond560 [ 2530.148430][ T8766] bond560: (slave veth2281): Enslaving as an active interface with a down link [ 2530.214253][ T8789] bond560: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2530.236457][T13809] usb 4-1: Using ep0 maxpacket: 16 [ 2530.377224][T13809] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2530.412896][T13809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2530.453265][T13809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2530.467892][T13809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2530.491658][T13809] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2530.511885][T13809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2530.525049][T13809] usb 4-1: config 0 descriptor?? [ 2530.536625][ T8807] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2530.580843][ T8764] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2530.591087][ T8820] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8a000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2530.732864][ T8825] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2530.816481][ T9549] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2530.822933][ T8825] 8021q: adding VLAN 0 to HW filter on device bond561 [ 2530.991143][ T8827] bond561: (slave veth2283): Enslaving as an active interface with a down link [ 2531.074397][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2531.079777][ T8861] bond561: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2531.082787][T13809] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0007/input/input905 [ 2531.181075][T13809] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0007/input/input906 [ 2531.216554][ T9549] usb 1-1: config 0 has no interfaces? [ 2531.222287][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2531.253856][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.290030][ T9549] usb 1-1: config 0 descriptor?? [ 2531.301337][T13809] kye 0003:0458:5013.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 2531.469683][ T2612] usb 4-1: USB disconnect, device number 97 [ 2531.591104][ T2574] usb 1-1: USB disconnect, device number 50 19:10:24 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x3, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2531.733405][ T8827] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2531.922601][ T8892] bond561: (slave veth2285): Enslaving as an active interface with a down link [ 2531.954841][ T8916] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8a020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2532.026010][ T8923] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2532.089712][ T8925] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2532.186771][ T2574] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2532.230562][ T8925] 8021q: adding VLAN 0 to HW filter on device bond562 [ 2532.256591][ T23] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2532.412913][ T8927] bond562: (slave veth2287): Enslaving as an active interface with a down link [ 2532.439997][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2532.477321][ T8961] bond562: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2532.500927][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 2532.556770][ T2574] usb 1-1: config 0 has no interfaces? [ 2532.562306][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2532.616607][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.628014][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 2532.652321][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.673865][ T2574] usb 1-1: config 0 descriptor?? [ 2532.681011][ T8925] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2532.700826][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:10:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x92010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2532.740851][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 2532.774423][ T23] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2532.800920][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:10:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2532.854359][ T23] usb 4-1: config 0 descriptor?? [ 2532.871088][ T8977] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2532.923539][ T4569] usb 1-1: USB disconnect, device number 51 19:10:25 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x3, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000001c0)={0x6}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x2a0000, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x40801) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x7f, 0x2, 0x0, 0x8, 0x3, 0x4, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r4, @ANYRES16=r2, @ANYRES32=r3], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x840) 19:10:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012c3d7000ffcbc6faa0ad08df25060000001400040076657468300000000000000000000000d936ccd6a87c7f1327c43f3fe2d87e84961e6af3e288caaa5ce567c223deb762e3994fb207237949de0431de94e1ba12ce69e6deaaade073a5e9a9e4c03db2a1798d5799edacbbeea9d20624a49a4b85d15be6662831809a14fc108232d85c2588e480b9233dff443aa2c5fcadb76acc4d7a5d83192900000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008841}, 0x1) getsockname$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x20) 19:10:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x16) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000800e1ff0000008007004000f3fd485de19674edbab8f8336574b7dfd2030a53950c53672fb1e29c16d43072943d8c34ce08a1c60f911143e418c44580014b6f09411714e746a8981605c90e0f51"]) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1002, 0x1], &(0x7f00000000c0)}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000080)) [ 2533.112358][ T8977] 8021q: adding VLAN 0 to HW filter on device bond563 [ 2533.119601][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 2533.130094][ T23] usbhid: probe of 4-1:0.0 failed with error -71 19:10:25 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) 19:10:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2533.216661][ T23] usb 4-1: USB disconnect, device number 98 19:10:25 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2533.365374][ T8981] bond563: (slave veth2289): Enslaving as an active interface with a down link [ 2533.407818][ T9007] bond563: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2533.633632][ T9018] __nla_validate_parse: 2 callbacks suppressed [ 2533.633642][ T9018] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2533.652371][ T8977] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2533.707071][ T9063] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2533.716285][ T4569] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2533.956192][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 2534.081274][ T4569] usb 1-1: config 0 has no interfaces? [ 2534.088111][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2534.115183][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2534.145157][ T4569] usb 1-1: config 0 descriptor?? [ 2534.409430][ T9549] usb 1-1: USB disconnect, device number 52 19:10:26 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, r0, &(0x7f0000000000)=0x4, 0x100000000) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x994f74f2, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2534.553967][ T9078] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2534.661846][ T9078] 8021q: adding VLAN 0 to HW filter on device bond564 [ 2534.693737][ T9079] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x800, 0x5, 0xff}) [ 2534.810600][ T9084] bond564: (slave veth2291): Enslaving as an active interface with a down link [ 2534.881971][ T9119] bond564: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2534.996123][ T9549] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2535.116080][ T9120] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2535.150248][ T9078] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2535.260130][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2535.400544][ T9549] usb 1-1: config 0 has no interfaces? [ 2535.407056][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2535.418923][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.429414][ T9549] usb 1-1: config 0 descriptor?? [ 2535.674272][ T4569] usb 1-1: USB disconnect, device number 53 19:10:28 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x0, 0xfffffe01, 0x3, 0x1, 0x9, 0xff, 0x80, 0x6, 0x8, 0x81e5, 0x7, 0xe57a, 0x80000001, 0x2, 0x7fff, 0x4, 0xfffffffb, 0x6a37, 0x401, 0x200, 0x0, 0xe83, 0x0, 0x1ff, 0x6, 0x80, 0xe84, 0x8001, 0x8000, 0x8, 0xff, 0x1f]}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x1010, r3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000180)={r5}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="20002abd7000fcdbdf250908000008006e800fe17bcb404a0b2e026b0495"], 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x20008000) 19:10:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='net/nf_conntrack_expect\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) read$FUSE(r1, &(0x7f0000000000), 0x1000) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000001040)) ioctl$GIO_FONT(r0, 0x4b60, 0x0) llistxattr(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=""/213, 0xd5) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) recvmsg(r2, &(0x7f00000024c0)={&(0x7f00000011c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/111, 0x6f}, {&(0x7f00000022c0)=""/253, 0xfd}], 0x3, &(0x7f0000002400)=""/136, 0x88}, 0x2) 19:10:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x9e030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2536.045013][ T9148] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2536.065180][ T9152] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2536.127551][ T9152] 8021q: adding VLAN 0 to HW filter on device bond565 [ 2536.140098][ T9155] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2536.264669][ T9152] bond565: (slave veth2293): Enslaving as an active interface with a down link [ 2536.288716][ T9169] bond565: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2536.386069][ T4569] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2536.411356][ T9199] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2536.459272][ T9169] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2536.472883][ T9204] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2536.476737][ T9549] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2536.656047][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2536.776348][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2536.927744][ T9549] usb 1-1: config 0 has no interfaces? [ 2536.933856][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2536.945039][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.960787][ T9549] usb 1-1: config 0 descriptor?? [ 2537.057077][ T4569] usb 5-1: device descriptor read/64, error 18 19:10:29 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x5, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x482801) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) mmap$binder(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1, 0x11, r1, 0x3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000080)={0x37, 0x2}) 19:10:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010004000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:10:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') pidfd_getfd(r1, r0, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x40}, {0x63, 0x28ad}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000600)={0x0, 0x7, 0x6, &(0x7f00000005c0)=0x800}) read$hidraw(r1, &(0x7f0000000280)=""/147, 0x93) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000cc4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000580)={0x8, 'bridge_slave_0\x00', {'veth1_vlan\x00'}, 0x1f}) [ 2537.208635][ T2574] usb 1-1: USB disconnect, device number 54 [ 2537.284515][ T9223] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:29 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/61, 0x3d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000140)=0x6) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x2, 0xdd, 0x9, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000040)={0x2, 0x2, 0x3, 0x0, 0x7, 0xff}) [ 2537.326752][ T4569] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2537.395118][ T9223] 8021q: adding VLAN 0 to HW filter on device bond566 [ 2537.409724][ T9226] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2537.475700][ T9233] bond566: (slave veth2295): Enslaving as an active interface with a down link [ 2537.513293][ T9261] bond566: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2537.606397][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2537.640245][ T9272] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2537.681483][ T9233] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2537.697153][ T2574] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2537.747771][ T9223] bond566: (slave veth2297): Enslaving as an active interface with a down link [ 2537.936589][ T2574] usb 1-1: Using ep0 maxpacket: 8 [ 2537.996541][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2538.056474][ T2574] usb 1-1: config 0 has no interfaces? [ 2538.062066][ T2574] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2538.073869][ T2574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2538.084427][ T2574] usb 1-1: config 0 descriptor?? [ 2538.117368][ T4569] usb usb5-port1: attempt power cycle [ 2538.342862][ T2574] usb 1-1: USB disconnect, device number 55 [ 2538.826542][ T4569] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2538.995981][ T4569] usb 5-1: device descriptor read/8, error -61 19:10:31 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010014da2108ab12a190eb09197d7e715025fd000000010002240001000000000904410002ff5d010009050f1f01000000000905830300dfbe566c4f"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa0030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x480800, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0xffffffff, 0x3f, 0x40, 0x4f51, 0x6}) [ 2539.106821][ T9306] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2539.115958][ T9549] usb 1-1: new high-speed USB device number 56 using dummy_hcd 19:10:31 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2539.216601][ T4569] usb 5-1: device descriptor read/8, error -71 [ 2539.273758][ T9306] 8021q: adding VLAN 0 to HW filter on device bond567 [ 2539.291911][ T9309] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2539.382185][ T9313] bond567: (slave veth2299): Enslaving as an active interface with a down link [ 2539.384486][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2539.408329][ T9340] bond567: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2539.518874][ T9361] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2539.539055][ T9549] usb 1-1: config 0 has no interfaces? [ 2539.544891][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2539.563289][ T9313] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2539.572937][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.587584][ T9549] usb 1-1: config 0 descriptor?? [ 2539.716970][ T4569] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2539.815740][ T4569] usb 5-1: Using ep0 maxpacket: 8 19:10:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 19:10:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xa2030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:32 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x0, 0x0, {}, 0x0, 0x0}}) [ 2539.837506][ T2612] usb 1-1: USB disconnect, device number 56 [ 2539.855983][ T4569] usb 5-1: too many configurations: 113, using maximum allowed: 8 19:10:32 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r1, 0x4b60, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) [ 2539.922168][ T9386] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2539.957596][ T9389] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2539.980481][ T4569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2539.992326][ T4569] usb 5-1: can't read configurations, error -61 [ 2540.012896][ T4569] usb usb5-port1: unable to enumerate USB device [ 2540.059395][ T9389] 8021q: adding VLAN 0 to HW filter on device bond568 [ 2540.071115][ T9394] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2540.167409][ T9402] bond568: (slave veth2303): Enslaving as an active interface with a down link [ 2540.195049][ T9433] bond568: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2540.306221][ T2612] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2540.344913][ T9389] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2540.557458][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2540.676562][ T2612] usb 1-1: config 0 has no interfaces? [ 2540.682134][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2540.700054][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.709867][ T2612] usb 1-1: config 0 descriptor?? [ 2540.951494][T13809] usb 1-1: USB disconnect, device number 57 [ 2541.746007][T13809] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2542.035785][T13809] usb 1-1: Using ep0 maxpacket: 8 19:10:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="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", 0x1000, r2) keyctl$invalidate(0x15, r3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:34 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d0100091f010000000009058903000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000001c0)=""/196, 0xc4}, &(0x7f0000000300), 0x4c}, 0x20) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000815}, 0x2000001) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xac030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2542.166604][T13809] usb 1-1: config 0 has no interfaces? [ 2542.172216][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2542.202081][ T9461] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2542.212281][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.244328][T13809] usb 1-1: config 0 descriptor?? [ 2542.255499][ T9462] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req={0xffffffff, 0x1fc, 0x6, 0x80006982}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0', "c3ed21942c72c840472d3e49eb743e64e19bfd382b9f71846e46095e757345c4c7f6ec363eaca8b9ecffddca181933b97f75592ac8f942fe365dde9aae0037aa7d38a4f33b0cafc944d02222215d102f712c50b74e92d8283d15f35149d9b6a2e85d9e7c94c48e7ef7842a729a3e7fae12d251030386f9d40b8eae69824b2656582a8adf8b5bb2667afbc9010541d5ba8f2ccab1"}, 0x98) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0x101) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) connect$caif(r1, &(0x7f0000000180)=@dgm={0x25, 0x4, 0x8}, 0x18) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200040, 0x0) [ 2542.437294][ T9462] 8021q: adding VLAN 0 to HW filter on device bond569 [ 2542.504360][ T2612] usb 1-1: USB disconnect, device number 58 19:10:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x7, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:34 executing program 3: r0 = msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000003c0)={0x2, "fd654aaddf7c04cd65961ed2b6a20e36d1839816495c77c766e2a552044f79a2b590d34aa614ecbacc9220b65be4e28fe516d04d3543663720d9d07f42caa88ff3997edd00f76f54f2e87e31009c000000f54e1f0000fb837e9041951fe606124dcddff5da5542387487e5b248af16448a10a91d40c3a64257eba42403c4ed823003affaf7b7efc8f52be0fd7d42898ba94ab49dada76a16edbbedc9dd64608fb12bb894f9a1baf65602365d9bc2098346deb0c4e3c532f08b51b2be7131660ab7999a6ac059660fbaad084477a29e24fe9648d9223db10f454db0b568e660dfd0620be236bd754d5713c09d3d02c0dd43257e0c"}, 0xfc, 0x0) msgctl$IPC_RMID(r1, 0x0) msgsnd(r1, &(0x7f0000000740)={0x0, "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"}, 0x1008, 0x800) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_RMID(r2, 0x0) msgsnd(r2, &(0x7f0000000740)={0x0, "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"}, 0x1008, 0x800) msgsnd(r2, &(0x7f0000000280)={0x0, "b48d7456592ef064d2b6f96a88514ad93ba49524dca7a4c44409af25320b1a3999c843d81ed06ea47fa827feaafa19fe009eae7e77c74f98bb7ad649a311bf9071e8336129a755cf15d782df513e18059aedc6f2ab9c55bc804187d56d84de9824fe98d9c62cc7f8b0b4109165857ce8dc8502f213a1ddad75533e5c78934699df7be483eb23ef1f8e92ebc346b43d664008e6b95e9121dfadab03f2f34875d44d0619cb6b0c276b"}, 0xb0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000740)={0x0, "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"}, 0x1008, 0x800) msgrcv(r0, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x2, 0x1800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f00000000c0)=""/38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r4, 0x4b60, 0x0) [ 2542.615696][ T9549] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2542.638280][ T9468] bond569: (slave veth2305): Enslaving as an active interface with a down link [ 2542.653911][ T9469] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2542.727408][ T9474] bond569: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x500, 0x0) 19:10:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000000)="cef3cbfcdd20a4e4ac3145a90f7575e52652a30bf678ff4b2e5ed06fefebfa053b1ad2af62e7123f56e7c975aec630d5c4aa6b79f18c25cc54fc074ebfe96dc9e84b2cecce8a31c9d0dafeae947fbadbed96f645e1f8dbffb9f0758f329eb19a491ab21688fae9b1602dc26c27a110a5590828e71cc27eee96694ec81bc4303f6f9044516caf1f9de120d5f89df957f503d66567463a9f7e00e058b4c10922f55d288c325dee6a619b56d031c2d7f2ebfbc41115287ce63c8d5a8290a83812c489f37677f93150cc231e39477f85de683cd10efdb6260267a52522baea9d63451892ada4105930c0ce8de95d91e906d74b2b", &(0x7f0000000100)=""/207, &(0x7f0000000200)="21e15d656e2fedbe8db86b882774a3061cc690f8d72dbcb4bd3a00f3683850a86ee383998dd8e00e97ef7254a1b415134994a87e4e6cf0c76ad138a46505f6aa569f43413d15a8d527c9f9e51ba61cf817fb10f4098b7c8d8044100e7bb3a08f22ce3938261950071030fc2e66bac95a4283990582cb1d8f9b418a070871781ab1fd5cb4628034675c6ce55eb99f9e", &(0x7f00000002c0)="fc44173b270726e0c240d5eb3f61320006db0bebc737ebdd2ca8a0bac1843048906ff94c1acb129deb3275b5da0f869e1bbdb3f3dba1e5f27c01de1ea7c6390b9c0b1b5183c661369ae08de7ed3e9600839ad630b196fd3573c9f40c2838c540e82c3d307c1409fb57e0949cabe37f3fbf50674882a1410b", 0x80, r1, 0x4}, 0x38) [ 2542.885986][ T9549] usb 5-1: Using ep0 maxpacket: 8 [ 2542.910804][ T9532] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0x3]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2542.951427][ T9462] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2543.005641][ T9549] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2543.014362][ T9549] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 2543.015507][ T2612] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2543.061877][ T9468] bond569: (slave veth2307): Enslaving as an active interface with a down link [ 2543.072206][ T9549] usb 5-1: config 0 has no interface number 0 [ 2543.085776][ T9549] usb 5-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2543.101593][ T9541] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c0000000a00ac0038e5eddfd26c0080240800002000028014000280100001e72afccc0000000000a60000000800010009000000ac942d1a3e66733658f6da366a9bfb66d0f5625b9214da96ece93f54b79bc032ac129c2e00453ca83d1c191b8d9131e387b1b95ac2049df97c76769f292aae328ed9e8363cc19a164ea1d77613b77d10b858d1bd6a834cda6b577269f51de97e727223bce566284935b60226b499486a3081a508cb13560807ed6903cc03ebbf57b38bbd8f0f81acd0802f4a68fa29cd04dc21398050c38e70b530d41deb6ebb9abb2c83d12231a8565f5e0486"], 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c130000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf250c0000005c0003802c0003801c0001800f0002002f5c2fc42b2427293423000008000200262e2a000c000180050002000000000017000400c68072e3e915af18550d6f77dc7136eee7c1fa0008000200e30d0000040001000800020009000000280103800800040040c913b0a5000500931b0e93be27a827fbf3cc369b5cb703b26772ba394910c6b42604cb58ddfbc1c22acdf0887808a298da3b3a23518e9fb74a6cf6e57a35069d2f7fdc39cfbe26f4ab7162f0ed32659573a012ed76a965d0618bc78c8149f414fd5c3ef515972e2becf752343e580efad940c72817deec1d8da05d2111890554b4ac8011eda999fd8e323575f19f384e8fbb2310a5d2b72a0210c5a0178a9b5988f6f367bab20ef300000049000400d439931d6b743cbd8306d06aa1a57c8a0a1cba32d3232f1026bc6075a492faaa4adf1bd6235b0d3b7a3871323613fd9828c0e55b7e3682386b3f72709aaa989e8724632c3700000008000200020000001e0004002292100675c3e55e1f3d7b712f7af33f51d12b95369857b2aed600000c00018008000300000000002800038012000500bc6d315097bb08c7e5daf4315f8e00000d00040028c930ce2069847c780000002c1103800800020009000000080002000100000004100400c9627960621443c1c9d29c97046debaa952702b4562bb951bffb06631e261ef4483eeb7e80a20d3de383cba32f720fbba2028202e078ca2f2666bb136c32cac7062caa98ba7987f2af45c581f4a53a79e29eea2e174a4bea96fbe910818c9728e642eb565791039cf0dc9f63d627217f244dba3710cb2f587292fe767dd68d1af769f2db3af573da704f7cc8aa1ae6a7b219d67ca9e2a3ca35015a8ead9971fe4785a0a1952d447275dde7f6f81bcdf0c255b80a130900b405e5f116a97b40c75dee8bff0439f421a6d74c15dea17204281c5ef55a25aaf6f23afe90aea58b288ddf8e023dc07f5d6fef8948ce731a17e524a94e8f2884f01d3ad33d83e9afa99a0bc75af5ca9f18fe24bf069d46cbcec61373401489190e19a7ce5d5a2e3bdb330d30a44c3066f4751189a61b689315d9c373f11bb021e976b241f198dae471ab8f34e7975319dd1d9c0f21e4cdbe915488769fadb7d5c5e8c5dcf4ade09d8dad20f6f929f18b1312addad62d0e2cf549f8ccf1aa0c3d84aedd863960645a56f416edf2859f8652691765b6a17fe753bb0ff38d34c3eb67422a018abba2b47abb0b5eabb63dff0f3f71bfdd957e0313a3c310abbe505f1896a5ee0db359907283bd0002ea2edf230f13206c4e1aae77db5a87b4bfea9472572910b85451120caec0bae61abd51e114726b044e446a0f1574a376cf57e2126e76654c2d2d92579357542441ce7a561bb3716b95359886df8ca08972a53a887d52099c0075d4d53a3971bc83eb97d57c4af7651963f520b5283f8f3387e74f4c031ab16f4c37b37e5e3fecc98bad448f12a21092aeb7c990de8a0cba79b7e1e62087ee79f85a87f4cee8d9b3f0789f98845de062988b32b5b0d54d25e3424a0e1811f8fc4c03753335764d94b74921087981b5ab6f20fd597618ce6b50cfacb9242bd1e86b47ee7f65a8ad07bbb69bac07abf52ff51c9719a53a76f60127960a2881416a2ca7e9568f19673cc2ec50f53608c535d5d8b5c03df510ce1a8751b60e899d42dc34a5e0cd35c2a933c404c1d3f1bbd23bf9c426853d64c8be8787e36e01189dc043b195b61638a314ca58f0556d5d68fb1d55ad4c62672d42837f3b0cc91ae7d6fdf5756b8ba4c266c6e160ca67e83e737afdf2992fcbe12de18a107adba50aa48c8200442a7d50b3e4573ed54be92589641cd828accf154e7bcb7e635025fa425852d557397fd65991b606a527253444c6209b680efc62cdff924666e2b70f9d73bf40e555217d8cd7b85c98be2d619061dc39a72691feb5a0c0d44a6a199090e1cc8d8e5eb021842eec49c8450f9fa6fd9b76f6045565dd809f6088fc59d6cd83c9b8109e636881153944e5feaf509722f1e22281c4747a469a2d7b6f682a902ccdcbad307aaf546df1691cc42a1c2a2fefb5d45a6a85959a072ec35dac5d87b6b4cf8530f3a1c8cdc6f9a24c9697a1d4e775a561d489032c60fede6320b7f96da012ad4f4d950c6692925b781834954dd850fc1f4b8f57d91e0a7082bc3a508028beac7f4a89330ef5fd7b7e2aea75b3a2f7a3baf9d433c553cea3217917b8e1f7742c4cee9e8fa4967ef0cee55a92c937de75e0ab2511e20e080f42279b091a015a0c2491e8faa27bdd3dcbfb1a04be29e7807488a965db23bb774a2e799844df3b7993f01dabfa30d2765afdc8475971ab179a1829d966140dd1b7bf08f92ef1695ecfb846de7c1823bd695ef162ff387a8d5dc346abcc245256defbfb530c55265870157bbe9b4f13af311bd84a8d8643e37b9bcb7e01261594edad966418af555d8262253c30460fdab88da2791ecf5909fc27f5c95fd8ef7be4b6c33e8b2a778f0d9e977653219706a399f68fae2dde08bd1d671d5e1da01cf9bbf5693b2da586bec97f545c9af2fc2b55f83314a7aefb11480810bbf164fe941cea2d2648580ddc5e0e9f8cb6a83b018974340d8f43d7947930210fe0a3480ab6bb58873ea36a1aa311ebf242d870f8809b15060c9b8ad806bec984b3f5b9e3d6a0a687be6d12fdc43b8dbc19f807616fb7ddb51d07e748a83e99767893239b544020992ec8e4977172ba8f6cba34f6eb04cf1ac959785b32854571c27f067578fb6421401dcfafdb4f1e6328bc1184408c5c3045fc4dea6ecb1c7e70997ec9c2abb9161a14a2939d20fa6b4bef5ba48d5493ff8fa659b3e73fa6db91cf0b338f5a2643d7dff86c65a80a02a4beee2a344ee52f6d4df8538119de10819d066fce29225c79db0e836d72d50ec739654715e62459f00200f0445e195b8a5e50a889dcaee7e32cdfeeb211d6d7b494b0942bbdbe159bedbae266613a008a950b5cb882e2d5203c9325298697b4a13b1c613f4b0930d83bc3b5a9fbea0afdb35b2d32d01b3ec4b91ad46139cdbf812f74e3ce4b53487f62270cd2f801e18bbd1a80782899d52a4a54d5e737e330f5686209f6e60a5878a4a98fbc8254c8977cfc5c91f51ed074d67e0a432c28c04e004a02907db98e09c1925858402a411fa0063ffdd8d03c6bbf8f3d0719c54c51e6f37c910a042ac132afbabd76860e791ca61aad87828569ed7512f9c5bbbfff4e396925f15a5ebd643dbbb310752e55fb9dea25875a3a55c5bd0dce40b52d2430ce214718b6a8a05d57aa4eec73fb245c2712dd7affd4ae4d846215808f606a6516dd4b02fb7d41ed2906e37c70aec72f7867576a48e98c2bfb5979dcb55b979039a45248310fb328fab08d47e5b454be34d856a88637d65ef98c35fd5785fcf9deb02566e4c2ecbfca63dd72f5bf2380c390cefc719ca18d3e861a7184b889c6bea4f5ad36281901dece060946c3d33e7319c54e6e48fbe2bf4da0a87596a108757df8a7fb2b6cfeaf84c80cb1dbb608e420a2370578fb1cbe5794e6fd443a270176f7db8eed445207387ba1903de0748248bdb2a433f3a5c9212c7706f3c8ae13921e7ca14cdee249a8973f367e3e05c4b16589139b7c8d14180bd1749deb667fdd7682b7a037a2af2bd8ebbf25c6a3fa90cc002ed1bd42f1f5ca4858beea7f01b466707a8e7a08016ba2bc5b20307599a6387146d25d3a5a8eafee7f156cb55aacb53d99b536847e7d7257ec36f89eff07cd75a5abebc2ac68226256adeeb9054abe7b027739d74e3eeb4e59e2e34ca2688cd34ec8efcbae7d74b34aa954d414ef4e8d110d8a5c6fa5e855720e4d95237727d7825765ac2607559dbde8fff09fb364ce7f4684bf9868488bb2724afc35a74e13e5c0e586d311be96cc330a2bebb36cf68084da2329914f96c7880155a7799e90b1b8379828ef705ed185a6437e792fc70a1cd79d3485a381409e6fc50ba5873d4d16235cec8cd4bf00857f8907542f1f181d5c0ee66d593613933df2a67db647be225fc6e0b7459d38110cba208b9ad12bf0046dfdae6c5157d1db909aae3ce9f5e37cf01afa315e7b5a6f69dfbe9792cf04379bf50d9f241dd41009a080341078ef7bf4924dbd27841167c7bf471f841d4609436cfa54965d7a0915cce2c5bd4fb0c4bd3a64be7aafc347fa2aed6a88518fb619d292f9e56111d9cc3b6c5a96769d3985b5e9819db0099f863976bf58e73680605db44f3a5212a734c8f65ceb0556a57d4ccd669f11af6b29ac5b0d33d6d180afeab084b355efb3cebbbaafde92211119a94302d34e514fc0f99d26d4b9caba15672ff9b722a4c41a5c43c79d1006ff96ead52e1818e2a6e543034c8369b915d3e1b599869bb68d64a9aa8b349813391b667a53567a4dba3f699d584435037567ff5b58d5db18858e02de3d3e041f95cd8e2a267244207fee22b92bdd36d4c6c598b13a68ddba60331b4548ab2e4c914bb301de13c2093b8fe61702ebb1af922b1f6a397d4d4bb561588c484e56db88fa393743ad5548fa0bca33523f4ccab8c629dc211a9adf39e0a0625eb05bafca10a8818178fbcec73379f1aaf44cad22b80228406ed4a9a79f8d07eb6504d2f92cc87f16a5e740ccac7f86725e623f2df4bc371cbf82f4fb0e91392e5cfbc69d2f2d5f64cf5ca9c3c8be0a48c0ec1d7e81be919975e29be672372174a92b1f77e11dbccdb69f219564cdc11147e494c598ff3361e08b62dedc8c911731444e40e8e59f4b65baa6e2791716a00bb9723662acb5111bde7ba362b8082e09fd6c9b9e576fba2a5b825c040731a6485bdcbcca5332ab6710b4e58b93aaf778f45931b2526d713aee5c4368874a6560c88a5a78b80c37f1a700fbe10c9d5ec10e117672e36508718e5905d5edf35e733e5b4886a9a5889a7f30d895ba071c4823c8bad2c15b3a9c750949189f38f52eb4924abf1d47a59e4d0bd868b3ae0222e3c8a1b506c050c57f3c7167e6ac8c08ab0d1665261d157320f156998e4444c20e27fd67587bb2cc83c9ef26fbfcc280ecb2df6fc12744c5e13676ff3418a1be5e25a3346a3f2f4a7e81211fe8f77a5bdfab7fd4956df71fc947555d5a2aac179d8a12126566d3728ff78b8b379ac4ed03c4fe2a996952a0556d749e34c6f4332dca8cdfa6af895f6c2e3b9d00dfdde8d4b78203ce5026dccf1f9cb947cfcfb64e5a72a7a0814bc349b799298ee02d6032092d1267ebf30df17cc1ed12137efd7302a5c0f30c63b13f623f657e65e193c4847975ce3b3ae48914e807b32b326293d429d7b0d018cdbaff1efb4ee5e4521ce98d5384fbc31856d63d645ee7e3237b46defdc1fc5b68a8889bbf7fb59ab4d176f3c11f3f3d9d11349dcaf42efbe3e334084f9d6acb6bbb1afd21cce183908cc7ed264479954cacbcaa8f885aac1d2fb6c287f043a04094a869f0f1de0ced6c81dea55dabad04f32621af27d35c7e2ed8d74854ab12df5f96f3d4e4cc880f57cb7ecf49822655678b051cc466f6c0b3a0f32b89fd38af4a193532a87c87e151ac4c4b713f246cfb52a073be748808074b98a0bf9b07c6fd64846a7a5817b44b14f372db0162d726279426baa51172ae72f212b1b251aeb3d3f5d803b31f3770a96551760428422de2c5f76dad6ede006023d0e588669666e618f03859738d3e509e7d095c372981a08ab2a6465dd8ac4e9bdfc0f535b1749a3ec5aec347acaed5bf970af8ee0268a46aa75cdd77a8c548e8d62628b0cbf7160a8abd52a1393e2cbab1f525044a9b94afb728e82aa6584799ae817f160b56f5d449c87e8961b07976e0cf96e2ed4b6c111c9ef301f0b50e36e466ad712d40658e075cb4dc078c453efe666a1f32d1b62f8219288e96375433d74afb4ea91f56b1011887e6e272930fb552cec319e5c0186a4a493be606f4e0b68aa189a3ee1d72896a38d067b487202e0db6bad00d53c1de942770b43e5e2659d8af73f2ceb1b2ccc17f931536ac9d8b7b0453a71b28712a9ff8e74d02fd890b00ff649470697fc5d64a9543968363f1210b6535b6039f5fc00810c2e8b1f73eff552080e11bc91893d4a68fe2d96102cbb403262e368751d82dc1bbae5396b2a46da92d65a709e90d3d713b2d3ebdb712610c3ae0df1ebdb6efb4350d68036b820ef3bf49ba90fe9c0d3b4790e59a1daa45976de1945a3331aca104a88e7637dc2afe8a75e62b90d238a7d266a9cf5623a44b8262de2f82355797c03c9494db6831d5db4dced7fb649cb81b5d247a7750e048fa65cae63a5bc5a41598351b00f8f20e57c24eb009495737a768e4993d6238a67dc90fcc995dc6b7fe408cd074d920951a670127a5ab1d36c780bc2d70dbfe04da7ed3ce7732b84047b52ad82689b4b39ec0515a19a627d938f94e48fb4b256c5fe711dc3d3a5e539d8f2f249d0005003a6e1ab8d7bc5cd7db23d33f612c46a7754284bea5465402d4eb13b51d62b6fa240e8a05f765326413a50db6ccafd70f2a9f77967c1c719b500fa33f78f87320f8d057172a7df385ace50dc8b937755fd36c3744fae6e7952bc55a13dff70c07205909f778584fda6726812fca2d662edf8e876e4ae16d1b4f7ff67fd47042996c68edd4d791d6edf6468a016d7b7070fd8500e48f431162f7000000040001002b000400548f0e15ea96dae05ac4d46b4ffd4a47edb69ec900ebd466e6e35716284d3ace43437f8b36def90044000400ce3ab46d1bb393776c2aa7243030d5e6fe199ab2dac4e02af54cce995fd8bca563e20de02cda05d29dd5c85a7c599a46760ac60825af5d32d947f9dfb55b19034400018008000100", @ANYRES32=r4, @ANYBLOB="0800b368", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000300030000001400020076657468305f746f5f62726964676500"], 0x133c}, 0x1, 0x0, 0x0, 0x40448c3}, 0x20000000) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2543.111594][ T9549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb 19:10:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xb6020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2543.154363][ T9549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.195040][ T9549] usb 5-1: config 0 descriptor?? [ 2543.204378][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2543.285776][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2543.312613][ T9562] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2543.335000][ T9560] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2543.415786][ T2612] usb 1-1: config 0 has no interfaces? [ 2543.421677][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2543.435152][ T9560] 8021q: adding VLAN 0 to HW filter on device bond570 [ 2543.442530][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.459860][ T2612] usb 1-1: config 0 descriptor?? [ 2543.480118][ T9549] usb 5-1: USB disconnect, device number 78 [ 2543.562993][ T9569] bond570: (slave veth2309): Enslaving as an active interface with a down link [ 2543.606327][ T9573] bond570: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2543.705601][T30860] usb 1-1: USB disconnect, device number 59 [ 2543.798730][ T9560] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2543.867257][ T9560] bond570: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2544.255550][ T2612] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2544.475343][ T23] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2544.496464][ T2612] usb 5-1: Using ep0 maxpacket: 8 [ 2544.616745][ T2612] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2544.626571][ T2612] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 2544.638932][ T2612] usb 5-1: config 0 has no interface number 0 [ 2544.645045][ T2612] usb 5-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2544.661600][ T2612] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2544.671566][ T2612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.681513][ T2612] usb 5-1: config 0 descriptor?? [ 2544.715271][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 2544.835327][ T23] usb 1-1: config 0 has no interfaces? [ 2544.841314][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2544.851749][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.874715][ T23] usb 1-1: config 0 descriptor?? 19:10:37 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x42000, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl1\x00', r4, 0x2f, 0x5, 0x20, 0x80, 0x32, @mcast1, @mcast2, 0xf28b13ddc4883270, 0x7, 0x8, 0x3ff}}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r7 = accept$phonet_pipe(r6, &(0x7f00000001c0), &(0x7f0000001b80)=0x10) sendmmsg(r7, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="b8d3824614db6c65e2f6aa2449a5814bfe3139e6bd58a69eb9811ac5811463e29243fa74caf4d311c922725ea2379bc75dd893381ed1891ccc464fe89c5d35fdf9f66a796c272710b30a88c1560f433d078899b1a0019221d4e00803cd720f0e8e02d99c0aac5a9ecfd112a571d2f56261a7252ae8f213c1287cd244c17fb94444057874e44af5eaddc5b70b2189bc7e8a33140eadeb76dbb0257582d43ffd540379b176f16c5aaf913c4371960ab26f2a7aff154435fe853f8baaa8ce6e5c2c22daa17475acd96620359261316c5cd519975e12719ef25172fb7f9ece514dc6", 0xe0}, {&(0x7f0000000180)="549aab1303a5238a54ba1c00910bb58bd2afb24df9bce60e09cfa5a529838e7768106062546499021aa90b31888c2b7a10bd75dabe12", 0x36}, {&(0x7f0000001b00)="53b2b7503f4b2dc5e3888bf95cc6f8bd798bc264faab11b1eadbc9d691a917df46b8de26e80d73b329edb24fc64760e957855ad7167a0d797dea35eae34a49aef1a4", 0x42}, {&(0x7f0000000200)="620a112e180c35c8cacf579f3c085218cdfd62", 0x13}, {&(0x7f0000000300)="bd4d7e11b554f6c75ea5d8318812dc95b58ba4f0158ebfc46079bdcd4e11f90def48394c8dd35d4ebb75aa79128b164ba534acc32a092ce8d5495738df6505785fda59de95fbe7009b55cdda025c66dfa50750810f4706fbc259169eb392a77436eab770e38b3ac1e373e8fa1b9cb4ed277cd9c5b5f9dba5b356e205d1e9c43581243c391aa8d68a7d0383193dac233e001d85125c78bf907ef8cd20c782b09590947f8e590944991079158d", 0xac}, {&(0x7f0000000240)="708935c6a29dbf83d233716183b864785ed67f132c4c3621e4abf5bf7ef55710410efff9a13268e266bcbedd6c3fc281e24349c5fd54481128636265440670696512aa98c02255ea501d56bd8753b6af630a6602b18daf45dac1d432937f7629343f0047f3dcaa", 0x67}, {&(0x7f00000003c0)="801836d4c0ada4f28e1edd0fe617dc91a6c9a66aab47f606e6b2b3b9b4fb6d01c6fd6bd021ce54522dcd5e632b9c4dbdb6525b065174140761b3f5e8425685d06c67734cd551c9404c2d7b6a025bc8233f2c5a60324becb93c632c542d81249fa82bf31ca55933775b90e872a16fb755d8cb65d910e71938fad6b32b8703851bb946f5af475f92697a1d9a57927745d0", 0x90}, {&(0x7f0000000480)="ee35dfddb76a36f40406e3aaba450c76bfa65d3c892094d9143bb1d5442ef000520ab23fd97eb668c7f84a258ace8013391158a14dc48bcb51e5b5dc22a2cde73be568aa66d1c02e0eb4aa658cfd6480ee11a2f2f23d25a97d9730a862711bf7db066d00a25694c894163b3f3787ccef0c0a398e2fea", 0x76}], 0x8, &(0x7f0000000580)=[{0xb0, 0x108, 0x1, "d48c0001d106fd9866a2d906b2fdef051e0c80f42c30a3ef5b8164d00e99e82e041d1cfd25fda034ee668ab4b42057fd326186736949df09b42ba89ef086286b0754e53d420a2ac7bb42e10d7a6b59403b34f388f000b27c3c9949213d7f33f0ff67241ebaf19f8a4401ad11aacadf8946f491d96bae12879edbe99449521526059abafc2de25d8d3a9fe6a8550896aa15c86fda197f3ec8c61ea240281373"}], 0xb0}}, {{&(0x7f0000000700)=@xdp={0x2c, 0x4, r5, 0x19}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="7c81a279897326423fbd1c2e6c116b2a46a37e8da29ee20893cd394308ec50e8eb1e18f1243ddbc4abba149f66ac88594b2b42d7a8986cc79edf48a2241154015752097919ade1190643c4522fcc0155d0bc4dfaf89d1c161cc5374136b086e28afadf4afdfb8939143718e031fb479bdccb4a7771601c36dbf02193e1b309bedffc527601", 0x85}, {&(0x7f0000001840)="6409dc0f9119c5ff275ac175a0d5912d717ca556872c8f8ab13826c73ed92ce106158201ea853d32a05a62c600ac2a977301ef276d194ed6d233164e02d9ef3bd5976981ea2f37d5f4310c110be4352b9b19040b6343e3dd9ee5f6f6586e3a0ad357dc52bee91e870a3a38a7927e4277eb397e3ab5e1", 0x76}, {&(0x7f00000018c0)="7f070185bb8ad8ae75fc8d197f71d842ac523a867e7a4a86ffa8c103a9225a30f92285bf8c5059b2933fb9425040d5f8430375eea0a847bd3cb3cf94162f532cf4db98279cb9d57c087c9484df4940c19b54c862f4817aabe60470adc7e79a", 0x5f}, {&(0x7f0000001940)="a92e51a9f9c7077fa371d27a66f52563aebbdaacb7928db783c7863d445e743094897cb7268ed665f8c2e77d9f91498db648f3336c8cb404955860be32edfbf71422ae55bdaaa09a6b12cf55a6a57b9d1c1ffa8e7ac96716a64975378b1e7a791e03eb29987a99e568a72d72ffd3da8bc6d05303e7bd", 0x76}, {&(0x7f00000019c0)="0f000e96e7c7234540474955a0982ec01d710b2a265082996e9b17", 0xffffffffffffff9e}, {&(0x7f0000001a00)="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", 0xff}, {&(0x7f0000009880)="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", 0x171}, {&(0x7f0000001bc0)="9be4a4b920b4c1b4fb4af552fc65e424415b398c79018553a29600a70503338175c460c62f69", 0x26}, {&(0x7f0000001c00)="ded5708887fd7a673646b0dbed94efae9a507e9b89dc998077ec551cf52fa37df407ed32e9be5f72718f205b6bb201854253a238006a38ba0114458456024a870a87c26c2fe72c91592731992db647d7daef92b105254e2e71d87bac9b00972360a82339affa700f5775b1728289e43266df8f04630d1c51e0572ac52ca08188c6e1a03983fd9482850961d2b11f24cf86f345a04853e5384868c1fcaca2626105ac67c52d3d88809bf198791df85aa42fa1f0da85bb92009845e07b27922240a475da3b7902059096cf30a6c6", 0xcd}], 0xa, &(0x7f0000001dc0)=[{0x48, 0x3ab, 0x91c, "2543cdec78326df77e2c359a98008dc48915165dfc86b61c8b1f18141cd26d5c869460ad674611d4602970ab8c4c8654789e05986f"}, {0xb8, 0x116, 0x0, "222992fe3283f62827d9709e37e311023d3cce9b3722f327fe9a82e1efa4c627cc9ea4db991ede2b5e1a674cb35eafcdc7f4d2f8c42bebb8029369cef8d9c915f7b8356c23979acd76731543841246f8603877912e2342dd1d2480b7cdfe9886c73e737d2bb9976961292c24388550af725c86138e5d6da41e23c1d6f6b978a683cff3749d78371cf5f54ba8917546613fde520f0de28364893b84be505f4a333f3e07a97b7a"}, {0x18, 0x111, 0x5, '*'}, {0x100, 0x88, 0x1, "8f28b356cf443a129ea277892dae217f54849066bd0a4e3fe7410f9f930db124c59fa66806485262e6ae0fa50f3a21b3b3f672b1f8e31dbaf304b8e4924b47d60f3b6bebcff151e2f15d43e0897b85cc256847d15168d724dcf3857f5b0d4c1bcbd8c45c138891df649bdf28f75b7f104741b5d32f8cdc6c82b009a76628d9819d9363399d61b6a26c4842c774959c13e1ba4df5be459b352a7311c9838bd5e587d2a56eb2aa62bdb9e5d15b434755df82cb1383ef8911c57e05ee26c6518eba864b691f7e65b9336102210e73c96d5232ae716613a61af3531cc1b2e6176504a31d43e8c8eb2410b8ee9c"}, {0x88, 0x0, 0x3, "d3c0c6ce8a1bb3d851005f80d2f5c2f6204e7cd287ca55086fb79d34f8e9af0371a79b174b0a3db76b36a21a461d0984b664f26f8831ea244e9fb1bd0b80218f996b92065b884b1f1240b24a82271877c1cba4ff4260a693d1ea2994f28a272b593d34b109755266ad1a369fcb45c70776aba5115426"}, {0x1010, 0x84, 0x401, "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"}, {0x78, 0x104, 0x1f40, "c4b23a137bbc5213551094e75c24610b6dfc27cd8c42db1816e9b3ff96298bd5eda20e0068351de6814262a9ff4803aa9b214d7e80719a9e1dd90e7a54c02d70f996b8c98a490ad729bbbc82656b5c503721e18b921a9d6bf2d51052269adac5f0ce5164"}, {0x60, 0x119, 0x1, "24774e8f3dbb7140040e8ffd539b85209700d0cafa114f47870c9d0698495300fafdeb7f8fdc443d8c0cf72e9a8af1c71ad005e3f325af620054b01d2b01be985062cb5607d4ff75698a45d2"}, {0x1010, 0x109, 0x31, "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"}, {0x98, 0x10f, 0x4, "db148a84e432d40c19c9ceb352a9463f36acb005a818940346d7cf93b50d78e3428c1c42cb5b3805eadce04eab4aed8a9a57e884d91ba813acfbc173e92389b6a06e54b31cf31d33d93312d0330e64b480905a9c58e93b743ab3f90a539915b7cdc5de90b4f0bf673e37f46552d12a3dc280157faf5c87cce73eafb3c2659fd01f7d"}], 0x2430}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004200)="a54eda231cc88705b8cd8a1461da5d69c9e1125b465f03780a41f3739630dcbf0edb62730f18954782d3868c27e2e3d287ee1be231d8ede46a95706b", 0x3c}], 0x1, &(0x7f0000004280)=[{0xc8, 0x350, 0x3, "aaf05e7cf18501b1b865329360adf044df5875ec6cf2afb9901a0528ba281664b4423b634593dd94067a8fe4c65bfd0ad3dad4c5f9a917cd584d02196842d8755db9d8afbcc13b6f0cd1ed0104b1141ae2ac11636a0e35b6f62c812908dde8798a32783416e3c6ec79175e1ad8466f977fc973471cb97a1116c2627bf2d5e6168e3334d263fbf2f4e45cc1f72d7b570613d2f87f8dc065394353b61d4495f43c06fd1e22186dcec252148a37516134faf0"}, {0xa8, 0x0, 0x6, "a7ac6653a2165e39a618c06e1b1ade3f0b1bf14f9777c171a38b75e291fd7532666698e019f95b6e0948cd870db47e34f96640af9addcf5945064ff86bfe361479966fe782c8dc7b911343ba3677f8ea5c5bd4badd2bedab8f6a09e8de852e3638b18de3d557b5c354e1a4530b60eefb8d5083fcbe2f1dff5ba2ac9bad3dc4e8c6e5d6b0a0df8d1965312cdb93ed00ff44796993f8fe6f54"}, {0xf0, 0x104, 0x8000, "183b99ff15811d7c33dce9089f72c160b58eed21a2c67b7aeeb35aa2878f415c6462b163db017832f899c8bc60b0ed1649be6befa9dc477e5fbd66dd07e578979ccf0b2306ef2b58c0d2356c51b76b9dd5ef9194ef39925ccb66d916eb2a4105163fc5afe156a900fb7ae33069d1ea29d4b7950d952de4a8accacea1a4aaeb11cc440d082619c71a316b2092fbed6c51ada30dbc4967b29669200fc494fcde4bf18e50658922c65ed3ce71452d0eddf1ba0954045e75e5cba8525929c349403e504e97bda30384722dab212d0cb1d211823b1b24b8e0381405b339cb"}, {0x88, 0x115, 0xe9, "0ff9f9ddcf7a087d585fed06b4fe508bd7323f5e22952fe622aaa85fb39bd63e96bd31641abb971ecd5c1bf17402ee102ced6d030ec72ce97619422f5d060c0f5882b9d4316b559d596f368c38a1fa224ac6f215bf7a1830efbf1b24c8599808bacec938cb08ea29acb6b2b83469593a8d76c861ee7bbf"}, {0x38, 0x10e, 0x9, "b8e0f07406038874aebf8e232873627a0c90a693e5c4bf0feb46c9426891e09ba1ae2a"}, {0xb8, 0x102, 0x2, "a787806bae734918320146eaa90bda6b801f652c72244ecc4e3f80ec7fe7a74ae54cdcb16619f2936280081943fb1d1fe301e587926444b598d7b612c03a4818e5156fa3dd8793a591eb0bdeaa246c856845c884e8323207b6a99c34dcaa4614911775450e72743e618b4535db7f19f8b88603d01d9bbaf6500d120f5537cabc84b5c4c4f46916a79e6c7582206fd31855fa701be8fb5492c4eb1893199ed209a1b94c1c6b"}, {0xd0, 0x105, 0x3, "657c8e104bc6378f280d112e5f133b0981eea582bab7f16e3be5036545b5c83a52e68d17777f68d3afdb74d773701d8a889e3e297d5a6780b66268ea26119a8f9c5b6cfc42c9f15680fc0d7d7bdbefa589e7f09d017fb510db33743675f65dcf2dfd675ab5d8002bb4b507f1d77e99456dc84c863e425e4e90d1647f459b603d514ae1c6c0e1d0ebdcbc37389e27d92902c790cbb328360f30c7651cc41be6540f3317819036d87500f63f8f189af38c1f1cd166d7487c2f1152a738ec"}], 0x4a8}}, {{&(0x7f0000004740)=@ipx={0x4, 0xffff, 0xff71, "c361d95cf9e0", 0x1}, 0x80, &(0x7f0000004800)=[{&(0x7f00000047c0)="b261e6f1011be8b921a890a7d94f0b2c5baeaae7af026350296f7dd4de377d80b1b346fa3afac28574566bee3d9a", 0x2e}], 0x1, &(0x7f0000004840)=[{0xd8, 0x107, 0x7f, "d6e0c08562b31ed1ad0659b26081372aca2862127a847b8e2f0098528d1aa3cd239697f7c1e2528cd2d553bcd721b2493b8abea632ef58886b6fb1ebcc999fa4493e92a2bf66394abefa05df2be92d2bc729678bde2316c67beafd3a566b9a8abe95e4eb05662eb664511846133ed3bf89b1b4c5ed576774b6af9ccc227e676941bbe262317ade8bd2e797303873a41c8cfb97b38230047ff0a8013c293924755e0d3f81fdd8fb97497d51d294b7d342b0b2594f164c007dcfe3d23836d8965758d800a9e86b"}, {0x30, 0x115, 0x80, "649e553f6d85a6acd3c4ff52b5145eb750f4df96dc19b6b90ded5e4b271bf3c8"}, {0x18, 0x10b, 0x20000, "365394f424deea64"}], 0x120}}, {{&(0x7f0000004980)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x94000200}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000009a00)="cf20f3ecb1e6a6b875d7c550e4142c620c94eeccd1a460bd70aeb818cff1f826e7b07881df4ae0d4a92538e3155c7758a886a4fe6a24e1b1677eaeb77e025d8bea75575fd5aec68824135dd40d6960cdae6cc7b9026d24d9635be41db107b648bef5b2bd1a47fe6e0cf329ab8064b030ee67065ccda52fd174498962f1695a31", 0x80}, {&(0x7f0000004a80)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000005ac0)="322cd54d83e78cdaf995df9f3a83e63c0ada25e71f7b02b9f70afea8a0661c1fae608e19b3f62c", 0x27}, {&(0x7f0000005b00)="ba58b1c1a4c5a8085c7c12c520f235cb5039f14780f2b042c8ed63a88f2b2ab43d8e1d9e9127cb820c60c0816186e17ba2bbcb3cbf86b01100010988c2135862eebd77a76ce8b78a74c5f540810a92ad571e1358a3e31d7290cdd4c2d388be056c92ffbfd60cfb0a7be98646cf726896641369ea73e6e2a31e49b0e60dfc49e04334e316669d2ca752aa0df6ad58ffec3c685efef9b90dc7e6b174be930f1c7ee4cc85ad8f331f48fd0b19", 0xab}, {&(0x7f0000005bc0)="69049376d9d3985149dc36869282fe267e8a2f7af657a22abb85293247547a1cb54ce9aafc3d60fcb9ef751ea057b7eb5c869ce8c8f5b11dcd7bb57c1f89dc1ce8998c9790d2e889", 0x48}, {&(0x7f0000005c40)="1109d130d6c86434f9feaa0cdc9c5bc6a3feb7844c02001f50f5929cbf5d8d0aeee40a15d0c244955170d1b7ecaf94648303c07d1bcb579b30d77a82df7438b21b042ffc89f4ca7173a0d89d8b2dc04df0d900cc848ab8fa23786cf6f31cd4d62532f2c04bbf9ced6d4335f2f73879fae13d0e8e813be6ef241632d9b9d3824d64ac02d608603dacd1b9f91eca11cc003e65e6ab4abd7bfa54cf09401f0eae8e573845569175f8b66f6bdcf7906763de7ca703fe6b45e5047f39", 0xba}, {&(0x7f0000005d00)="91142e0ac846f916fd732cc1b3ce192f4bc4763e0d575d18cfab87264f5724db81352babbb486f7187251d1b2a99535277b975f35100be281178a9ac09e7a13c3a1398b03fc629962a33fac32746bd222e0876b51771bee1c6b389275c0a96dbdeaac14755198e2b67678d38788389c687ec69d6b7c6105993cc907887d3f9ea1985e2e76b909b77b1aaf7d5b4bdb78cb99a20d29706e9f494f27211dabcf84cecbcda00e706b2472f4511abe41d319ffc7950e8eb52e4f61710d6deb4c327a23a00665d89cd3ab83579750dc3a759a43ce0e20de60e89b78402f8770e79", 0xde}], 0x5, &(0x7f0000005e80)=[{0x50, 0x107, 0x6, "71fb3cf2f8aa83748497ba50e93fcc17c9c80fc0140352184ea25cfe8652b277043e0fbe25e90cfeb55198b961ac628695ac27b4fbd2690e27"}, {0x98, 0x6, 0xda6, "d3e038a168a06e5ec48e7b1a245261195e6be9b1e40fdba6f6442e5a991ac084371eb20f430e939bbda9d396bf9807ff648e093715983d6cf52d807eff35526108dd089ccf36447750128975d97f43b6fd0b092e6fb16ddf30b5596e39f1c765ce01017147ac84113e4287a79d47b12a74ac29a4c7ddb158c8ec71bbe79994a8b25fd8"}, {0x98, 0x119, 0x1, "dc8f2c076835f20123a73bad6147b06cb0d6379e846a1e07e90510d1a94c884586ceddeffce73de3977d82f5769950ab04ac8f2903a80b94ab83bca8cfb2def2300fcc80a9a776580610862c3a5affbb07f88dfdd96ec1cdfcc7a361d68e3618c992a73671abb828a0199f58343f8ecbf1c5c8d3a8730dd0651122f267af757dd5"}], 0x180}}, {{&(0x7f0000006000)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f0000008500)=[{&(0x7f0000006080)="f8da12edaf5055c0ab757edf8478abd5b342e6f908590c06c77f5da2afefe3cb76a29b60952e67e8f41b7dd7a2dbb6888cb398510b41be6a956c3c23c92bf7fd2bf05d09ec97c2e588dcbf400f752bdafe7f41c89aded7b70b016ace65bf75b9a129c39b63a8a365e1ef487b52c2773f69fab4f24797ba1dd5870f89c848647c95de1ffb035ab674cb25e91baa56c95b1986effab97e9ab007a65e0a3fd14068fdc193ed27d72c70f406505648f8f168692aeaaebedbdac9cd53b3cf0f912d891d6994fa", 0xc4}, {&(0x7f0000006180)="205c0bef1e265e41f9f45b633cfc853240186e99368fbd05728a4458b9", 0x1d}, {&(0x7f00000061c0)="1c98d042b80e9acdd896de6f9a06d313be5c6462eb68757f877496c3d3cfe139e27edefc0a", 0x25}, {&(0x7f0000006200)="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", 0x1000}, {&(0x7f0000007200)}, {&(0x7f0000007240)="9fc3ce35bee1936ed49d08fb0d1142b61851c9cb51adc4b37c358dba4992b25734e106048496ca210005d5b08252894dbcaf2789dcf43124e695489b35303686b93e8804d7ac38abc7e069e2502d0fe83f4d803739ecd083330553785ec8acf5835010c40fb03b6f4dc5db2e41cd9502000f44fa1f55c37cd2b63ede45e26d9befcd086cdb56bc0ac227ecf82f8184b62aba41253c876b7bc6aceccd006d2116a1f2f7b2d40900", 0xa7}, {&(0x7f0000007300)="931c3d009b0c98d0738c9212a6d9499cb491b8e57d43d378e9d58b05d47f78cd", 0x20}, {&(0x7f0000007340)="87b6be5076588172c583dfa04ac56ef5da5492b49e0a0e282f52156904deed939114e8e0388ba78df9a3ef1a8e24808ca2ab61e70cb789dbbb60601cd3fc3e38e90da3d3cc2a839c1ae1e6c02c989660071063dabd37356fab88305b4ad59586145a640862b5c13a4b4a3cb051e2aa47a2f473669e069ebd15979e29db9d2f1eddc4120c4a5a5431d5bcab64d78ac293a4035782992b25a006", 0x99}, {&(0x7f0000007400)="8a90bcd97bbebe2f598cdb8341f0ae4e02867f1e0a5971c38b11b78499cd23e7e76ecbc1b55b12aae2b1899b931ba79f7141f3e8595e8d0418b247a13e8d2928e89dc731399733ede245e1d0fbd9e3b7d796abb052eace08a8f7f34d2639875a7632b9fc95d6d30ed13506ae484ca8de7f001513430c0298672a032d2e35cb9075651a72cb5bef7e4c18639779d0f6ee34ea4f0d40af36861aa33994fe89c9798b9ad8fdf70025358b1d6f918373c06564e1386fa955d5b2fbed72e723524a8e6bb345", 0xc3}, {&(0x7f0000007500)="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", 0x1000}], 0xa, &(0x7f00000085c0)=[{0x50, 0x119, 0x3, "648f4b9fc0e85f46bfddb62dd4acb50099ebc43060bf3d6174c3a5eae13c21067abb17b9d8612354425fa669ff7a842fdd19faa9f26cf43e9208e2"}, {0xb0, 0xff, 0x470, "af46c8c3ca91ef79a9bb4320c49ee5789b7c1f711f1d7b5760f2eb022e175e71c4931dc6927d1b654c926aeea97ff5d7098515de5821de90270eb6b50b0d2591fac7f29fa79a67b393c7bd4082a5a7be64cdba3b06e4702a00890df9b185c4129044698e2981fb95cb851f0d559705f081b5c4d85e39a20aede0a59a137f9a7d7704b85a0937c4725a30e715e12e3fdcb33967b3171b414cd33c"}], 0x100}}, {{&(0x7f00000086c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008740)="ae8c54d3d033733cb7045525f0", 0xd}, {&(0x7f0000008780)="93e3531f0403878edae9631a440c03be92c84f8bca15551d2986faea9ded501819001fec2629ba5672d6cc393c0bfa69c9118dbd728a87f1a2c4ed9a0539a0becd1b6a6937d54af3b3b2d5575a", 0x4d}, {&(0x7f0000008800)="b96f650ed36c6f90565f108fb177", 0xe}, {&(0x7f0000008840)="cec5d8baf1aa7669aea51768079b13ec56eb279ada42cfc15a13d8f4acf16517cf393839113d4eccbf50a9b6ec87fbe0b084422ca05d5684cee2", 0x3a}, {&(0x7f0000008880)="9a7d690995f55d4497792d11b376244d0cd4937631ae3955b314b06805ab4b5e8d90830d092966c5aa96db7a03be650620", 0x31}, {&(0x7f00000088c0)="feac3ae48e4ba7ef8baca6ea5bc5cb4fb897867c58d11f8c689795d70b930378d5f5d70d9a89167d12b45623591a7c5a7a0282e65f789785e8a2103a2eca3d575368803ffa6bc2ffd5e6e4d4bb6116cc95583b99be36a230ddf39f0caacbc90b3ebe77f178a60444e77388b984da39192e75cba34ee290797346757df7f157f998183ad5164695878ecee5f2201c2bf5d3f459722d58f09c1fee46df4cd8f73a67b19cea516ab4cb2368bc53e9d735f3d0a73f53b3a3f315", 0xb8}, {&(0x7f0000008980)="5eab6ce947ad5232e303a9430a52588cb7cfd4ed371ba867dd68ec961e7d284019fb2b6ce3b350397d08365fa5ac2f95966d294febd723993b83ca73222c98c812f10babe95a9c94556f2a8cb28489d4435f42cba5df0d63f0f09b7139e9539e4691f52c7ee27f55c6fffd78ddf13552d1ddf0042d785f02d0bf204e280e56", 0x7f}], 0x7, &(0x7f0000008a80)=[{0x90, 0x112, 0x1, "87079e66e898676d4744340d1a5279064077d99f3eddf3258926c540517bed757ee4175a5323c50c15df7a4225353aec1cf9758d6cc733678eedfea93ee005e6e69e6464d2ca8ad4ab199d1bc264f030f9a2d2dae8b1b3e57a809d0aaf8f57deea86bddb97f766d816278eda5741c44080045f74b7bcb3e9c2b14331c645"}, {0x98, 0x110, 0x9, "54b0e4287cd6b75c1862ade9bfc689435245ef15d76ebe4ca6ae2fa06c5a36fa32bb6d41e3f472e404bd153731a959803a1271fedc0a452586fb2144ba7708dae52194add2a43beadc5c3b755b3f3ff34fe80baec047746953b13f8439c3fbffc17440c3ec402c0e2b5415835ea5716735dbb1b4b6e5708853d45ab4ab74d1e91e3c8dc6cd261772"}, {0x108, 0x10d, 0x7, "7f199c66fa6991ec1dc4fb03a942dd20ad4298229a7add167aee66e6263de20bb688dcaf4cb8fed15098e786438de2916fe408b7778bcf88af9e939d07e228149adc162d27f005e086a6964ac87f7ad3bc37c9e53287bbde26c98662c07216d59f7f53fd450928f48c19f892f6cc17377ce680a8d5cfdb272520a4117572206cebba3ec26c3feae647a009dbf17e17479f62432f5e5b6b94f40eed44527062e35758934da83e076d79682009df4c50e251c5b280fd5ac2fa7a7ff026614f88385377b17ce7453d35e9f2452f2c760ff84fe816addd93e67cf158806530deb212aebdcc239fd1bb5be9abf088f55c3e5975ec37"}, {0xe0, 0x88, 0x4a5a15c9, "e235f7b2caf60b1ab004c99f53ff78566f0937d83352e58b6455f03028255c757341969b776b13684bcc56ea54b5410e8647fdfe75c755ef35e6c39c56b3e3b3ff200035ff936def9737fb0a4f265c21b42f90336767df80c4848a6f51a63f140db2b65bb06cd23879ed4b6fd6519117c4b58de962039d82f9e02cf984ba16e0bbc7868fbc6d408cf7eb2fe5208cbd88ad1e2ef365e1bcc13051bcc06bffb5514ff29a0d49e228708b05531c6897f0beae99588e294366e13125d4f2a1fd9414180a08e9de0b65a79a9c68afb5006c60"}, {0xb8, 0xad9f9b4dcca597f1, 0x8, "b8ce737ebcfe0e2757d4f98441161d5db3b65f62991f5492b23f07a38ed0931b554a082f6eb05851f67da6e08ed53058e4ae9106dbd768a28670e28f26328175f044bdef3b0b2617b77ea12ce4926ac42851f0f19c652062b46da4c7cc8096c6f13dbd202f67f5c46cb785514a210a9baab7acba9241a980253772b7450012776ce51b7543a675be1b29f9c55485a37bc72dcd4d715381ac304d3038c6e6c19e60148851e2071af4"}, {0x38, 0x11, 0x4, "badc152afbe9723e125e451dde1f95f3110e35269a9eda451ff8466763587b1a3c3a3f"}, {0x100, 0x10a, 0x20, "c6c5333e377011abdf61b61ed080dac31ba10ad97a7b94c1e0d8c50530864bab11dbcf22ec269f93baa8c2e6f08a2884aa4c8bc55c615156b52f651935240ba10627c246f178e8e05b7e0f100839b32434965912c0750ad1f4d769da0854217f45fe193e2f4e191e6db61fc41025c6a51cbbcce88bf33dc4941188a9d5ebea2a582fa2044b23ed85533f5f23b52c874ee699fc79a5532d45c54a393ee78eb052cb71ef766223de78d80169c360b017410c391aee9a167ef5f35c4baae0e9f96cf855f2aae7c7c342cbc49b4c2f328df54b683e92f08e62f172770d3e23881c2d1c7a6dbfc9291beaa83ea5cc35b5"}, {0x40, 0x10f, 0x8, "0ead86d7c62ce7e2ea6be37a53c89fd18fd58e9c6082df425e9d16c556fc259f95426454a0c96006bda05b20b936"}, {0x90, 0x1, 0x1, "9132678daa9945ce861f897fa821dce444164b4017ab53eb64ff128e89c12a5ebe6fbfb2049f12406e85c175f13a5e8717d594ed26d98013bbd2e3ce81a2f1892efbff869fff9c82f76d5f0ae3b8dd95199b78cbf6b34b11bd18529ec6339fa189bbc9c258ddd52d8cf6ce30b6d181d1571608acd1f64aaaeca5"}], 0x5d0}}, {{&(0x7f0000009080)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000009100)="67289b45d6a15bfefc742515b1cdfc971f41de14a5114a5ce9f257ca497b30e793911ce3f524cab36b98a588b4fa1a77c4c12f48bf32d3d9d70caf694a4f535d5f84a6dfac22fb361586dedf15f6f227d4010c7b41f414af38dd", 0x5a}, {&(0x7f0000009180)="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", 0xff}, {&(0x7f0000009280)="4f737fe1f674adec6aa2e2c4ffbf42c4b19d15cba7ebf42e5b09426fac423ce29ff3bc9941a63865fe2e597faf378d51bfd37c1718f9cb5da7c309be69f178823874572c1ec9e3876204f9a8d0cc036f4c9cca869d60c20e8e3ab603f249b5e0340779445b56d2ba1a84426845abd5ebfe3185693cc647df35cc8bc884f20c1876b439fc7071f0819e2de5797f80326fff53b1bb4aec30931488fe05594d812bb66c11f911c7f20d8cfc9e4fa2a2ef8311652400835419ecb35d84af7cb37a1b8565840ff19ea1955a8f97dbb36464337a60be8f4a68a1582543c1471b50e65bc63e776c17cb3c9b226c", 0xea}, {&(0x7f0000009380)="435fe6643dbf71e82f58f5cf93902b747d971d8f7d6268bbf852eb2ba97619d2c25ba2099152948707bf09d65df9ad0d7aef2a57", 0x34}], 0x4, &(0x7f0000009400)=[{0x18, 0x89, 0x9, "59737a113c"}, {0xd8, 0x11, 0x800, "3af402732ea2e9d45fe4a0573a80d26d12de93bf3f3bf6a8c9b90538e811288580538dbe0d58964e62719a5faabf044fa4da9354cf0a5d0cee2c039be194691afa2bd37e9d5ab312f97df997dca61bfd0d681100f33513ab5ff7409d266e323cfadd5484c27f221ca53f245159fe07c50e411b2f3b0b070a3d03db04e97979ced1577febd14832ed0f09a5d5d9b5191a2e27833abb63c422be65a556ace981611f0e6aa426fefc88d98191f7cd15e0d60d81a54c4b367e94fd82e13be41f2201a7e7b6f4"}, {0xa8, 0x0, 0x1, "bbb6237437b669b710a9906c482469c2d2a81b9356723908c49b7366db4a5f710e89046305d61a588031a8801f66c164a90adffe6a71c0da8a79b00a8c26dfb1d428d051b1692853774e9647df493414d61c76471bff4935a2033ab5eb8d6ba34eb3b81379afaf97017d05d88b45108e1b4300aa870ad8c2ae4fb9959940ecd617f8ad62e657d397885cc3a58b7cb56def08c4e4e094ca"}, {0x78, 0x115, 0x4, "ac0b92ff096b8f3bc5716bd186732bca9d595d98c95b9f71a351b2e029010c8952b54016b08d4b7699cd24f927805a0ed5258a0bb0c5b12035e344552d65f90868336d92b223f3a32c58490a0437fe09c626a8c81b0ea2ea9ad820838193475fe4a3771b949b1378"}, {0x28, 0x111, 0x81, "cd10f94eec5df5d07b9fca8161f38435ae977dc90c"}], 0x238}}], 0x9, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x2b, 0x3, [], [@jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x4c8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x100}]}, 0x28) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2544.933208][ T23] usb 5-1: USB disconnect, device number 79 19:10:37 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x5, 0x1, 0x3cb3, 0x5, 0x1, 0x1, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000280)={0x0, 0x8, 0x8}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000100)={0x2, 0x0, 0x6, 0x9, 'syz1\x00', 0x8}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x1, 0x109, 0x10001, r2}, &(0x7f00000000c0)=0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r5, 0x4b60, 0x0) 19:10:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f000000050000000002000001000a000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2545.033542][ T9658] __nla_validate_parse: 1 callbacks suppressed [ 2545.033552][ T9658] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2545.058764][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2545.091451][ T9661] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2545.118333][ T9549] usb 1-1: USB disconnect, device number 60 19:10:37 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x8, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xb6030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:37 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x1ff, 0x8, 0x1, 0x0, 0x1, 0x7, 0xfffffffb}, 0x1c) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64=r1], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 2545.135620][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:10:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:37 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2545.230919][ T9679] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2545.350731][ T9679] 8021q: adding VLAN 0 to HW filter on device bond571 [ 2545.364010][ T9683] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) fsync(r1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/180) [ 2545.485321][ T23] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 2545.489778][ T9687] bond571: (slave veth2313): Enslaving as an active interface with a down link [ 2545.573871][ T9715] bond571: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:37 executing program 3: ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) r0 = socket(0x1e, 0x4, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000001040)=""/173, &(0x7f0000001100)=0xad) getsockopt(r0, 0x2d, 0x1, &(0x7f0000001140)=""/98, &(0x7f00000011c0)=0x62) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1004) [ 2545.665136][ T9549] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2545.745778][ T9730] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2545.768616][ T23] usb 5-1: device descriptor read/64, error 18 [ 2545.809322][ T9687] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000000)={"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"}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$RTC_WIE_OFF(r2, 0x7010) 19:10:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x2, 0x2, 0x3, 0x2, 0xfffffff9}) [ 2545.913696][ T9687] bond571: (slave veth2315): Enslaving as an active interface with a down link [ 2545.923150][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 2546.055317][ T9549] usb 1-1: config 0 has no interfaces? [ 2546.061141][ T9549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2546.071237][ T9549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2546.091483][ T9549] usb 1-1: config 0 descriptor?? [ 2546.175320][ T23] usb 5-1: device descriptor read/64, error 18 [ 2546.357602][T13809] usb 1-1: USB disconnect, device number 61 [ 2546.445470][ T23] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 2546.715253][ T23] usb 5-1: device descriptor read/64, error 18 [ 2547.105793][ T23] usb 5-1: device descriptor read/64, error 18 [ 2547.145504][T13809] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2547.227431][ T23] usb usb5-port1: attempt power cycle [ 2547.415999][T13809] usb 1-1: Using ep0 maxpacket: 8 [ 2547.545869][T13809] usb 1-1: config 0 has no interfaces? [ 2547.551556][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2547.562730][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2547.574263][T13809] usb 1-1: config 0 descriptor?? 19:10:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xb64fe5d7, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f000000050000000002000001000c000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2547.831944][T13809] usb 1-1: USB disconnect, device number 62 [ 2547.903007][ T9781] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2547.918723][ T9783] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2547.935471][ T23] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 2547.969953][ T9783] 8021q: adding VLAN 0 to HW filter on device bond572 [ 2547.983402][ T9818] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2548.062355][ T9817] bond572: (slave veth2317): Enslaving as an active interface with a down link [ 2548.092144][ T9783] bond572: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2548.105188][ T23] usb 5-1: device descriptor read/8, error -61 19:10:40 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x300, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xd, 0x6}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$GIO_FONT(r2, 0x4b60, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x18c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4040}, 0x4081) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 19:10:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x240000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:40 executing program 4: syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1f2aef0157ef7f"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2548.253014][ T9834] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:40 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttynull\x00', 0x800, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2548.297140][ T9783] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2548.321174][ T9842] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xbe030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2548.348535][ T23] usb 5-1: device descriptor read/8, error -71 19:10:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2548.439660][ T9850] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2548.519651][ T9850] 8021q: adding VLAN 0 to HW filter on device bond573 [ 2548.527428][ T4569] usb 1-1: new high-speed USB device number 63 using dummy_hcd 19:10:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x8}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) [ 2548.656491][ T9854] bond573: (slave veth2319): Enslaving as an active interface with a down link 19:10:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2548.721383][ T9850] bond573: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2548.775441][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 2548.834994][ T23] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 2548.901232][ T4569] usb 1-1: config 0 has no interfaces? [ 2548.907257][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2548.923111][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.945937][ T4569] usb 1-1: config 0 descriptor?? [ 2548.951628][ T9906] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2549.010412][ T23] usb 5-1: device descriptor read/8, error -61 [ 2549.192885][T13809] usb 1-1: USB disconnect, device number 63 [ 2549.305315][ T23] usb 5-1: device descriptor read/8, error -61 [ 2549.425040][ T23] usb usb5-port1: unable to enumerate USB device [ 2549.985491][T30860] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2550.245945][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2550.365171][T30860] usb 1-1: config 0 has no interfaces? [ 2550.370712][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2550.381159][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.391372][T30860] usb 1-1: config 0 descriptor?? 19:10:42 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x500, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:42 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = dup(r0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONT(r2, 0x4b60, 0x0) 19:10:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc3ffffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2550.650948][ T23] usb 1-1: USB disconnect, device number 64 [ 2550.761637][ T9939] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2550.796986][ T9939] 8021q: adding VLAN 0 to HW filter on device bond574 [ 2550.851855][ T9939] bond574: (slave veth2323): Enslaving as an active interface with a down link [ 2550.886097][ T9974] bond574: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2551.032363][ T9974] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2551.083960][ T9939] bond574: (slave veth2325): Enslaving as an active interface with a down link [ 2551.166114][ T23] usb 1-1: new high-speed USB device number 65 using dummy_hcd 19:10:43 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb090000000109369714049472acc8528d2b1b02240001000000000944aaddffff5d010009050f"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf6, 0x0) r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000000600)="0400", 0xfee9, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) syz_open_dev$evdev(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) 19:10:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010010000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:10:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) socket(0x3, 0xa, 0x9) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:10:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xc4020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2551.341707][ T9995] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) 19:10:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2551.425416][ T23] usb 1-1: Using ep0 maxpacket: 8 19:10:43 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/47) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) [ 2551.501972][ T9995] 8021q: adding VLAN 0 to HW filter on device bond575 19:10:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2551.547984][ T23] usb 1-1: config 0 has no interfaces? [ 2551.556435][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2551.562803][ T9996] __nla_validate_parse: 2 callbacks suppressed [ 2551.562812][ T9996] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2551.574030][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.621156][ T23] usb 1-1: config 0 descriptor?? [ 2551.723416][T10004] bond575: (slave veth2327): Enslaving as an active interface with a down link [ 2551.754619][ T4569] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2551.774162][T10039] bond575: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2551.881463][ T23] usb 1-1: USB disconnect, device number 65 [ 2551.909857][T10051] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2551.948230][ T9995] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2552.009238][ T4569] usb 5-1: Using ep0 maxpacket: 8 [ 2552.017519][T10067] bond575: (slave veth2329): Enslaving as an active interface with a down link [ 2552.165014][ T4569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2552.173240][ T4569] usb 5-1: can't read configurations, error -61 [ 2552.324710][ T4569] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2552.594579][ T4569] usb 5-1: Using ep0 maxpacket: 8 [ 2552.665534][T30860] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2552.755605][ T4569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2552.763556][ T4569] usb 5-1: can't read configurations, error -61 [ 2552.772755][ T4569] usb usb5-port1: attempt power cycle [ 2552.915495][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2553.045092][T30860] usb 1-1: config 0 has no interfaces? [ 2553.050636][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2553.061592][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.072039][T30860] usb 1-1: config 0 descriptor?? [ 2553.320676][ T2612] usb 1-1: USB disconnect, device number 66 19:10:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x600, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xd08e, 0x14, 0x56ac5995, 0x4, 0x10, "31bb19c28af8b9927910bc462104ff6523402f"}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="23010000000000000000010000000000000002410000001000136574683a766c616e30000000"], 0x2c}}, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xb, 0x7, 0xfff00000, 0x10001}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) 19:10:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2553.391900][T10087] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2553.468609][T10094] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2553.486370][ T4569] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2553.584657][ T4569] usb 5-1: Using ep0 maxpacket: 8 [ 2553.744536][ T4569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2553.744556][ T4569] usb 5-1: can't read configurations, error -61 [ 2553.795679][ T2612] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2553.894421][ T4569] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2553.984805][ T4569] usb 5-1: Using ep0 maxpacket: 8 [ 2554.034527][ T2612] usb 1-1: Using ep0 maxpacket: 8 [ 2554.144639][ T4569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2554.152631][ T4569] usb 5-1: can't read configurations, error -61 [ 2554.160886][ T2612] usb 1-1: config 0 has no interfaces? [ 2554.166915][ T2612] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2554.178789][ T4569] usb usb5-port1: unable to enumerate USB device [ 2554.186212][ T2612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.201857][ T2612] usb 1-1: config 0 descriptor?? 19:10:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/177, 0xb1}], 0x1, 0x100000001) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000180)) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f010000000009058303000e"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xce010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "27ca19b3f0b77382e530b525b3054c771fa64ba66dd1bef5"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa8aa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0}, 0x8040) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x109000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000005, 0x30, r1, 0x72000) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2554.397843][T10106] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2554.428737][T10107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:46 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2554.469918][ T2612] usb 1-1: USB disconnect, device number 67 [ 2554.556640][T10107] 8021q: adding VLAN 0 to HW filter on device bond576 [ 2554.569914][T10110] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2554.602197][T17316] BUG: MAX_LOCKDEP_CHAINS too low! [ 2554.608317][T17316] turning off the locking correctness validator. [ 2554.614784][T17316] CPU: 1 PID: 17316 Comm: kworker/u4:6 Not tainted 5.8.0-rc5-syzkaller #0 [ 2554.623545][T17316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2554.634337][T17316] Workqueue: bond576 bond_mii_monitor [ 2554.640065][T17316] Call Trace: [ 2554.643400][T17316] dump_stack+0x18f/0x20d 19:10:46 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10000, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r3, 0x2, 0x3, 0x280000000000000}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0xc, 0x3, "b10629429bc10d174c1819c469eaadfd9320a9ef6484420603ea3503fa1b29b0"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r4, 0x4b60, 0x0) [ 2554.648181][T17316] __lock_acquire.cold+0x11/0x3f8 [ 2554.653388][T17316] ? unwind_next_frame+0x3f2/0x1f90 [ 2554.659815][T17316] ? ret_from_fork+0x1f/0x30 [ 2554.664759][T17316] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2554.671021][T17316] ? deref_stack_reg+0x150/0x150 [ 2554.676403][T17316] lock_acquire+0x1f1/0xad0 [ 2554.680911][T17316] ? lock_timer_base+0x55/0x1a0 [ 2554.686289][T17316] ? lock_release+0x8d0/0x8d0 [ 2554.691258][T17316] ? ret_from_fork+0x1f/0x30 [ 2554.696990][T17316] ? stack_trace_save+0x8c/0xc0 [ 2554.701916][T17316] ? lockdep_hardirqs_off+0x66/0xa0 [ 2554.707212][T17316] _raw_spin_lock_irqsave+0x8c/0xc0 [ 2554.712514][T17316] ? lock_timer_base+0x55/0x1a0 [ 2554.717445][T17316] lock_timer_base+0x55/0x1a0 [ 2554.722222][T17316] __mod_timer+0x30b/0xf40 [ 2554.726825][T17316] ? enqueue_timer+0x420/0x420 [ 2554.731623][T17316] __queue_delayed_work+0x1a7/0x270 [ 2554.737109][T17316] queue_delayed_work_on+0x1a2/0x210 [ 2554.742461][T17316] bond_mii_monitor+0x986/0x1af0 [ 2554.748083][T17316] ? lock_acquire+0x1f1/0xad0 [ 2554.753255][T17316] ? process_one_work+0x85f/0x1670 [ 2554.758493][T17316] ? bond_arp_monitor+0x3b50/0x3b50 [ 2554.763861][T17316] ? lock_downgrade+0x820/0x820 [ 2554.768713][T17316] ? _raw_spin_unlock_irq+0x1f/0x80 [ 2554.774034][T17316] ? lock_is_held_type+0xb0/0xe0 [ 2554.778973][T17316] process_one_work+0x94c/0x1670 [ 2554.783908][T17316] ? lock_release+0x8d0/0x8d0 [ 2554.789750][T17316] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2554.795143][T17316] ? rwlock_bug.part.0+0x90/0x90 19:10:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010013000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2554.800258][T17316] ? lockdep_hardirqs_off+0x66/0xa0 [ 2554.805695][T17316] worker_thread+0x64c/0x1120 [ 2554.810902][T17316] ? __kthread_parkme+0x13f/0x1e0 [ 2554.816117][T17316] ? process_one_work+0x1670/0x1670 [ 2554.816135][T17316] kthread+0x3b5/0x4a0 [ 2554.825551][T17316] ? __kthread_bind_mask+0xc0/0xc0 [ 2554.831172][T17316] ? __kthread_bind_mask+0xc0/0xc0 [ 2554.836530][T17316] ret_from_fork+0x1f/0x30 [ 2554.907431][T10115] bond576: (slave veth2331): Enslaving as an active interface with a down link [ 2554.936760][T10128] bond576: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2554.998271][T10167] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2555.008389][T13809] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2555.047550][T10115] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2555.060185][T10172] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010048000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2555.106684][T10107] bond576: (slave veth2333): Enslaving as an active interface with a down link [ 2555.142061][T10178] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2555.185990][T10181] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2555.254386][T13809] usb 5-1: Using ep0 maxpacket: 8 [ 2555.396485][T13809] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2555.405515][T13809] usb 5-1: config 0 has no interface number 0 [ 2555.412458][T13809] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2555.425997][T13809] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2555.438202][T30860] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2555.446714][T13809] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2555.459724][T13809] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2555.469428][T13809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.482236][T13809] usb 5-1: config 0 descriptor?? [ 2555.514653][T10116] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2555.536886][T13809] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input907 [ 2555.704245][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2555.740232][T13809] usb 5-1: USB disconnect, device number 88 [ 2555.835862][T30860] usb 1-1: config 0 has no interfaces? [ 2555.841395][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2555.851937][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.864379][T30860] usb 1-1: config 0 descriptor?? 19:10:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x700, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xce030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2556.129368][T30860] usb 1-1: USB disconnect, device number 68 [ 2556.169730][T10217] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2556.220090][T10217] 8021q: adding VLAN 0 to HW filter on device bond577 [ 2556.273369][T10260] bond577: (slave veth2335): Enslaving as an active interface with a down link [ 2556.305917][T10217] bond577: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2556.408449][T10272] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2556.434628][T10217] bond577: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2556.534639][T13809] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2556.574231][T30860] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2556.774138][T13809] usb 5-1: Using ep0 maxpacket: 8 [ 2556.835065][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2556.914459][T13809] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 2556.922564][T13809] usb 5-1: config 0 has no interface number 0 [ 2556.929995][T13809] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2556.941666][T13809] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2556.953231][T13809] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 1536, setting to 1024 [ 2556.967206][T13809] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2556.977179][T13809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.986066][T30860] usb 1-1: config 0 has no interfaces? [ 2556.991842][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2557.002321][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.011509][T13809] usb 5-1: config 0 descriptor?? [ 2557.024870][T30860] usb 1-1: config 0 descriptor?? [ 2557.035525][T10263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2557.066149][T13809] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input908 19:10:49 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da8fb86787096dd90000bc0500000006410002ff5d010409050f00000000f671ea80000017000000000000000000"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x0) mprotect(&(0x7f00000ef000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf8, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x81, &(0x7f0000544000/0x4000)=nil, 0x1) 19:10:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xd2010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 2557.272108][ T4569] usb 5-1: USB disconnect, device number 89 [ 2557.285596][T30860] usb 1-1: USB disconnect, device number 69 [ 2557.345430][T10306] __nla_validate_parse: 2 callbacks suppressed [ 2557.345439][T10306] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040), &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x40, 0x0}}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000850}, 0x11) ioctl$GIO_FONT(r1, 0x4b60, 0x0) [ 2557.421696][T10307] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2557.468220][T10307] 8021q: adding VLAN 0 to HW filter on device bond578 19:10:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) 19:10:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010068000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) 19:10:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x141100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r3, 0x23, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x84) [ 2557.519816][T10321] bond578: (slave veth2337): Enslaving as an active interface with a down link [ 2557.533776][T10322] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2557.600629][T10358] bond578: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2557.659694][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2557.698374][T10371] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2557.712257][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2557.734744][T10307] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2557.763518][T10321] bond578: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2557.796285][ T4569] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2557.869866][T10385] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2558.064087][T30860] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2558.074975][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2558.315221][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2558.454391][T30860] usb 1-1: config 0 has no interfaces? [ 2558.459998][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2558.463957][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2558.470671][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.483954][T30860] usb 1-1: config 0 descriptor?? 19:10:50 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="18d1a587", @ANYRES16=r2, @ANYBLOB="dd07000000000000000034000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='o\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='o\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012cbd7000fbdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x194, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x67, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x194}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r5, 0x4b60, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r6, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000000)) 19:10:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x7) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000180)={0x800, 0x2, &(0x7f0000000000)=[0x2, 0xbef4], &(0x7f0000000140)=[0x5, 0xdd, 0x1000, 0x1, 0x3], &(0x7f00000000c0)=[0x8, 0xfff0]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000000)={0x4, 0xa, 0x4, 0x40, 0x8, {}, {0x5, 0x2, 0x80, 0x5, 0x7, 0x4, "2873bb10"}, 0x4, 0x4, @fd, 0x0, 0x0, r2}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000080)={0x1, 0x330d47b2, 0x1}) 19:10:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2558.726923][ T2612] usb 1-1: USB disconnect, device number 70 [ 2558.744159][ T4569] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2558.774937][T10402] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2558.836832][T10406] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2559.024007][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2559.414778][ T4569] usb 5-1: device descriptor read/64, error 18 [ 2559.534789][ T4569] usb usb5-port1: attempt power cycle [ 2560.243817][ T4569] usb 5-1: new high-speed USB device number 92 using dummy_hcd 19:10:52 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da21080100a190eb0902240001000090c614a3aee4f594105445cc8e635100000904410002ff5d010009050f1f01"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 19:10:52 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0xff00, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xd7e54fb6, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x29, 0xfc, 0x1, 0x2, 0x40, @remote, @private2, 0x1, 0x40, 0x5, 0x1c}}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x5, 0xffffffff, 0x3e, 0x19]}) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x4) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2560.333982][ T4569] usb 5-1: Invalid ep0 maxpacket: 184 19:10:52 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'veth1_to_team\x00', 0x81}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) [ 2560.400135][T10418] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2560.432431][T10420] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 19:10:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 2560.498761][T10420] 8021q: adding VLAN 0 to HW filter on device bond579 [ 2560.509698][T10429] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:52 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x88880, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$GIO_FONT(r1, 0x4b60, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x0, @local, 0x6}}, 0x3e7, 0x6, 0x1, 0xffffffff, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r3, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r3}, &(0x7f0000000280)=0x8) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000002c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) [ 2560.605656][T10432] bond579: (slave veth2339): Enslaving as an active interface with a down link [ 2560.655750][T10420] bond579: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2560.683972][T30860] usb 1-1: new high-speed USB device number 71 using dummy_hcd 19:10:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x40, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000400)=@req={0x2a8e, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) flistxattr(r1, &(0x7f0000000740)=""/4096, 0x1000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x48094) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r6, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='o\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fbdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0xfd, r6, 0x1, 0x70bd26, 0x25dfdbfd}, 0xcc}}, 0x28008080) pipe(&(0x7f0000000000)) 19:10:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x820, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x145a80, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f00000002c0)=[0x1, 0xdd, 0x1000, 0x1, 0x5], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x40}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000481f685292383b0012000900"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@local, 0x10, r4}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$GIO_FONT(r5, 0x4b60, 0x0) [ 2560.783875][ T4569] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2560.808008][T10432] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2560.878592][T10496] bond579: (slave veth2341): Enslaving as an active interface with a down link [ 2560.888497][ T4569] usb 5-1: Using ep0 maxpacket: 8 [ 2560.907804][T10420] bond579: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2560.923973][T30860] usb 1-1: Using ep0 maxpacket: 8 [ 2561.044067][ T4569] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2561.052520][ T4569] usb 5-1: can't read configurations, error -61 [ 2561.060721][ T4569] usb usb5-port1: unable to enumerate USB device [ 2561.065895][T30860] usb 1-1: config 0 has no interfaces? [ 2561.073183][T30860] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2561.083492][T30860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.093495][T30860] usb 1-1: config 0 descriptor?? [ 2561.360076][ T4569] usb 1-1: USB disconnect, device number 71 [ 2562.123716][T13809] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2562.363650][T13809] usb 1-1: Using ep0 maxpacket: 8 [ 2562.483794][T13809] usb 1-1: config 0 has no interfaces? [ 2562.489728][T13809] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2562.500341][T13809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.509824][T13809] usb 1-1: config 0 descriptor?? [ 2562.756827][T13809] usb 1-1: USB disconnect, device number 72 19:10:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x1000, 0x9, 0x101, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ip_vti0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2, r3}) 19:10:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xe0020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONT(r0, 0x4b60, 0x0) 19:10:55 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f0000000100)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 19:10:55 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000140)={0x4cd1, 0x0, 0x4}) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/37) 19:10:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2563.446684][T10533] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2563.531371][T10533] 8021q: adding VLAN 0 to HW filter on device bond580 [ 2563.543162][T10535] __nla_validate_parse: 2 callbacks suppressed [ 2563.543172][T10535] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2563.615819][T10545] bond580: (slave veth2343): Enslaving as an active interface with a down link [ 2563.649455][T10533] bond580: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2563.713600][ T4569] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2563.734958][T10582] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="0000000bf1ffffff000000000800010063627100a40802000404060003000000050008a000700300fdffffffffff00001f0000000500000000020000010000030000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff040008"], 0x8d0}}, 0x0) [ 2563.779995][T10533] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2563.804865][T10593] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/3' not defined. [ 2563.821776][T10595] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x804, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f0000000280)=[0x1, 0xd569]}) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000000c0)={0xffff, "eb2aa54fe80b6006dd5c5f51ad88d65922c75327b8fca3aea8c8e447c8f1d827", 0x0, 0x800, 0x6, 0x3, 0x1, 0x0, 0x3, 0x800}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private2, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x105100, 0x181) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000003c0)={0x81, 0x2, 'client1\x00', 0x1, "b7239ea3145d2d64", "4ece45ab812788180cfaee33500b7257afe36e0497ef8ceeaa5e77802790757e", 0x8, 0xfffffffe}) r3 = socket(0x8, 0xa, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) getsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) [ 2563.864269][ T23] usb 5-1: new high-speed USB device number 94 using dummy_hcd 19:10:56 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/221, 0xdd}], 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x4], &(0x7f00000000c0)=[0x1, 0xd569]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) write$FUSE_OPEN(r2, &(0x7f0000000140)={0x20, 0x0, 0x3, {0x0, 0x2}}, 0x20) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000080)) ioctl$GIO_FONT(r0, 0x4b60, 0x0) [ 2563.921926][T10545] bond580: (slave veth2345): Enslaving as an active interface with a down link [ 2563.943930][T10598] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 19:10:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 19:10:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x81, 0xbef4], &(0x7f0000000040)=[0x5, 0xdf, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x8001, 0xfff, 0x100}) [ 2563.999794][ T4569] usb 1-1: Using ep0 maxpacket: 8 [ 2564.007082][T10533] bond580: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 19:10:56 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @mcast2, 0x4}, @in={0x2, 0x7, @private=0xa010102}], 0x2c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$setopts(0x4206, r1, 0xb3e, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b60, 0x0) [ 2564.156018][ T4569] usb 1-1: config 0 has no interfaces? [ 2564.161642][T10614] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2564.171281][ T23] usb 5-1: device descriptor read/64, error 18 [ 2564.180219][ T4569] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb 19:10:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xe0030000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 19:10:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x511000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="266465660f388134ba4300ec36c13e0c009d2e0fc79b000067660fe22bbad00466edbaa100b095ee66b9640200000f320f20c06635000001000f22c065660fc7b50000", 0x43}], 0x1, 0x4, &(0x7f0000000100)=[@efer], 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r2, 0x4b60, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x800, 0x2, &(0x7f0000000000)=[0x3, 0xbef4], &(0x7f0000000040)=[0x5, 0xdd, 0x1000, 0x1], &(0x7f00000000c0)=[0x1, 0xd569]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000180)={0xb9b, 0x1, 0x3ff, 0x2, &(0x7f0000000140)=[{0x6, 0x101, 0x9, 0x3}, {0x8, 0x7, 0x80, 0xfffe}]}) [ 2564.206474][ T4569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.227802][ T4569] usb 1-1: config 0 descriptor?? [ 2564.239270][T10628] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2564.283012][T10629] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2564.363034][T10629] 8021q: adding VLAN 0 to HW filter on device bond581 [ 2564.432182][T10635] bond581: (slave veth2347): Enslaving as an active interface with a down link [ 2564.464323][T10629] bond581: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2564.498394][ T2574] usb 1-1: USB disconnect, device number 73