ink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = socket$unix(0x1, 0x3, 0x0) io_submit(r1, 0x3, &(0x7f0000000580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 15:49:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80) [ 2035.939616][T26567] netlink: 484 bytes leftover after parsing attributes in process `syz-executor.1'. 15:49:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000007fffffff000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@polexpire={0x10c, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@local}, {}, {}, 0x0, 0x6e6bbc}}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160\x00'}}}]}, 0x10c}}, 0x0) 15:49:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000180)=@un=@abs, 0x80) 15:49:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40000063) [ 2036.270454][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x128) 15:49:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000009effffff000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x200000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @tipc, @vsock={0x28, 0x0, 0x0, @host}, @ax25={0x3, @default, 0x2}}) 15:49:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000240)=@nfc, 0x80) 15:49:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012061) 15:49:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000c3ffffff000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2036.790031][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0xbc, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "0cd6c284353ae4a49524b836cc1cbb724d68216e5639c9fec92bdc5aa46bf0dca981ec20a2d37188a97f45cc49e66cac621c381223869c09353087fa5e6a8e78ec60153241bbb389d6debabbb6eb5bcbc9c5d76228f47ab6075205f97f0980b728ca44b7d6a1985fd3"}]}, 0xbc}}, 0x0) 15:49:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 15:49:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) close(r0) [ 2037.091672][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:49:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x149082, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000001140)='./file0\x00', 0x0) io_submit(r1, 0x2, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000180)="cb", 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 2037.157034][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000f0ffffff000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x400000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2037.280822][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:49:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82100, 0x0) fcntl$setflags(r0, 0x2, 0x0) 15:49:48 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', 0x0, 0x0, 0x0) 15:49:48 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000bc0)) 15:49:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000feffffff000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:48 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x19030041}, 0xc) 15:49:49 executing program 0: mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) preadv(0xffffffffffffff9c, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) 15:49:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x600000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="2cb6ae58aac38fffca1be2790b757f0f3d093f2594814f164c9918fff884a697994a8de72aa1a294d8bebf29d0e06a69453834a6555099e62a2845c240f2ec624a24e5502a14b196f6e38e9a379f03c71e47e5a44face1b13f825d3f7c27d7a1a6c46c024956f43caf355e8c6dba98b9e201b4044922414eb2c653a0c0a79fa1af3adda2ac55b971fdfee122cc3462d93993773d93e738fca59a8ee7b3f75f52d160ce1f080da7b881342a4624aa2dee7d4e86c53c169274934429f2650cc8731bd93d0bb6c5071b6c299c971dfcff5c99ca70ccfdbb2dd1d9cf098677e3464a9fb15b5c47621270576712fa2718c968c30863cb8345001988eb1dc98b35c2ff80523ef0be7703d4c99cdbd78ab1563e0794aa1ca327b19011bdc138495c449430b3b3ae734bb0bfd23f02eb32738d96a98a514ec3bf76388fdf3d84d3ff90dd0e6081bd8358507b6772e6ecf6fbca53d5bed69da088947ec0166eca319cedbf0aaff5aab87f6b248530dce4d89174ca84a949d212547e7617a3a5108a701de5719b49f7577a0b39c7d8a3d9f6af6b0fbc2760c4705116ae15321c5410123ae05477c8f0c41aa38777e664a583bf0aa6b92374c79f6e5e2ec10682eaa890c93c7fe8b2b1a9bb1507e270849fc94dd25431cd34f4225494c890d984ec15c8bba91c1fff69a0d42e2bfe39d611681a2ece7b2d7e1dface11dbb98d86975a107e00d28b87f8b088f77029fbb941f786a384bba7d9a841c923bbc01ec4c6512ba7edc1d55ffbf9538c443d95254de0b5d02311e2622bd317c36738bba43e367a64d6d4913eb86fed56f8eabbe1f02e494195b7803df12b26812d94335d309af56cf60a831781602f885f9aa2907a3fb0ab2bc94ad4892b0795b8bd9e2fd4687e280d1512907474b5e85634d7cc76f1f4da631da6419e47f16135610d9ae4cbe311b533a1788bd921e70c92a4cc53f313d959283a1c189ca5cbe209d526e0cd5a60b06b2526bd1d93ab0d641f93f0a44049ac3d34ecfcd4eb0ac8ce3511444669ef818e0e70e149dcc592c772fc512178a1f53d935d9350d8d1d3c68d218908c76dff2e4a4d862ba286920fe4d3ab4288fefb4f5950c40f42fc8ab553ed1f4ebff9bf5df9b38f6d49e48fe55db6e2c3508741b732a15db727246514471b9c30260070d56c3fa98ee5881ace4ab5cb5700e328df385cc1fd6f07dee407856d26f049c1e7f571fb682ffb4bca6f0be7e2f034738ab49fbaa912bf991c5bdbd9d68444dcde7cf848d5dbc668f8c0896148f614d29866605434eaed7836725ca07681d2e9c49f63c5f7986cc8a848f991df9536e674093f18136da0a822006efdf0e1d3e4091ee4d49708c95013e5b9ff724225e559b4f839119b0ac3b10a301d60c226ba47862b4476df24d1a0710f07f3b178aba9eed3e032608adac4e3c60c635c58f66c058321adf45f49ba2a33a448126e2623a311ecf589d1489992cf7c3b0cc47ee3010af97f244adffb39f2b76d20132a8c92eed6e3021275696949cbaa7ffaa361b79b4232e552239eea5883b75ff47c9e538a3a779fc042a755e20fdcd600b6b366300d49f4df31da9e487cf3c9740568c09eb2c48beabb698e365c1289def549eab0990d3556fd2e41a8bc8fa6a855bf41a7cb609843ff239cffc0dbadcce964d61ecf428ae3d73317628ae9b7168a6901908eeb79c600fc057993874b8c416a8b8a9f479bcc3a4bb37aaead9c0d9c2edda70fdb2cc087ef42ba227d9a503af8ea286ceefaf23e9b7e8021123b26436089257335d71586de3b55dbeb0567ab4d217aad021a6d1c7e9137ba203db58130881d20c779d7691ee10b01ffa9c3d94c4a602e80a09735682c8274bd85b901b2d0fddfe589ed18150c7e39205ca2a139fc7338b2a894d9e865bb6b434c743736be4aec1a03b919b1bf74614b245f23c6ebd9b6dcfe32d0267b002597dad24f0f032a3f4f467f9585c8bd963bed88d2fe1b4f0bfca91acf192071faad99cb9527eb4768c0329b6b444aded8e28f177dc2ffeb35b1e8b2124ad86857c0bfd5ab21c0981b3e4968c7deb985887b3378fe80dafcf8bde6c4907007ec5b84bbbf17f60a4634b20734e995278c5032f179eb1927267ceba294b84778a40218926de8a0593e5c57db7228b0f71ff7a3e524eae2c44f1c0ba2a0bdcfd8cd357122ebdbb58c398d1aa3c2901ded8e279cf422be9f155db52890c9ea4ed7e07d43248f1c8e458372c98a644940984ae337e3400088dd1573be095b8e8a241472ea98074b900ddda5993c8359bcaf721fc79c42e03dbadff8e17a4d7343e464bc73b94a82c6d8d8ce40ae46cc62f5f83c315c58b6511afdaa6499257ace787f2ab64f171465edf1330e0e1e833963eb1b79a73c2c4cc32d7a4d13563a569dce9538d70cb5d04d3962d5722a59672de8442dc175891251cde2101e7b436527357952f038e1be1e8dc183a7a22e1fa664fee562b10801a6a354690804632b3de31bf7db47392dc0f386152ea2b855473880afe47cd1bebf2880e73ab3a53f138109aeb96f8eeb72523a95d1a29cc3486b5480fd6356673f2c8029e7dd0d43979b3cc4a991509c472439e2e918b82d08fa5e18935f8706b6b1716dbbc9ffc8c1ba5d1e5d27a18aae504a4bd4903ac9e0ffff775243546c0abae0bf065901eaf369935c7c1e73695bdaa671b9e46b544fe66366379297cd2706586fd7e3aef9e56ab5c1ea5e0a864ff9e23451b23b874cb19f8758f15111d925a4dba3e706e9f4ce2f67eddf73ea97b0487e062c07f9cafe19b997fad3a0aa031661084251d56752801fff11848c3d911d288fb3010b23bd7166dbc337fd0e2a8a6a9e77bb4e90a01198b0f8d8f3490f6487057449ad0916c5ab0e58093818f6a56fc740ed90be9ef93f85909d9256da67ca4f02915fc59cfc3c26b8f068e86b10215a6112a4b0a3f00f3f145960ae74de875dd17334cfe8ce2e3d95aa78c2c410dc76a16031d10b12f1867cffe04513094ddfe37af6e7b85d4343470965d9cb5ceceb915f1296157021632df8e0a598d583829676ee791b06877f3abd88c61003373ba3324334cd2988f55320dc5099d0e3d321244743c9a19901ebe6e89bc3b8ec8fdf3c5f9bbf9c388fa4815eee7fbee15efca4b55b1395ccaace1c2eca9092c3cb7a70ec5e8772d2031ac0ab797843c4a7d4a546cda484dc77b5639e8ae7f5b74e0982798a4e74c17ef02824ee4138998922b01e3aab1ab9d5dc449c20c35c78de3fcae67b9e4e9cb7c42956717bcc179921a71a7902cbbbb40ea3ef6038ea86469368b9953fefec7408760ff6a9efb8c48881b908ae8852c04816000403dde78cc0fdb118eadfa97576c26b6b49d93e7e2ef7a76a51baf76d573abe09c6fa430085238d77f06617b3d1327cb714602d8f8855a77eeb966e85b995380d25c1bd6190da0e8ab6dfaf18d0d704adfff2ec50f4d03b3d93e6bde77d5ad78ec2068cadd2e9e501a1e8fec0a3769538e60e8c7ccaa91c5f9b36ee7ce3108c19ce3fc53a60e7971fef7011ea1d37780970024ba736cec0d2c1eda9649be7e7b1d2e81ba856cd8bb083656f3a823cb2986d1b47698990cf2b2ad5cdb2cf01024a931ddb808f0ba4ec6a13079949c6dc4d684163a4e53895e49458e6978a65d35987dcd45aeaf70f6cf922cbcc399be0817d617a3a479e8b7606a5cab0ab05853980148d2f7fd7115a1a47394b993b5f0f688ae25bd56e06c8dd95ee027eaedb6111b8a17f6cbfb546639040880be9919971914a4692e4e92a742c8dcfa33a1be8c835bb8fa22c054b6ffad682de1a43acebad1f8ed4c5a9f659e41c45c3489ac8bddc698eb125a1464f846c39e75ea0ea9710e66f27c8d09d5fe42b46ca084f6094d3fa1edcdc4031d0bd991c75c4b525ee52c15cb14f60b32676ef4ca7a5fe880ca83deed97a038dfc4ae2fd8577388182b5bb3ccc9d1154521c675a216ad8755059ab26a6e92c8ec8626471332ef08108747bd8254567b78236bed6b677906ddf2b0ddd15d2961c56665c005736de4c9d4b84a90031c4b3f1d699812fd725c77735b084bcc129daebc723bad8cff4c6721a9db0df9e11bd75d41d158f365c236be1682126bbeaa5177a4db22bd520562e2852c3268639b8121f444e2bfa4aca84f7d7ddae4c79281961a09546b230c4d780f943105c35b4d4c2bb1e98de1e468ad239e08b86dd94d5035a93082eb4e3a2fb5a98855990f20147f1c474a66766e5db116b93b53fc0037697fd7847c064c1c2628273835b2bc73e4253b1aed1dbe6acb35136bfda1692d58fbf24ac53fe7bf9f931bf15b79674ba3260575c05fa870e638d25b19fb23d50dc0ad1b7a3be84dcd675d0c249c7c4b7df4881c048bec0ceaedcbfbc6556289321db0d2e80016f2ad244acd5a5580900cbf7e73ee8b034b9f3da768be2471960101cbee27093e3be9f39158bed54afb97af3bcda1987e34e9a2dbc838b7cd17c6d66dc6c83c465cf854e5abba07efdfd11d817fe2ea83302823dba36f332dadeeb7ee90b7cc82cfe311f7c39c280cde4114b9accecb1d964af791a22b750fb0d0d5559f8ee87d16d2d0e4e924ebb29c305d842e390c59c437ac6583a9ff48341cffdae0640d8f82f21a4507ddfb4ec91463b37942f889a7c5205af78cfca269dc1216df55bbd89063b8817dfb533fbaf1b5308be7510dae587aa57615c071ae1f419bef8479c0b6e7e8a55f64efe976896a713201738917efbb25210f419855ed3540d37e53611812a602b20708bcd17e0c9810cb68daaac19acbeaf63a1a3ecfd516e1fbf6a66eff5c07888e0346481ba32869658c0ec8fe54523411ab5b7142aad22ac5c22fb5f26c073243b0db28f5223de6dd963f072ac9a20f1d8f7e559fd690ef64accf3b7ac836f7eeae408745f1b550fd3f3fddc83eee1a513ae48f19eea1b8e925ecb76158f182cdf2c2418229d8bb51c5a68398f54ca38386535777630ad623abeeeee06a14d91f2b113c890faf8f8d1c4d0cf0dcff0c9a5f9158d268ced6858060893bf6261e42da38de1bc59008c3be58fc2e6c60ef4748b3655422381bca1170b357e0c03e8545e4e0ca569c0255f2c781cda114095b652742f660feed385d8fbf4006e36ae3bbc57c7b28502df13cce3c4d3601f053602615dd60475d40b3286a3ded9c27546d75cd54c55ae731a4778c97d1b71173b1d85418c8ce92a54dc9dc305b5076c09de6c965dac6e6a6b1cf0aa3ce67dd97b63a1d46a60515f6e488ec3b65870c64ae1f7b150e5a7f6a67f85e792220e51c6034419901dfdc5a2b7b29c16987acef9c367c2e55ac5341576ac66a4d112a3a8b0a8927fff090f7a8129ee88ea106ab73563474f8d2fdc0a6dc1712cc1d840c4cc8ffe46790674c0fdc302ef8909b34a73dd27d8c158d91a", 0xf01}], 0x1) 15:49:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010101}}, 0x80) 15:49:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000004001010000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000), 0x4) 15:49:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = dup(r0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340200001400010025bd7000fbdbdf251d03d8000100c14369e19b15b1461244045a0e571f72a7d11781d75cbd7a0e3b85d48b873aa5d41d67f0f145f9a665366276b7e4560878d4629d99efc262e44f1599"], 0x234}}, 0x0) 15:49:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x800000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:49 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000002540)='/dev/urandom\x00', 0xc0, 0x0) 15:49:49 executing program 1: syz_genetlink_get_family_id$ipvs(0x0) syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') 15:49:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_addrs=@generic}) 15:49:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000001014000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0xa00000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:50 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 15:49:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) 15:49:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) io_submit(r1, 0x3, &(0x7f0000000580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x0, r3, 0x0}]) 15:49:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000001", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:50 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000007d40)='/proc/bus/input/handlers\x00', 0x0, 0x0) 15:49:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, {{}, {@val, @void}}}, 0x14}}, 0x0) 15:49:50 executing program 0: pselect6(0x13, &(0x7f00000016c0)={0x3}, 0x0, &(0x7f0000001840), 0x0, 0x0) 15:49:50 executing program 1: pselect6(0x40, &(0x7f0000000040), 0x0, 0xfffffffffffffffe, 0x0, 0x0) 15:49:50 executing program 4: r0 = socket(0xf, 0x3, 0x2) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:49:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0xa1020001}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000000c0)) 15:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={0x0}}, 0x0) [ 2040.354774][T18931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.367762][T26693] __nla_validate_parse: 8 callbacks suppressed [ 2040.367789][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2040.486051][T26705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0xc00000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:51 executing program 0: openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4000, 0x0) 15:49:51 executing program 4: r0 = openat$fuse(0xffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 15:49:51 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 15:49:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000002", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:51 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001540)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)="55b6f0a2d55a54b558a4700d54c04169ad8a6000171e19156131cea1b1a94cbd6bd5b8644dd1de747ebe077538926feea273f793b0cc6e33d96d16151171eb8dbaab965ee5e670f52a3120dc77dfa38d8f6db0e79303c0b818d93a632cc66914e689c27a8c6a211425e10cf61251110602dc58fed15a32f4f2fc61712aa989e29bdc0f0f6c98646591a305c05de812838d519f8e6f27d2493abb942db3300453354bfaf17da1a0126d47e0f4ab8cd4234a5a6990f287", 0xb6}, {&(0x7f0000000280)="d1b00407b3", 0x5}, {&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000340)="5868e00f0caafa0e7d6f2b3130b4f6815190471ed0cf7ae676e767b4140444e6165f184972bf87653a4608a89fe43e9c3467a10b8f1ae90a04f09b1710830571d9a9fd0149a21a95902e6102e96e55b20049b08446faa957e472afc918ba8a36b19166fa698d4bbdf00cc193fbdd52c24e67c4ab8e3941462cb44b19398efb9ecb72dbf3d335fdb53a60373bb37c57f4e1216a093b209c516d6f48575ffec0c406b45610af8fb43bdecfa17eeee4bfc7af3e740aaca44ce7306b83f3c7ef81c2862b1311290a8da746c3060c96fe3d6f850b85782156237146d9ec3761e1ba72f91b3c23a58212c873e2f04e43c262ed501cde9a8d68390a6651b51b880ba1b25edb78e66a759e3cd19802c4f3b98b194ab39ad401090b6c3826f90ecd0dc306ede9f4adaf74d43a445ffaeb4166a4d2553d3161842d53b4186a4a5cddeadf2f1ad508b478d6fadeb691c4bf616aec9563613002071a521f9d44b31802df6f4dbe7f36df002cbd29df5308d47862260ad93616f20eb8a38fa9c3098ef34066169d620ed3ed56eeda6bdac79558b2209afa13f62453850242cace6c80df218db9bbe0aa9975fcdf0032cf59c46581b3933df191e3d979525a86bf24d2312c3e305f370cf3da0175ce62f300fc15af498bbdcd48e34c9d55d6827caf0f9e57cc95795edf142bdd5df846e8e335088213147455712867d30c212788244aad0a5a814846675118d3e7fb419dacd0e4e744fbe7fc86c46c9c83cfd3ef8c8d0acf8fca308ffb83e15e3e736de2cd2f32e121f8d21b6445a09b70d68706134f9c4723bdf038b1c0602b67de00200ccc3b15bc5086ec1a9c46bf9641cf7482a2f27de345fe43713dac0228cf8ec875e4cdf960c1dd069e07ae7b13341146081dd9bd493c6af18089b1951eded5b26ba87232dc9b7d3f6d9dedd661f3cb06f1d7185d23fa43f8153fc66d1a92702cd155ef34d48d026c64f0931e54c473e198727eefb76424a4ebfa7024374367475320af84ef8c9724e29b2c1b48a283ae0c3a8b104d14fd98c11b194a529036bab7628cf54caeb7e4671b34c72eca688e404334c8471ac8cb6620b71b0eeaf1c906132f6dd20ac0bc5014f564bb1867c49073c066aaca26fb0eafcefa43c993d9fb238b473e15d5b5081cda04d0854d59192e10ec541b130f3f0ac7b263e3b977545611fe3474d9ced33e289936cd30b63c95d8dcc71b2cffd28412e4fc67d9d239765b7d972df898187347b86e61f688d643f190ff4dabd2b44e7b83b658940b3149837d8f9f799c5305b6044a3748200f49935261f67186f3e674e7b5188490c6534104f3875c74fa1d5a198cb8d62444d3355e81930d394c641d514833177bb511d4a5fa919a3b96fab314b4e10770d54660169a8deea6f7d0f21bf5b37d4a4365edabaa4728f4bd14a01c8d1d5ea23a97841aae078e617ddd1714c7609ac253a5c4e75c840b59ae3f9a0a7594a9169b383f6d9d3141cdb02a156b331e0b68c1a5220af267986fde5a4c24d0c64642e99a7b58ddb873b5ca33f937fd166d308f21b12300c9708537a6ddd3d48b6cddc101606c807cba411fec120f94786bdd87207c1cd7ae17b2c33f2195b4d05766604446eb47c7bcf31cf9d1852cdc43c3b708251389d268101754e9eb593d5ea75bce91a73a80d72b5cb4301de34a5755ec4a5e50a2e8e28b2239a50a28848c0732b8d0254af1cbcdb1a62083e91b804c0811cc95205f99ab40fbdf30865a791f998fce1de265831bc4478fd2f28a94731948793db118cc5b43e4a6530ec0ba6f215bc311a6ee403e338382bbaefd492ff82acb58a7b174f25211fb6cd83a423234d2947c4b8029f7541f64d24edcdcfd374bbc2ff935562468dd455e0db6cc18a34cb6701fefff598af8a59fb50680fda5768fc706949cdbd1fffa280265a5ad74c3eaf83dc995d6a5efc2ecbec65572f0f06f327640390a551550ce28fc3dfb51478726e7fea925629239645e47a9538aec8c84001d7dc410f6fea20a79355cf2c8f57a2f9de2a81ade074dce12b4b2fe6cccc61b144eaa69844d67eb140193eac427256bcee7b510341ea2720257c57d8e356752438ae340f85f8fe4dfa3578ffaa2cce2cb314df9bb7e96881a66ab691c0c5ebd5c01d7207a4cd9093baaa4bcad9ada34229ebf42b8cc5b6b925180c26360b79802623a5c8e9d0e7385228e032d894decb5eac0566f63449ff0b6f84408778f0de6bcc0f1083319b4554db244986156bce7db4ef45af83b128b000f7d90f861b848e4bc6e2b1432bc14a9bb9529903ecf95f61ab8e913c2899c27f85239aa467d4922431640fa388168ddf0ab305d0d64b70eea346b8084ec3464fea17451798d806d8880afb70a2aa48a93ed0644693c74d348f80a2efbb878aac57ea4ecf6439f23194ef8b2dcd93af076b45ed94c43d5566e967c94e2df56f188b467e1fed48381abf431cad272ca69b709c3797d2f0f36a7dc127e8b6b28a35a60b40e2c9e4bdb48a1e3a6d8d3e7c2c179fac347de94875d8b51983024609097ef1bfd3dc316aec0f9e7c2f4e0f89983399388aba963cf14e17c11862af4d22b9fcfc2a9ac85612bbc36a0ea9f190f4f8712265af49101810881da25a349c966fabdd5136e89431f339aae07fbccfa216b40a29e50f8861740f0e6c3300544a1e6618238ef4387482bb455ecfdcbcf5bcae7b5f5c7a74177627b1348155d65143c675f5642bbdb76c77aca8e3ab84c074b58e471698dd9f881254e6c11aba22f0a7dcd4bfed94fa547f23230605e251e88689c2abfd876c90911e470a22eade0662391508d7ce0ab83e74abcdf1c5243d03c8dc9fd7ea8e43d2d96281a1b1df4a395487a9aadd4479edbb48905a1859623562e3dca81f3f627a83175eb8899c02e45c1df5c2d3ff1e2d8b9834425f47b5c1641690cabcbbef5178935f738bd17116ffbdbee3347100d400bf566cd4c6225429ca574ddd35be73acd280505c4796c9371e4b6f56822fc555ae3604ded8513959809360c4985d8fff61a9a4d4dbd84ccf73aa1b232e3a5defe5a49529447cf6fae6eeeda04deb88ff8f5dcb3c313644277c3db8367327f9694c79e620fa9ad9ebe1c3e1e09d0d0c0b5dc193ac8c99844ba9cb94d4a482395580a81ba6738599bbb9ce0f4f3078e5bb5bbcc8856785732ae1a73e21c8d09034965d8801f5811c331f5089b671517036b36f0431bf4b722b51a496b062993f538c0cda5af0bfae8ff85ee6ef5cc52ccd66d01af66033a0f4c72dded9a42eed9850aafdbfe4e1f089204b5b29bd56d76bb98da36aea9e33d1415ec8d56c0f0bfeafbff61efc7db8bec2beb25db23228bcc761d0a28ac16346f3af05025753f8d12a010c7c73d7430db4f783e53f37394857f44f1e4dca011d35b20e5cd426d9bf4d71234d086500d77a19e71c7145fb764294f1b7d341791185af45005c0155879980eec034a268b9d6b54dd046fb45abc381067c90a6682b22da5823e3d6a7fc8b1a8145c340a3ae30a9540658a380a598810c55b4d99dbd3aae0683d1fbbe447b2879ce421600d2876c1b45a7f081c4c5ec23e945bc0711a74b1e4122f8fe292a5ef3d4b674c9c931fa82363884fe162496c70d4b988c734fd5e3d133dbf85fd37cb27ceee6bd7390c4b54b6a453d24a27385dbc6572b1582081955e1ebdb7339ab52c797ee570061293957294ee86e805171d55925d240587d8bf6c79ffd715d117a2a04b02457139bbe3464c1e7003fd29a988f683350f377cb72f35cc2c18caa5396d41f2e17bdf06eca4c35af7d0ec0fd04ce2f64ce965d4e681d4556baccbf69b7da376b3378d38c7acecfae2817e9ed26570de976f5361bcff01c40f3e1c86fdeddd9ffe8ce83aee07163c619962fef6d1e100027584bdc7230b683665a3dba40d2abc474ac285e446f6aeb4d923664aaf4864d7d004f929e7d9159de3ebc0d2e742f97f8d5992bab4e3f045beace0b807e4ab06384c6df26b861ea7ece303d4a82e54436415f25244a1987441cac0229f26211af1adef68e1c0a89c3823a757b6cd28a3a760bce8ab752228ee24ded12031a09b8b507d9abf05892647b6aac7284f7b5caaf4f5ce8cbf46d54516817da6da5b4fb84f2756253426a37ab3d928f8a8fe1639c5e9188d9cac87c5f30053e2507e07f7676d5dac948345f3d04dff97276de277d48bb00aa46021e1cad51f4894d7e6ee27de5e3ceb7a0d8391466610d9a0b9e7e891b5af73954a8e830e6bd98eee735aadce083175b23139ab96ce7d21ee78a314f584db83c2cd60b4be58d824bcd5a23e128ba45c4f284ce80f6995d5d4014324e1fe989c34d1d5f4538adc4ec4abad33dbd1f71f62b8f667c03cec111e8f11cd8cd27ca3907730fda95f21410928ee457d30710086df26c866a44300334991b36249e7eadcf4fbfb613cb2773e43175844ce173a57b5cede612a386dcd33ba3373e1230ee6eb6fb3267f81b017af5a0931080b4c44440d103d4f6c12b2945c04a3ddfb790770cab310958d6a595736ba5a47374a54df227b1f7ad2c8c185198bfddff19a1a6c4a0beda392f44c736a5094f829097c75f3f96d766b4bda4920aa0b24aa5a5c7d0bac3bcf5c940fb0f164a0c0eb7b9fae1433bc7baccc706952619972cc8c6c831e487ce2b1736ed7de78fa775831ee6f9956503cfc4fd7f363db05bf789f3ed0a7ebba75d9736c4454a5e1e1ff5dab72ee5bf240677c4c5194e722e2e83480fb1bf45d911eed149413ce95b0dee5daf61a0ba1b68ade8953ea7429c42620b45f038c1315eda7d7034d8bdc4a23fd87c0e0bccd497eacf6cc9caa13f8b1087f1661af96680ee47405802725de6841b6d3cf7387cfadd5f47cc44c5b76aaa4c0850ecd32dd758d2da4424b6c849da3164094720ac762b60d00b7f3a305bd5a734304004c40ab72634cd59726bce47bc16222f4d215f30d50f6685f1e20b770dfc18b75761351c69b939847013159d1fdd631e4d433785baa4875db7c2d5d970365a114879fcc2ad367d1bfbe46064fd15f536b48130a1f56e5ac6928041bb852d0396f7698d1d335c61b413942aaf2adc162ee51cb4f7a2d532ce65b905495a839f6fdc7cbce55efa7fe62ef53579a66baa7b1c3dab30d65b8a809537133a1b33aaad9647ada47b42c92fdffce207649014713f6a8ebc1a91b282f8975e657cf5db43346aa974358a400787c0a1813c0767d21eb837a2d7386d30dfaa281f9b8e7d078d3a911b6fee2c1417dcd763084e74e747276dda9d7be57a494536f7a98113bf5afbd3ea1f92559fcc1bb40150f4222652a85ae78a61d80497849cbcb673015497453c60abcabff99682a6dfbb4ecd1c9c4e325035bf7973b25fcaa6141c889417a629ed2b2e103d022b378b27725e0c18f59678db0edf2cf9eb0e121bb1b6a400eda085793c0354061520d972e46c9a6e6e1e4ac1c56702665e39c0670b86e9ebead5f5e2a1fb7cda7460cf344bc6db27873983fbf410898d4bbe0c41d84032394754e21e54330a381aca222104d91fa1661cab23b170798bc776e5e46f1ec0288d01c5806fdc0091089d391cabeb9a674ad26e495ed8b225a643f990fdc6bdbb20a708ec1875469bed9885cefd3f3722e5d889a0ae956eb05a4ed2b908774618a5f1eb5ac254933eeb751f63b78cd093e2d6a356e96d06cf573c3c02c70f1b8cd3969227e2745a627e08a829f36a49d182129ba8781f75b1012ce2d81c3ba04a63a7152a79d4204c0c39fc0a1d63a9408dd18acd36ad4a6d6e0", 0x1000}, {&(0x7f00000014c0)="7be3aff2cf37e8a37ae9553ea7ac948af9b8f8c5f4d8588f5ea9e6f1c19a0aef7961f1e7c95a60ef6d29e0c09f32d24af3d34cc905bd58cd1a97c0b4212fc378f9510a765bb39b3e5cf27d2947f4464caf15c89768fe6d58527777e1"}, {&(0x7f0000001600)="7e2e95d61aede9515de484c22e5c6aa60634d6b1b04b52a42c0ea96b936ca8e518a183698d72b59142c548c8c34f794188f14be4ac40598a9944bfcf0560219c6ca7fb5a08af415043b4e90dd659f842b286bd31e70863417f0aa1271adb5543b40b4f0e20bcc8d17d8d14b6707c3d01016c38593243e0d9b09d3569d228187564425e58e017bb57da2fbac28cd199ab30fe36649b101b69ed49be019a67b8686ff44a90ee986eec2c4e83060b78ad198d167d85d176c715789004de"}], 0x4, &(0x7f0000001580)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xffffffffffffff5f}}], 0x8c}, 0x0) 15:49:52 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2040.796786][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:52 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x55) 15:49:52 executing program 4: r0 = mq_open(&(0x7f00000000c0)=',\t\x00\x00\x00s*\xf2j', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/95, 0x5f, 0x0, &(0x7f0000000080)) 15:49:52 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x1, 0x0) 15:49:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000004", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:52 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000980)={0x81}, &(0x7f00000009c0)) [ 2041.175035][T26744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0xe00000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:52 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000003200)='batadv\x00') 15:49:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001700)={&(0x7f0000000280), 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x21, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x0) 15:49:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x6f, 0x0, 0x0, 0x0, 0x0, {{}, {@void}}}, 0x14}}, 0x0) 15:49:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000040", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:52 executing program 1: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 2041.744781][T26775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:53 executing program 4: mq_open(&(0x7f0000000900)='*}/.\x00', 0x0, 0x0, 0x0) 15:49:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff4c) 15:49:53 executing program 1: openat$bsg(0xffffff9c, 0x0, 0x610500, 0x0) 15:49:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x0) [ 2042.185709][T26775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$TIOCMSET(r0, 0x5418, 0x0) 15:49:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffe0", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x1000000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:53 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') 15:49:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc09ca2fbf8e6b4d8) 15:49:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x663b4c54440651aa, 0x0) 15:49:53 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6810f11e149023d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:49:53 executing program 0: openat$bsg(0xffffff9c, 0x0, 0x555002, 0x0) 15:49:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000fffffffffffff0", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2042.720147][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={0x0}}, 0x0) 15:49:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001340)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_SYNPROXY={0x4}, @CTA_NAT_DST={0x4}]}, 0x24}}, 0x0) 15:49:54 executing program 2: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x100000001}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) [ 2042.986270][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001040)={0x0, 0x9, &(0x7f0000003180)="2bc4bf2877ac8b0f93"}) 15:49:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x6000000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:54 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1250c2, 0x0) 15:49:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2043.501498][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:54 executing program 4: keyctl$unlink(0x5, 0x0, 0xfffffffffffffffb) 15:49:54 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200), 0x8}) 15:49:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001340)={0x3c, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_SYNPROXY={0x4}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x3c}}, 0x0) [ 2043.682194][T26840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:49:55 executing program 1: keyctl$assume_authority(0xb, 0x0) 15:49:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x6558000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007280)={&(0x7f0000000640)=@proc={0x2}, 0xc, 0x0}, 0x0) 15:49:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:49:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007280)={0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000005000)={0x10, 0x101b, 0x1}, 0x10}], 0x1}, 0x0) 15:49:55 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000020) 15:49:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000000040)={0x14, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:49:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x4, r0) 15:49:55 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf0ff7f}}, 0x0) 15:49:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) 15:49:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x8100000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000000040)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 15:49:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:56 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 15:49:56 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$assume_authority(0x5, r1) keyctl$describe(0x6, r1, 0x0, 0x0) 15:49:56 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:49:56 executing program 1: request_key(&(0x7f0000001380)='asymmetric\x00', &(0x7f00000013c0)={'syz', 0x0}, 0x0, 0x0) 15:49:56 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, r1) 15:49:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000080)) 15:49:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:56 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) 15:49:57 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, r0) request_key(&(0x7f0000001380)='asymmetric\x00', &(0x7f00000013c0)={'syz', 0x0}, &(0x7f0000001400)='\x00', 0x0) 15:49:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x38}}, 0x0) [ 2045.916937][T26932] __nla_validate_parse: 4 callbacks suppressed [ 2045.916959][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:57 executing program 0: r0 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x785b9e9bb61bf7f6) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r0) 15:49:57 executing program 4: keyctl$assume_authority(0x2, 0x0) 15:49:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:57 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x40c8) 15:49:57 executing program 4: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x0) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0xffffff15) 15:49:57 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)=0xffffffffffffffba) 15:49:57 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3}, 0xc) [ 2046.472595][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000007280)={0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000005000)={0x14, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:49:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x9011faa200000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:49:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:58 executing program 1: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0x0) 15:49:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:49:58 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x4, r0, 0xfffffffffffffffb) 15:49:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007280)={&(0x7f0000000640)=@proc, 0xc, &(0x7f0000007200)=[{&(0x7f0000000680)={0xec4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xea9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="86e82d1ece572e2755104e7977f6655060c22720644e10982d00586007d538e3d6513277033ca56d2b69e3011ae329bb90a99e83fba1a6f53f1cb85dfeae4d138cbf4cd060cc27301dc37b75bb3de15f693d97dd21b09945e7d4d77437e930041e8ccdc5ac286e4f975fcddb90d2ab148b3ef7c76852f327e87c4d9a368227a4bb6bff97863642d34c19397b81722c3a4db936eaa221d0bec7bb0ae3d8314918bdb6397855be7897353e547f26847e9c8009cf32d87f389a628c0b9ae30ff850c5424162f537610cf1cf93f2a9d3e6bb0b1e04fb0fe5f1ae7b9ecb933afe89f90a65876b56791e189dfb33049c271a307369235148afc44c01d30ca73064ba7d6212c27b6beb473d817a562825efad1a815b96853875e279ff2e0f710a7158fd3c9f2d2656e187d993a22771ed49c83f1746eef94d9c6c65def3d946c821543e4c946cf64361af2da22f5723d6ff7aef3a59198374d86616980cda4c1f395bf001f7df589004a47a3315a5b34e396563272a345b9faf2d5f3a55cb78f810b661ab93cac0d86a472174a1c65907ec8d8ca04142c9f767cb189c89b78813f6e687d40bca566b752d01ddb5e76f968e544b6198a45354c32ab734cf17db4528b60464433ebbf187ae05816a1a76432a52a5e6c48d01b27b5a388fdeacaa17a408eddfa16ec64a93dd2183caeef583f2cc043a6e575c11666dc4bd27a4f93927d8791962a1c0b1b130b7c558680115350f9d1cd847693dd3de3694b7a06868ab30c45a42da7545a207267d6cd2be729dabae71c613df44eac65d5e3cd5489ea9565f7db3a6c630c6e7e842bf5dfbc1c5db5c854bb3c23b899ba82f07839f4ca28100d76877e7dba300bb27e68552428589bcb3291743a7a09cd27a8b75ad89871d3cb459a23897441d58c91d56e65b22cc460a4917c6617f60873d2cffc4075400194ced11a3951e98e9dc18ff73c6f55550c56be9ec0705bb14d6b5291f59c79373d72f5d507cc312c11601aba8aef13d42435c0aa60ee5af9781ce0450f86bce0d10e65c1337f44ea651c8592d1d43df56a7168c11e81a51a5dc8eadc626cc0b8abb74e6ac1b89fea30212a7ca7db8c45983e894793fe94b9343d0f34b110d86d4e05e3a3da19edfd00627a9493c4f673be25f3dea5a365082c549000dbcfc96b513f9316a586203635891407270b9dac9c9a105ef75f412e8bb4f668d5f7b423d6f47c71fae82c61d22862fa88ff9bc025c6eedb05dbd1dffea36588fc39a82c65ce04f6e242f793074a2fd63f751c63582a253f0d503a9fb4ba2641f08af6018da76405b2711ad02b79550d5c482443a736571867bfb3430f5b7641fac21e55647a4c479f0ac80ee2a7c687859bf2aba9d0c8afdffa9234c16e279a4b86452e8d60d1de3115507233947280b3c85f86f4f53af537b030ceb3009516d2404cbb361716cf887151c2f5ac4fe44557b176d225fc73b6f454132721aededf234bc299cc1a48600edeecdfd5e46377663b26d996d5fecb8fbd76faeb2d1c1ed453d46dd5126887e3857d44db33f83ff8900d1246b5642d0c626c08bfd8b7a994833f32b6a61b6a0a5abd84124507cc36f195f16b6b104f38cb95ad5c2ee9854bfbe174436e3325265e49a6cbcf5cb2c6e49f48c6fbf9359ea8cd86d49eb9b0c4db143e9296883b6bcebecbba89d25e4e40be5638e397be4c3b9dd093b349d7845831ca3eb4d4c297cb75c177b09a7a436de98805fe76b1a8d7efb7a9f29f2ff76fbde14404421411d01ec6a6dc9d5c684ab5d32eed37f6271dd4550380c30603c9f445c60f6457113ece9032f7c17627a54911f4a5d73fd422af3e483e4570be8eeef9c80b044ff820658341ec29bde30760086a768b26baf846f9b01ae3fa24571c253f58197e006a1293708e0ef05cc9be55d69620ea2cfdd3463fb7a66500b14bc450a1771ccce6929d233c708325ea1b6dcc0e4a09fec38efa8356f61894a43f9bd50f452a3d35cbf817e0c2ae8bcfba17782213e69a3e7a9e46cc9b2c7c3245deebed917f65c4ee56aadbb5c54e7167ae5ee18de78c9a4a73b2236fda126227b2d2baee8fdabe1db6339e3c4973448df8a919bab09467ba192700bcd4227fc3b78cfce0c9a94bef29d77032143c6ac7e8167311925eb184d8ecf8cd185279c85d47249fb90107495daa10ed0b2a57712a9cde67241a644e2a0684e283948d19b35e3c44e1f7e31546f4dfc3d1636a38cfc267db0ed22ce1d3baec27aff31184d0da48a7a0873d3beb7c40debc49ab4c0150349fd9bedf2d232897604f3d180fd57c961ea24bfff37f9613fcfe16778371c0d4687b70d01dc43c020ba3def883e788047e58e8db9364def6ce6c53cb7dd671d3dac4d7b420b715340fa6f2603d8f29d0a9f76c177345c23efc93bc89449c84400aadd1d1ddae2f52755a487db42e446a4b98324a1e6cb8c9ef96cbb863831de2fa174b705b69e51d13883554c8c166dc4ed10eee1e85d883c383c8b1b88ab376327f6276c2b3c89120f6ef50a95a8e9ebe7d510d8d4f62cf571b5900d00140eee2ebe49ed7dd00f3e861636c11bfdf71a10eef8025c5da910f35f18e051fb1d4fdedc9d79abf4993ffcb41214b7cc4047bfcdef0f398a048388ffaa8e4a3be023edebe5b824f6c4f46e2864de11210c48bb1087d7f601aea1d97e47629f48b53d5f2c4fb2e3bbddb84bb8cf5714b7cc514509bd6635fa055bffeab3ef0ee5e133b39412fd5537fc2e0f2b36ff0bd3e9b41eb3efa47a14514245c60a0b604255acad6f53f5da2fd78a3fd45084da53e0b6cd784646f00da9fe5ab3463eb703c8e643a5bc144a1b3bee2844b0b443882531d374d1768735ab7cbaf47ff7c30f37ac2d90f797c654273a03fb61e80a46854f5984450cd6d9f7e566f7856fef83c0c763b17ab813f62c299798d70c3a2bc2f6ecd9a02551b6b4d3d5bb5e154bac98a223576a9995cd6877521a5b535920c929ea729a901722f7ba82c26091951ffe5a6caae53c9d0916d608b09b3062bd84dbb3fd5f7a92c60594a713a07688df077e89615569775f50d7da214fe398830c035cdd5da32230b81bcf815b5c533a357c3e67d8daa1e4bc805a300200fcb26f5b3b2668d0b51945e7f3aae0f7140e1ce64f0ba5c2d7038a56351646076229a440d16d6e8bef3b6fa76ba74c87a0e79a676ddb7a238ab02e643b493b85b6384aae74d05ff261398821b364fb8d1c60c6d27f4eb6dce8da75a5ebe0f757e96119d622ee082cf4ea44f075cc90aab14f472f2c76a21fefcb014d8aeed2c85435277a4b88526183a0942696521e103d195b636ba3de56c4a288ec572b08ea2bb97086b3113852f71d09a0b3dd36e4ff9183f12011dec6cca034072978ccf5397f0ae5307d83ba32caff878b99bd9c4470abb29afdebdd4ba2058baaddd4bb7480f9186d8264b1c7216f4336f202a0deb5d2ebe0fa570898bc6fb4cfe19613299482f4492d761264a567457f05bf4d3cddd55d4620de8dc7790eb3105789f1182157d8f7d7e29cc386a463d47c79e64f1866046c20205147ccf4bb5f3bff613f6d38df712b41af1d900b2d4eee384a6b976bfd4287ceb42a5e68974dea6307600514e4866ef330f13a1cbb6cf6eb589a3f0dc74576e4e35ccb7484c5c6516afe920514a873bd922c98c95b00d12c89cb1d1c6b1f089c9c7dbf8ebc6a46076199634b2fd73c1a668c701e42e1d622ccf963669d17aba9ffa71f570d9c15c6402b84e0dc75651eb59fc3859bfeaee7bc79fa466e96ab3696b05ff4961f63a5f8c80767978c3a233c94ff75db4708f320680d231d6fd81cfa7e2f98c15d92465bc1a8dfbc5d7a8a6e2b8f77f2772f722c3227efef9f2f6a141b7b7b70f51b35210ac0b9895ba69b7153cc0eb5c6b0ce11d020a0e03a4d415afb135d7f84246011695c1bc3e2cac44282ffe8c33dbb97539c74ea77474a06e293da10665e51ef34fddbf2a723ab5883ce6f465b412ee178157dec64f02c31ca347b9052d2b3fe4e813e7fde34b301d31fcb72df2c124df25298fa73f0229647425afc04a43c56e3c216cb913c7efbfed605e1422166d423c15f36ca7d8e19024002150a22d92e0c2d1339888c20d79de9eb10cdd92dbf788f72b30d5318850d80a1110f89d0763cf2a07492f6e90cb93645858ae83d74e311246ad23b6b91e7df1deccd064ff31fdad894d62ea82b141888d04c9f937645ed449900ce3c41560e6097a06a4425acab3c0d1f6d22e99cdf1b03070ab2b87a92b67353874684e7135858b9929b6b4292ca380d639efe087b6a57947287c43ec63c47fbbd39d25cfef1b3b7a5d4cec1e71f6933a5be5c6b88fb1f906c1d9f2b12d33839c8023820fddc2256b3cb20fa996c55e43bd3c8f450d9df64cf4b994e66e842ecff540549a01387d21b2b738d5f8b786b9f31d2b4d74e884bf3dd87c17a2e140e180a33265c3f9d2e2c846d3529d643bc3970bf0a3d5dbd81000e31c84c3ada7ffe700334695d6fd5932a98bd0a95875c8110aab1a54afc12e0b65a42590e0b939a93868978c502f0d1ef9f0d475c53420e55d11d57fe5fcda3291bed824076ab81d8a7d23370956d6166d4a1cacd210f65ecf2e01a93fb954e52009ea6f2aba4cba3b99afcd4b1236bb0aa8081f94eff8eaa8318e689339fc185bbd350b5e7a8e67f997d38142cb426b9e285e6a6f8a57648a7feec76e42be7180001e8d60e08630fd378e7036c15aba23faaeccb5c93e063738cec0b91e90681dcf11a3a4d8f317c2dc308ae5864892f5d03aa82ac24b6c397874888d7c48eb27e10014902bfb5a614668ee7b5e69ce312849c6dd538ba718e0295a29adf5d0efc83b2163a33e96a3af386cdaf9035fe5db307cc180f3200432200dc3d9be7e11cea550409777e1858ed0ca24fa14e37991c58249f471296915c8f5a072356a613616c7d27d0d12858121f6d0882a7d2354801bbc903cb597590be433e6f9a21de63147ddb7527ebf973822ba38566c48ef23f1a85a18dd75defe0815f9a61df93bca4eccc896b20916336d2563aefb5a596ace48c15501193b1060961cb479dfecfca80a6c7e2b79fb65e84164e6f0dc4ac3ef5f67c2b4dacb293ea0b76c7631cd260601ee3da654b87e545c5248472c46fbb5348b02e3085a92e5f42cbeb4d6e233ff27e6a5e89209578fc3f7d985d74662f6b7da87e11119c62ae7822043b0e2457d5a79d3af3918cdeb8f84eaa7d0896ef08fa7606b15f8bcd65327fdcce4cc39c4ab818633849e43687ae58c75b"]}]}, 0xec4}], 0x300}, 0x0) [ 2047.254358][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:58 executing program 0: perf_event_open(&(0x7f0000001140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2047.589639][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'tunl0\x00', 0x0}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 15:49:59 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:49:59 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0xfaff, 0x0, 0xffffffffffffffff) 15:49:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000200000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x9effffff00000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2048.063481][T27011] device syz_tun left promiscuous mode [ 2048.091028][T27011] bridge284: port 1(syz_tun) entered disabled state 15:49:59 executing program 1: perf_event_open(&(0x7f0000001140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2048.225448][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:49:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:49:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 15:49:59 executing program 0: r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x41) 15:49:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:49:59 executing program 1: add_key$fscrypt_v1(&(0x7f0000000200)='logon\x00', &(0x7f0000000300)={'fscrypt:', @auto=[0x61, 0x36, 0x0, 0xb34f3a19968e863f, 0x39, 0x65, 0x34, 0x0, 0x62]}, &(0x7f0000000340)={0x0, "33155ec1ce923d0911ad5d3d004cc01fa8cfe40f8a1ea7dd3fe59ddec39f7f28e3e348ae378d94a1ad3729b74476e8e555d6e092f2a6aaf78f92ba19a0231409", 0x11}, 0x48, 0xfffffffffffffffc) [ 2048.648689][T27018] bridge1525: port 1(syz_tun) entered disabled state 15:50:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 15:50:00 executing program 0: shmget$private(0x0, 0x12000, 0xc1a8a37ad81a903, &(0x7f0000fed000/0x12000)=nil) 15:50:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000300)) 15:50:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0xa, &(0x7f0000000240), 0x4) 15:50:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 15:50:00 executing program 0: add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) [ 2049.118989][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:00 executing program 4: request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) 15:50:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:50:00 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "8cefcee7564538716ca1147f3113c6e1963109c0d3436329b552449707d22031805f8a741cf5862d16d4b93311c904d3d2af551ac1d4e6875985ed2466d77ba2"}, 0x48, r1) [ 2049.380697][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:50:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x2, 0x4) 15:50:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x8000, 0x4) 15:50:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:00 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000040), 0xc, &(0x7f0000000c80)={0x0}}, 0x0) 15:50:00 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') [ 2049.756515][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:01 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x402, 0x0) inotify_init1(0x80800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) unshare(0x42000000) write$sndseq(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x100) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x3e9, 0x400, 0x70bd2d, 0x25dfdbfc, {0x2, 0x1, 0x0, 0x0, 0x1, 0x1d, 0x7, 0x5, 0x0, 0x101}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x2000)=nil}) 15:50:01 executing program 4: timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)) 15:50:01 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000000)) [ 2049.941552][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:01 executing program 2: r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x80000000) 15:50:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2050.085684][T27109] IPVS: ftp: loaded support on port[0] = 21 15:50:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4f6f, 0x4) 15:50:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000440)={0xec4, 0x464, 0x0, 0x0, 0x0, "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"}, 0xec4}}, 0x0) [ 2050.322111][T27110] IPVS: ftp: loaded support on port[0] = 21 [ 2050.463455][T27139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:01 executing program 2: socketpair(0x2, 0x0, 0x1000, 0x0) 15:50:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:01 executing program 1: r0 = shmat(0x0, &(0x7f00008c2000/0x4000)=nil, 0x4000) shmdt(r0) 15:50:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000180)={0x0, 0x2d, &(0x7f0000000140)={0x0}}, 0x44810) 15:50:02 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f00000001c0)) 15:50:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:50:02 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') 15:50:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:02 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, r0+60000000}}, &(0x7f0000000340)) 15:50:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000fffd5c", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2051.127891][T27190] __nla_validate_parse: 1 callbacks suppressed [ 2051.127915][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:02 executing program 4: perf_event_open(&(0x7f0000000840)={0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:50:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffff3}}, 0x0) 15:50:02 executing program 2: r0 = epoll_create(0xff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x20000010}) 15:50:02 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 15:50:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:02 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) [ 2051.482402][T27197] bridge1594: port 1(syz_tun) entered blocking state [ 2051.482470][T27197] bridge1594: port 1(syz_tun) entered disabled state 15:50:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2051.535029][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:02 executing program 1: timer_create(0x0, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, r0+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) [ 2051.755924][T27219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100)=0x7, 0x4) 15:50:03 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 15:50:03 executing program 4: epoll_create1(0x3a59db5353d71cf7) 15:50:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2051.968497][T27219] bridge1594: port 1(syz_tun) entered disabled state 15:50:03 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)) 15:50:03 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x1000}) 15:50:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) write$P9_RRENAME(r0, 0x0, 0x0) 15:50:03 executing program 4: timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x16}, 0x0, 0x0, &(0x7f0000000280), 0x0) [ 2052.159912][T27219] bridge1595: port 1(syz_tun) entered blocking state [ 2052.176106][T27219] bridge1595: port 1(syz_tun) entered disabled state [ 2052.295353][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:03 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) 15:50:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$P9_RMKNOD(r0, 0x0, 0x0) 15:50:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) statx(r0, &(0x7f0000000040)='\x00', 0x1000, 0x0, &(0x7f0000000080)) 15:50:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='sched\x00') write$apparmor_current(r0, 0x0, 0x0) 15:50:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000000300)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) [ 2052.728448][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:04 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)="ff", 0x1}, {&(0x7f0000000240)="ed", 0x1}], 0x3}}], 0xffffff1f, 0x0) 15:50:04 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)="ff", 0x33fe0}], 0x2}}], 0x1, 0x0) 15:50:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:04 executing program 0: pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) [ 2053.002958][T27268] bridge1595: port 1(syz_tun) entered disabled state 15:50:04 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) 15:50:04 executing program 4: shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 2053.045086][T27268] bridge1596: port 1(syz_tun) entered blocking state [ 2053.065638][T27268] bridge1596: port 1(syz_tun) entered disabled state 15:50:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000058", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:04 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udplite\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:50:04 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000003c0)=""/175) 15:50:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2053.650112][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') write$binfmt_script(r0, 0x0, 0x0) [ 2053.876697][T27305] bridge1596: port 1(syz_tun) entered disabled state [ 2053.917917][T27305] bridge1597: port 1(syz_tun) entered blocking state [ 2053.925803][T27305] bridge1597: port 1(syz_tun) entered disabled state 15:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x10) 15:50:05 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[], 0xfffffe64) write$nbd(r0, &(0x7f00000000c0), 0x10) 15:50:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2054.073351][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0}}, 0x40000) 15:50:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) 15:50:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40004) 15:50:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:05 executing program 1: pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 15:50:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/fscreate\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 15:50:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002bc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 2054.632686][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 15:50:06 executing program 1: io_cancel(0x0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 2054.903854][T27342] bridge1597: port 1(syz_tun) entered disabled state 15:50:06 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) 15:50:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2054.945863][T27342] bridge1598: port 1(syz_tun) entered blocking state [ 2054.971261][T27342] bridge1598: port 1(syz_tun) entered disabled state 15:50:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udplite\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x0) [ 2055.060961][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xa}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x60) 15:50:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x80, &(0x7f0000000200)=@abs, 0x6e) 15:50:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2055.328024][T27363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udplite\x00') sendmmsg$unix(r0, 0x0, 0x0, 0x0) 15:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80) [ 2055.468586][T27363] bridge1598: port 1(syz_tun) entered disabled state 15:50:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 15:50:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4c040) [ 2055.572904][T27363] bridge1599: port 1(syz_tun) entered blocking state [ 2055.608316][T27363] bridge1599: port 1(syz_tun) entered disabled state 15:50:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, 0xe8) 15:50:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffa8", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2055.822473][T27386] bridge1599: port 1(syz_tun) entered disabled state 15:50:07 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udplite\x00') sendmsg$NET_DM_CMD_START(r0, 0x0, 0x0) 15:50:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:07 executing program 2: getgroups(0x1, &(0x7f0000000000)=[0x0]) setfsgid(r0) 15:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x54}}, 0x40) 15:50:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) 15:50:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000002c0)) [ 2056.133154][T27405] __nla_validate_parse: 1 callbacks suppressed [ 2056.133176][T27405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44000) 15:50:07 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 15:50:07 executing program 2: pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) [ 2056.380398][T27411] bridge1601: port 1(syz_tun) entered blocking state [ 2056.393285][T27411] bridge1601: port 1(syz_tun) entered disabled state [ 2056.424390][T27405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000000000001e", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:07 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0xc54f3d2694ab1146) 15:50:07 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[], 0xfffffe64) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'changeprofile ', '/\x00'}, 0x10) 15:50:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xe}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:07 executing program 4: pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 15:50:08 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[], 0xfffffe64) write$P9_RLINK(r0, &(0x7f00000001c0)={0x7}, 0x7) [ 2056.803139][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0) 15:50:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000140)="e3", 0x1, 0x80, &(0x7f0000000200)=@abs, 0x6e) 15:50:08 executing program 1: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140), 0x8) 15:50:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00'}) [ 2057.059480][T27446] bridge1601: port 1(syz_tun) entered disabled state [ 2057.185002][T27446] bridge1602: port 1(syz_tun) entered blocking state [ 2057.193398][T27446] bridge1602: port 1(syz_tun) entered disabled state 15:50:08 executing program 4: semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x1}], 0x1, 0x0) [ 2057.271491][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000009", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:08 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x4e20, @multicast1}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @isdn={0x22, 0x81, 0x0, 0x7, 0x5}, 0x7fff}) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e, 0x800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x2, 0x15, 0x3, 0x1, @mcast2, @local, 0x0, 0x10, 0xf3, 0x3}}) recvfrom$packet(r1, &(0x7f0000000140)=""/133, 0x85, 0x40000000, &(0x7f00000002c0)={0x11, 0xf8, r2, 0x1, 0x14, 0x6, @remote}, 0x14) 15:50:08 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) 15:50:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2057.488975][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2057.698682][T27471] bridge1602: port 1(syz_tun) entered disabled state [ 2057.730007][T27471] bridge1603: port 1(syz_tun) entered blocking state [ 2057.738228][T27471] bridge1603: port 1(syz_tun) entered disabled state 15:50:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)) 15:50:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000280)=[{0x0, 0x0, 0x0}], 0x1, 0x2000014) 15:50:09 executing program 0: pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) connect$unix(r0, 0x0, 0x0) [ 2057.837481][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={0x0}}, 0x20000800) 15:50:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 15:50:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000000009", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2058.002187][T27489] bridge1603: port 1(syz_tun) entered disabled state 15:50:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/raw\x00') sendmsg$NLBL_UNLABEL_C_LIST(r0, 0x0, 0x0) [ 2058.057301][T27489] bridge1604: port 1(syz_tun) entered blocking state [ 2058.094060][T27489] bridge1604: port 1(syz_tun) entered disabled state 15:50:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 15:50:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) 15:50:09 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 15:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000440)) 15:50:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:09 executing program 4: pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 2058.479663][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:09 executing program 1: pipe(&(0x7f0000000a40)) 15:50:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x4, &(0x7f0000000f80)=@framed={{}, [@ldst={0x1}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180), 0x10}, 0x78) 15:50:09 executing program 2: sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000100000000df04000680011a"], 0x24}}, 0x0) [ 2058.662504][T27528] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000380)) 15:50:09 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f0000003780)) 15:50:10 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0xc0}}, 0x0) [ 2058.795190][T27527] bridge1604: port 1(syz_tun) entered disabled state [ 2058.836891][T27527] bridge1605: port 1(syz_tun) entered blocking state [ 2058.882589][T27527] bridge1605: port 1(syz_tun) entered disabled state [ 2059.044221][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2059.224227][T27544] bridge1605: port 1(syz_tun) entered disabled state 15:50:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xf0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000007fffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:10 executing program 2: clock_gettime(0x0, &(0x7f0000000480)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 15:50:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f00000024c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002500)=0x14) 15:50:10 executing program 4: socketpair(0x25, 0x1, 0x5, &(0x7f0000000800)) 15:50:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000100000000df04"], 0x24}}, 0x0) [ 2059.414338][T27554] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x14, r1, 0x101}, 0x14}}, 0x0) 15:50:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x40) 15:50:10 executing program 1: socketpair(0x21, 0x0, 0x2, &(0x7f0000003780)) 15:50:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000ffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2059.781649][T27566] bridge1607: port 1(syz_tun) entered blocking state [ 2059.793332][T27566] bridge1607: port 1(syz_tun) entered disabled state 15:50:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2059.941125][T27566] bridge1607: port 1(syz_tun) entered disabled state 15:50:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 15:50:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:11 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) 15:50:11 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, 0x0, 0x0) 15:50:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000f0ffffffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:11 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f0000000240)) 15:50:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000080)) 15:50:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 15:50:11 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800), 0x10) 15:50:11 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0"], 0xc0}}, 0x0) 15:50:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 15:50:11 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r0, 0x0) 15:50:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000020000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2060.703781][T27597] bridge1609: port 1(syz_tun) entered blocking state [ 2060.718007][T27597] bridge1609: port 1(syz_tun) entered disabled state 15:50:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xa00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:12 executing program 4: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0xbb2}, &(0x7f00000004c0)={0x0, r0+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x9]}, 0x8}) 15:50:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x990, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xb, 0x4}, 0x40) 15:50:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005340)=ANY=[@ANYBLOB='@\v\x00\x00', @ANYRES16, @ANYBLOB="04"], 0xb40}}, 0x0) 15:50:12 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, r0) 15:50:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000030000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:12 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000005440)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005400)={&(0x7f0000005380)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 15:50:12 executing program 4: socketpair(0x28, 0x0, 0x1000, &(0x7f0000000000)) [ 2061.359333][T27643] bridge1609: port 1(syz_tun) entered disabled state 15:50:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000040000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2061.423147][T27643] bridge1610: port 1(syz_tun) entered blocking state [ 2061.474793][T27643] bridge1610: port 1(syz_tun) entered disabled state 15:50:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x11, r0, 0x0) 15:50:12 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'macsec0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 15:50:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x0, 0x400001}, 0x20) [ 2061.621770][T27634] __nla_validate_parse: 6 callbacks suppressed [ 2061.621793][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250a000000b40001803800040020001e"], 0x1a0}}, 0x0) 15:50:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) [ 2061.892524][T27667] tipc: Enabling of bearer rejected, failed to enable media [ 2061.908345][T27670] tipc: Enabling of bearer rejected, failed to enable media 15:50:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) 15:50:13 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 15:50:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000050000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2061.973515][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 15:50:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) [ 2062.157215][T27673] bridge1610: port 1(syz_tun) entered disabled state 15:50:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x28}}, 0x0) 15:50:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000060000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2062.224012][T27673] bridge1611: port 1(syz_tun) entered blocking state [ 2062.250139][T27673] bridge1611: port 1(syz_tun) entered disabled state 15:50:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x464}, 0x40) 15:50:13 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2062.394706][T27677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xe00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x646, 0x1}, 0x40) 15:50:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 15:50:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000070000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x4, &(0x7f0000000f80)=@framed={{}, [@ldst]}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:50:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x801) 15:50:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x40) 15:50:14 executing program 4: socketpair(0x0, 0x80802, 0x0, 0x0) [ 2062.790661][T27714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:14 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f0000003780)) 15:50:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000080000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2063.021467][T27727] can: request_module (can-proto-0) failed. 15:50:14 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 2063.105871][T27727] can: request_module (can-proto-0) failed. [ 2063.105952][T27714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:14 executing program 2: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x79637b0a8934e975) [ 2063.194324][T27724] bridge1611: port 1(syz_tun) entered disabled state [ 2063.261746][T27724] bridge1612: port 1(syz_tun) entered blocking state [ 2063.340017][T27724] bridge1612: port 1(syz_tun) entered disabled state 15:50:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @remote}], 0x1c) 15:50:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={0x0}}, 0x0) 15:50:14 executing program 2: socketpair(0x10, 0x0, 0x0, &(0x7f0000009ec0)) 15:50:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x18, r1, 0x101, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 15:50:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000090000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:14 executing program 0: socketpair(0x0, 0x300, 0x0, 0x0) 15:50:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) [ 2063.712701][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:15 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) accept(r0, 0x0, 0x0) 15:50:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000a0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) [ 2063.981762][T27758] bridge1612: port 1(syz_tun) entered disabled state 15:50:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x12, r0, 0x0) [ 2064.048979][T27758] bridge1613: port 1(syz_tun) entered blocking state [ 2064.097864][T27758] bridge1613: port 1(syz_tun) entered disabled state [ 2064.238617][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x6000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:15 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 15:50:15 executing program 0: getsockname(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x5, &(0x7f0000000f80)=@framed={{}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x3, 0x8, 0x8}, @ldst={0x3, 0x1, 0x1, 0x6, 0x6, 0x36}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x6}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0xc, 0x3f}, 0x10}, 0x78) 15:50:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000c0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002b80)={&(0x7f0000000640), 0xc, &(0x7f0000002b40)={&(0x7f0000000680)={0xec0, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x113c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "23ed8357c9ece53312d1f6560ae4130ac097315bee3f9907d6ae803ab76a5fd59b99a31f3a33adfaf4d2a1cd1add093ef921012c29b8b958b62d8e53216077c22ff4cf0cd91c09184f"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{@[\\%!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!&![^\xc4,N+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1001, 0x5, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0xd, 0x3, "70f56c614065232b89"}, @ETHTOOL_A_WOL_MODES={0xd64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '${%\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[^}}\'[!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']*&@\v%!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[-:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc65, 0x4, "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"}]}]}, 0x1ec4}}, 0x0) 15:50:15 executing program 0: r0 = socket(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20000000) 15:50:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000e0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:15 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}}, 0x24000002) getpeername(r0, 0x0, 0x0) [ 2064.647104][T27791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:15 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0xac9056a58ee9d96f) 15:50:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0xeb3e2a0db1d32559}, 0x14}}, 0x0) [ 2064.888342][T27795] bridge1613: port 1(syz_tun) entered disabled state [ 2064.968601][T27795] bridge1614: port 1(syz_tun) entered blocking state [ 2065.038817][T27795] bridge1614: port 1(syz_tun) entered disabled state [ 2065.150081][T27791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:21 executing program 2: socketpair(0x28, 0x0, 0x1, &(0x7f00000001c0)) 15:50:21 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 15:50:21 executing program 0: socket(0x22, 0x0, 0xfffffffd) 15:50:21 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x8a}, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 15:50:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000100000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x6558}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2070.749175][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000240), 0x4) 15:50:22 executing program 1: r0 = semget(0x1, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{}, {0x4}], 0x2) 15:50:22 executing program 0: shmget$private(0x0, 0x3000, 0x342, &(0x7f0000ff9000/0x3000)=nil) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x6) 15:50:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000003c0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2070.960193][T27820] bridge1614: port 1(syz_tun) entered disabled state 15:50:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000006c0)={0x0, 0x0, 0x1, "d0"}, 0x9) [ 2071.113141][T27820] bridge1615: port 1(syz_tun) entered blocking state [ 2071.149875][T27820] bridge1615: port 1(syz_tun) entered disabled state 15:50:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)='-', 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 2071.291973][T27825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1b, 0x0, 0x0) 15:50:22 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002440)="c698aa72634be224550d3237da5f5d8d", 0x10) 15:50:22 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 15:50:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000480000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x8100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:22 executing program 4: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 15:50:22 executing program 2: mlock(&(0x7f00008ec000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 2071.611644][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000000)={@multicast1}, 0xc) 15:50:23 executing program 0: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 15:50:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000100), 0x8) 15:50:23 executing program 2: open$dir(&(0x7f0000000100)='\x00', 0x0, 0x0) [ 2071.839051][T27863] bridge1615: port 1(syz_tun) entered disabled state 15:50:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000004c0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2071.899199][T27863] bridge1616: port 1(syz_tun) entered blocking state [ 2071.931223][T27863] bridge1616: port 1(syz_tun) entered disabled state 15:50:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000040)={0x0, {{0x10, 0x2}}}, 0x90) [ 2072.024318][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0xa0) 15:50:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0xa0) 15:50:23 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x800a00000, 0x3) 15:50:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xf000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000600000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:23 executing program 4: sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) 15:50:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f00000005c0), &(0x7f0000000680)=0x98) 15:50:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x10, 0x2}, 0x10) 15:50:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 2072.705801][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:24 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x600201, 0x0) 15:50:24 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0), 0x4) 15:50:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000680000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:24 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x80, 0x0, &(0x7f00000000c0)) [ 2072.960485][T27915] bridge1616: port 1(syz_tun) entered disabled state [ 2073.015697][T27915] bridge1617: port 1(syz_tun) entered blocking state [ 2073.050116][T27915] bridge1617: port 1(syz_tun) entered disabled state 15:50:24 executing program 0: mlock(&(0x7f00008ec000/0x1000)=nil, 0x1000) madvise(&(0x7f00008ec000/0x4000)=nil, 0x4000, 0x5) 15:50:24 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, 0x0, 0x0) [ 2073.247079][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000006c0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:24 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000040)) 15:50:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:50:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, &(0x7f0000000140)=""/234, 0xea, 0x0, 0x0, 0x0) 15:50:24 executing program 4: sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) 15:50:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000740000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2073.675308][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000240)=0x8) 15:50:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, 0x0, 0x0) 15:50:25 executing program 0: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5) [ 2073.892559][T27969] bridge1617: port 1(syz_tun) entered disabled state [ 2073.932231][T27969] bridge1618: port 1(syz_tun) entered blocking state [ 2073.959378][T27969] bridge1618: port 1(syz_tun) entered disabled state 15:50:25 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 15:50:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000000), &(0x7f0000001040)=0x8) [ 2074.075717][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000040)={@empty, @multicast1}, 0xc) 15:50:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0x0, 0x0, 0x202}, 0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000080)=0x98) 15:50:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000007a0000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:25 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x80, &(0x7f0000000000), 0x4) 15:50:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000480), 0x8c) 15:50:25 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) [ 2074.495439][T27996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000200), 0xc) 15:50:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000000), 0x8) [ 2074.748770][T28006] bridge1618: port 1(syz_tun) entered disabled state 15:50:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000f00000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:26 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) [ 2074.888370][T28006] bridge1619: port 1(syz_tun) entered blocking state 15:50:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c1c"], &(0x7f00000000c0)=0x98) [ 2074.969417][T28006] bridge1619: port 1(syz_tun) entered disabled state [ 2075.152250][T27996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:26 executing program 1: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={{0x0, 0xfffffffffffffffe}, {0x0, 0x100000000}}, 0x0) 15:50:26 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x100, &(0x7f0000000100), 0x4) 15:50:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[], 0x8) 15:50:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000300000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:26 executing program 2: syz_open_dev$evdev(&(0x7f00000018c0)='/dev/input/event#\x00', 0x0, 0x18002) 15:50:26 executing program 1: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) syz_open_dev$evdev(&(0x7f00000005c0)='/dev/input/event#\x00', 0x6, 0x321000) 15:50:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000500000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:50:26 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0x7b, 0xe, 0x20, 0x5c6, 0x9625, 0xbdd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe2, 0x4, 0xe7, 0x0, [], [{}]}}]}}]}}, 0x0) 15:50:26 executing program 2: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) [ 2075.671025][T28048] bridge1619: port 1(syz_tun) entered disabled state [ 2075.743563][T28048] bridge1620: port 1(syz_tun) entered blocking state 15:50:27 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x9a, 0x6c, 0xb8, 0x0, 0x2040, 0x8265, 0x6b28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x60, 0x51, 0xe4}}]}}]}}, 0x0) [ 2075.924058][T28048] bridge1620: port 1(syz_tun) entered disabled state [ 2076.062835][T28048] __nla_validate_parse: 1 callbacks suppressed [ 2076.062859][T28048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2076.164431][ T19] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2076.266177][T19044] usb 1-1: new high-speed USB device number 20 using dummy_hcd 15:50:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000600000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f00000005c0)='./file1\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@cgroup, 0xffffffffffffffff, 0x1b}, 0x14) [ 2076.414682][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 2076.465556][ T5] usb 2-1: new high-speed USB device number 70 using dummy_hcd 15:50:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f000000cbc0)) [ 2076.545100][ T19] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 15:50:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000700000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2076.616098][T19044] usb 1-1: Using ep0 maxpacket: 16 [ 2076.627093][T28084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2076.765234][ T19] usb 5-1: New USB device found, idVendor=05c6, idProduct=9625, bcdDevice=bd.d8 [ 2076.768288][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 2076.789576][T19044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.825283][T19044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.846865][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.846906][ T19] usb 5-1: Product: syz [ 2076.846934][ T19] usb 5-1: Manufacturer: syz [ 2076.846957][ T19] usb 5-1: SerialNumber: syz [ 2076.896939][ T19] usb 5-1: config 0 descriptor?? [ 2076.946505][ T19] option 5-1:0.0: GSM modem (1-port) converter detected [ 2076.953776][T28087] bridge1620: port 1(syz_tun) entered disabled state 15:50:28 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f000000cbc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f000000d1c0)={0x0, 0x0, &(0x7f000000d0c0)=[{&(0x7f000000cc00)='q', 0x1}, {&(0x7f000000ccc0)='g', 0x1}, {&(0x7f000000cd00)="ab", 0x1}], 0x3, &(0x7f000000d140)=[@txtime={{0x18}}, @txtime={{0x18}}], 0x30}, 0x20004000) [ 2077.075233][T19044] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2077.171597][T19044] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2077.195288][ T19] usb 5-1: USB disconnect, device number 18 [ 2077.205875][T19044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.217248][ T19] option 5-1:0.0: device disconnected 15:50:28 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f000000cbc0)) [ 2077.245956][T19044] usb 1-1: config 0 descriptor?? [ 2077.289360][T28087] bridge1621: port 1(syz_tun) entered blocking state [ 2077.314001][T28087] bridge1621: port 1(syz_tun) entered disabled state [ 2077.375022][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2077.445126][T28084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:28 executing program 2: perf_event_open$cgroup(&(0x7f0000009fc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe) [ 2077.956265][ T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 2077.975327][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.988922][ T5] usb 2-1: Product: syz [ 2077.998604][ T5] usb 2-1: Manufacturer: syz [ 2078.009941][ T5] usb 2-1: SerialNumber: syz [ 2078.041010][T19044] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 2078.043759][T12786] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2078.070579][ T5] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2078.089406][T19044] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2078.128626][T19044] microsoft 0003:045E:07DA.0002: no inputs found [ 2078.145213][T19044] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 2078.238742][ T19] usb 1-1: USB disconnect, device number 20 [ 2078.320883][T28073] udc-core: couldn't find an available UDC or it's busy [ 2078.340004][T28073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2078.344005][T12786] usb 5-1: Using ep0 maxpacket: 32 [ 2078.385792][ T3002] usb 2-1: USB disconnect, device number 70 [ 2078.504540][T12786] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2078.744634][T12786] usb 5-1: New USB device found, idVendor=05c6, idProduct=9625, bcdDevice=bd.d8 [ 2078.866715][T12786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.944375][T12786] usb 5-1: Product: syz [ 2078.967721][T12786] usb 5-1: Manufacturer: syz [ 2079.006605][T12786] usb 5-1: SerialNumber: syz [ 2079.046960][T12786] usb 5-1: config 0 descriptor?? [ 2079.067932][ T5] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2079.104198][T12786] usb 5-1: can't set config #0, error -71 [ 2079.118510][T12786] usb 5-1: USB disconnect, device number 19 [ 2079.367908][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 2079.373895][ T3002] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2079.528185][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.548704][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2079.568199][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2079.589447][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2079.614286][ T3002] usb 2-1: Using ep0 maxpacket: 8 [ 2079.626606][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.687467][ T5] usb 1-1: config 0 descriptor?? 15:50:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:50:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000900000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 15:50:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 15:50:31 executing program 1: socket$caif_stream(0x25, 0x1, 0x3) [ 2079.838322][ T5] usb 1-1: can't set config #0, error -71 [ 2079.859025][ T3002] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2079.865216][ T5] usb 1-1: USB disconnect, device number 21 [ 2079.944363][ T3002] usb 2-1: can't read configurations, error -71 [ 2079.966829][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000ef0900000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:31 executing program 2: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000500)="0f", 0x1) socketpair(0x11, 0x3, 0x8000, &(0x7f00000005c0)) [ 2080.203764][T28182] bridge1621: port 1(syz_tun) entered disabled state [ 2080.263008][T28182] bridge1622: port 1(syz_tun) entered blocking state 15:50:31 executing program 1: socketpair(0x18, 0x0, 0x491c, &(0x7f0000003780)) [ 2080.308191][T28182] bridge1622: port 1(syz_tun) entered disabled state [ 2080.420878][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, 0x0) 15:50:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000fc0900000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x2000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2080.706659][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2080.939733][T28211] bridge1026: port 1(syz_tun) entered disabled state [ 2080.972692][T28211] bridge1027: port 1(syz_tun) entered blocking state [ 2080.983840][T28211] bridge1027: port 1(syz_tun) entered disabled state [ 2081.367797][ T5] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2081.658607][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 2081.838356][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2081.857485][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2081.877151][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2081.900407][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2081.909547][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.950653][ T5] usb 1-1: config 0 descriptor?? [ 2082.450098][ T5] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 2082.487517][ T5] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2082.518121][ T5] microsoft 0003:045E:07DA.0003: no inputs found [ 2082.529364][ T5] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 2082.704242][T12786] usb 1-1: USB disconnect, device number 22 15:50:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:50:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x6000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000a00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 15:50:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0xffffff9e}, 0x0) [ 2083.350117][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2083.497163][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2083.597757][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2083.675660][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2083.764369][ T5] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2083.939162][T28258] bridge1622: port 1(syz_tun) entered disabled state 15:50:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2084.046533][T28258] bridge1623: port 1(syz_tun) entered blocking state [ 2084.067872][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 2084.130004][T28258] bridge1623: port 1(syz_tun) entered disabled state [ 2084.206748][T28259] device syz_tun left promiscuous mode [ 2084.212519][T28259] bridge1203: port 1(syz_tun) entered disabled state [ 2084.227395][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2084.257462][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2084.286052][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2084.316840][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2084.338301][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.394374][ T5] usb 1-1: config 0 descriptor?? [ 2084.405703][T28259] bridge1204: port 1(syz_tun) entered blocking state [ 2084.435075][T28259] bridge1204: port 1(syz_tun) entered disabled state [ 2084.458554][T28259] device syz_tun entered promiscuous mode [ 2084.617737][T28260] bridge919: port 1(syz_tun) entered disabled state [ 2084.663540][T28260] bridge920: port 1(syz_tun) entered blocking state [ 2084.698352][T28260] bridge920: port 1(syz_tun) entered disabled state 15:50:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x100000000000000}, 0x0) [ 2084.785316][T28262] bridge1027: port 1(syz_tun) entered disabled state [ 2084.846946][T28262] bridge1028: port 1(syz_tun) entered blocking state [ 2084.954438][T28262] bridge1028: port 1(syz_tun) entered disabled state [ 2084.982665][ T5] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 2085.013370][ T5] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2085.089107][ T5] microsoft 0003:045E:07DA.0004: no inputs found [ 2085.134070][ T5] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway 15:50:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) [ 2085.378650][ T5] usb 1-1: USB disconnect, device number 23 [ 2085.434116][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0xffffff9e}, 0x0) [ 2085.526370][T28290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000e00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2085.919662][T28296] bridge920: port 1(syz_tun) entered disabled state [ 2085.953641][T28296] bridge921: port 1(syz_tun) entered blocking state [ 2086.064561][T28296] bridge921: port 1(syz_tun) entered disabled state [ 2086.248337][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa00, r5, 0x8009}}, 0x20}}, 0x0) [ 2086.487253][ T8655] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2086.519686][T28317] device syz_tun left promiscuous mode [ 2086.529638][T28317] bridge1204: port 1(syz_tun) entered disabled state [ 2086.598740][T28317] bridge1205: port 1(syz_tun) entered blocking state [ 2086.638009][T28317] bridge1205: port 1(syz_tun) entered disabled state [ 2086.669016][T28317] device syz_tun entered promiscuous mode [ 2086.767290][ T8655] usb 1-1: Using ep0 maxpacket: 16 [ 2086.843790][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2086.918872][ T8655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.071415][T28330] bridge1028: port 1(syz_tun) entered disabled state [ 2087.079185][ T8655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:50:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) [ 2087.158140][ T8655] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2087.199674][ T8655] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2087.228107][ T8655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.286142][ T8655] usb 1-1: config 0 descriptor?? [ 2087.317448][T28330] bridge1029: port 1(syz_tun) entered blocking state [ 2087.385011][T28330] bridge1029: port 1(syz_tun) entered disabled state [ 2087.432232][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0xffffff9e}, 0x0) [ 2087.659556][T28346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2087.800362][ T8655] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 2087.809673][ T8655] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2087.864592][ T8655] microsoft 0003:045E:07DA.0005: no inputs found [ 2087.899633][T28350] bridge921: port 1(syz_tun) entered disabled state [ 2087.939781][ T8655] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway 15:50:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000af1e00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2088.015444][ T8655] usb 1-1: USB disconnect, device number 24 [ 2088.018836][T28350] bridge922: port 1(syz_tun) entered blocking state [ 2088.099083][T28350] bridge922: port 1(syz_tun) entered disabled state 15:50:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa00, r5, 0x8009}}, 0x20}}, 0x0) [ 2088.429519][T28354] bridge1623: port 1(syz_tun) entered disabled state [ 2088.527244][T28354] bridge1625: port 1(syz_tun) entered blocking state [ 2088.578586][T28354] bridge1625: port 1(syz_tun) entered disabled state [ 2088.695672][T28365] __nla_validate_parse: 1 callbacks suppressed [ 2088.695692][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:50:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2088.905082][T28371] device syz_tun left promiscuous mode [ 2088.926289][T28371] bridge1205: port 1(syz_tun) entered disabled state [ 2089.109876][T28371] bridge1206: port 1(syz_tun) entered blocking state [ 2089.177237][T28371] bridge1206: port 1(syz_tun) entered disabled state [ 2089.228987][T28371] device syz_tun entered promiscuous mode [ 2089.285734][T12786] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2089.338416][T28377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x60000000}, 0x0) [ 2089.529778][T28385] bridge1029: port 1(syz_tun) entered disabled state [ 2089.555067][T12786] usb 1-1: Using ep0 maxpacket: 16 [ 2089.609354][T28385] bridge1030: port 1(syz_tun) entered blocking state [ 2089.626785][T28385] bridge1030: port 1(syz_tun) entered disabled state [ 2089.694484][T12786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.714653][T12786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.754782][T12786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2089.809323][T12786] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2089.837805][T12786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.866864][T12786] usb 1-1: config 0 descriptor?? 15:50:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x3, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:50:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000001f00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2089.975246][T28404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2090.158063][T28406] bridge922: port 1(syz_tun) entered disabled state [ 2090.237347][T28406] bridge923: port 1(syz_tun) entered blocking state [ 2090.249441][T28406] bridge923: port 1(syz_tun) entered disabled state [ 2090.361333][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa00, r5, 0x8009}}, 0x20}}, 0x0) [ 2090.424250][T12786] usbhid 1-1:0.0: can't add hid device: -71 [ 2090.435626][T12786] usbhid: probe of 1-1:0.0 failed with error -71 [ 2090.528133][T12786] usb 1-1: USB disconnect, device number 25 [ 2090.606483][T28422] bridge1625: port 1(syz_tun) entered disabled state [ 2090.668915][T28422] bridge1626: port 1(syz_tun) entered blocking state [ 2090.690293][T28422] bridge1626: port 1(syz_tun) entered disabled state [ 2090.718380][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2090.887431][T28433] device syz_tun left promiscuous mode [ 2090.899367][T28433] bridge1206: port 1(syz_tun) entered disabled state 15:50:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2090.995037][T28433] bridge1207: port 1(syz_tun) entered blocking state [ 2091.009366][T28433] bridge1207: port 1(syz_tun) entered disabled state [ 2091.029831][T28433] device syz_tun entered promiscuous mode [ 2091.091326][T28423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2091.157122][T28444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x60000000}, 0x0) [ 2091.324317][T12730] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2091.336137][T28450] bridge1030: port 1(syz_tun) entered disabled state [ 2091.497780][T28450] bridge1031: port 1(syz_tun) entered blocking state [ 2091.519524][T28450] bridge1031: port 1(syz_tun) entered disabled state [ 2091.584017][T12730] usb 1-1: Using ep0 maxpacket: 16 15:50:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000002000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x3, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2091.705726][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2091.728499][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2091.747629][T12730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2091.769808][T12730] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2091.789371][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.814885][T12730] usb 1-1: config 0 descriptor?? [ 2091.838586][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2091.968851][T28468] bridge923: port 1(syz_tun) entered disabled state [ 2092.046183][T28468] bridge924: port 1(syz_tun) entered blocking state [ 2092.062694][T28468] bridge924: port 1(syz_tun) entered disabled state 15:50:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x600}, 0x0) [ 2092.128043][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2092.186316][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2092.414068][T12730] usbhid 1-1:0.0: can't add hid device: -71 [ 2092.436561][T12730] usbhid: probe of 1-1:0.0 failed with error -71 [ 2092.549539][T28494] device syz_tun left promiscuous mode [ 2092.568735][T28494] bridge1207: port 1(syz_tun) entered disabled state [ 2092.569648][T12730] usb 1-1: USB disconnect, device number 26 [ 2092.642333][T28494] bridge1208: port 1(syz_tun) entered blocking state [ 2092.660060][T28494] bridge1208: port 1(syz_tun) entered disabled state [ 2092.678781][T28494] device syz_tun entered promiscuous mode [ 2092.744604][T28495] bridge1626: port 1(syz_tun) entered disabled state 15:50:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2092.875942][T28495] bridge1627: port 1(syz_tun) entered blocking state [ 2092.988752][T28495] bridge1627: port 1(syz_tun) entered disabled state 15:50:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000003c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x60000000}, 0x0) [ 2093.247631][T19044] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2093.259926][T28511] bridge1031: port 1(syz_tun) entered disabled state [ 2093.329648][T28511] bridge1032: port 1(syz_tun) entered blocking state [ 2093.368145][T28511] bridge1032: port 1(syz_tun) entered disabled state [ 2093.548157][T19044] usb 1-1: Using ep0 maxpacket: 16 15:50:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x3, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2093.572302][T28521] bridge1627: port 1(syz_tun) entered disabled state [ 2093.698302][T19044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:50:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2093.740952][T19044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.816825][T28526] bridge924: port 1(syz_tun) entered disabled state [ 2093.847741][T19044] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2093.918419][T19044] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2093.955608][T19044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.037477][T28526] bridge925: port 1(syz_tun) entered blocking state [ 2094.061863][T19044] usb 1-1: config 0 descriptor?? [ 2094.097249][T28526] bridge925: port 1(syz_tun) entered disabled state [ 2094.339651][T28550] __nla_validate_parse: 3 callbacks suppressed [ 2094.339698][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000003f00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x600}, 0x0) [ 2094.658118][T19044] usbhid 1-1:0.0: can't add hid device: -71 [ 2094.668755][T19044] usbhid: probe of 1-1:0.0 failed with error -71 [ 2094.674878][T28556] device syz_tun left promiscuous mode [ 2094.685906][T19044] usb 1-1: USB disconnect, device number 27 [ 2094.697474][T28556] bridge1208: port 1(syz_tun) entered disabled state [ 2094.777059][T28556] bridge1209: port 1(syz_tun) entered blocking state [ 2094.834429][T28556] bridge1209: port 1(syz_tun) entered disabled state [ 2094.905406][T28556] device syz_tun entered promiscuous mode [ 2095.123994][T28560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xc, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:50:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2095.357838][T28564] bridge1032: port 1(syz_tun) entered disabled state [ 2095.447853][T28564] bridge1033: port 1(syz_tun) entered blocking state [ 2095.464101][T28564] bridge1033: port 1(syz_tun) entered disabled state [ 2095.535287][T28569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2095.663732][T28577] bridge1629: port 1(syz_tun) entered blocking state [ 2095.677123][T28577] bridge1629: port 1(syz_tun) entered disabled state [ 2095.762183][T28586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2095.824292][T12730] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2095.854521][T28589] bridge925: port 1(syz_tun) entered disabled state 15:50:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000004000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2095.947609][T28589] bridge926: port 1(syz_tun) entered blocking state [ 2095.976616][T28589] bridge926: port 1(syz_tun) entered disabled state [ 2096.065729][T28578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2096.124177][T12730] usb 1-1: Using ep0 maxpacket: 16 15:50:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x1, 0x600}, 0x0) [ 2096.169308][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2096.256276][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2096.276467][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2096.389268][T28617] device syz_tun left promiscuous mode [ 2096.399671][T28617] bridge1209: port 1(syz_tun) entered disabled state [ 2096.414254][T12730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2096.504805][T12730] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2096.537155][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.589709][T12730] usb 1-1: config 0 descriptor?? [ 2096.708236][T28617] bridge1210: port 1(syz_tun) entered blocking state [ 2096.729398][T28617] bridge1210: port 1(syz_tun) entered disabled state [ 2096.749626][T28617] device syz_tun entered promiscuous mode [ 2096.824143][T28622] bridge1033: port 1(syz_tun) entered disabled state 15:50:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x33fe0}}, 0x0) [ 2096.988431][T28643] bridge1629: port 1(syz_tun) entered disabled state 15:50:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000004800000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x2}, 0x0) [ 2097.194262][T12730] usbhid 1-1:0.0: can't add hid device: -71 [ 2097.219475][T28636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2097.269838][T12730] usbhid: probe of 1-1:0.0 failed with error -71 [ 2097.384859][T12730] usb 1-1: USB disconnect, device number 28 [ 2097.449150][T28638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2097.819518][T28644] bridge926: port 1(syz_tun) entered disabled state [ 2097.887292][T28644] bridge927: port 1(syz_tun) entered blocking state [ 2097.937296][T28644] bridge927: port 1(syz_tun) entered disabled state [ 2098.104882][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xffffffff}}, 0x20}}, 0x0) [ 2098.214955][T12730] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2098.279296][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000004c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2098.476535][T28662] device syz_tun left promiscuous mode [ 2098.495691][T28662] bridge1210: port 1(syz_tun) entered disabled state [ 2098.535822][T12730] usb 1-1: Using ep0 maxpacket: 16 [ 2098.626673][T28662] bridge1211: port 1(syz_tun) entered blocking state [ 2098.664696][T28662] bridge1211: port 1(syz_tun) entered disabled state [ 2098.664831][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2098.714769][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.724913][T28662] device syz_tun entered promiscuous mode [ 2098.768113][T28666] bridge1034: port 1(syz_tun) entered blocking state [ 2098.769035][T12730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2098.776236][T28666] bridge1034: port 1(syz_tun) entered disabled state [ 2098.818170][T12730] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 15:50:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x2}, 0x0) [ 2098.898765][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:50:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x33fe0}}, 0x0) [ 2099.029847][T12730] usb 1-1: config 0 descriptor?? [ 2099.404699][T28694] bridge927: port 1(syz_tun) entered disabled state [ 2099.497239][T28694] bridge928: port 1(syz_tun) entered blocking state [ 2099.516243][T28694] bridge928: port 1(syz_tun) entered disabled state [ 2099.634889][T12730] usbhid 1-1:0.0: can't add hid device: -71 [ 2099.646284][T12730] usbhid: probe of 1-1:0.0 failed with error -71 [ 2099.659037][T28708] __nla_validate_parse: 2 callbacks suppressed [ 2099.659063][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000655800000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2099.729041][T12730] usb 1-1: USB disconnect, device number 29 15:50:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xffffffff}}, 0x20}}, 0x0) [ 2099.962534][T28712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2100.207191][T28717] bridge1632: port 1(syz_tun) entered blocking state [ 2100.216764][T28717] bridge1632: port 1(syz_tun) entered disabled state [ 2100.338902][T28723] bridge1034: port 1(syz_tun) entered disabled state [ 2100.450890][T28723] bridge1035: port 1(syz_tun) entered blocking state [ 2100.501068][T28723] bridge1035: port 1(syz_tun) entered disabled state [ 2100.588949][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2100.654365][T12786] usb 1-1: new high-speed USB device number 30 using dummy_hcd 15:50:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}, 0x2}, 0x0) [ 2100.829811][T28730] device syz_tun left promiscuous mode [ 2100.861492][T28730] bridge1211: port 1(syz_tun) entered disabled state [ 2100.900749][T28730] bridge1212: port 1(syz_tun) entered blocking state [ 2100.908462][T28730] bridge1212: port 1(syz_tun) entered disabled state [ 2100.914073][T12786] usb 1-1: Using ep0 maxpacket: 16 [ 2100.930763][T28730] device syz_tun entered promiscuous mode 15:50:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000006000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2101.009027][T28742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x33fe0}}, 0x0) [ 2101.115038][T12786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.204105][T12786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.285377][T12786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2101.309568][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2101.328944][T28748] bridge928: port 1(syz_tun) entered disabled state 15:50:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2101.387936][T12786] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2101.426742][T12786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.474362][T12786] usb 1-1: config 0 descriptor?? [ 2101.548413][T28748] bridge929: port 1(syz_tun) entered blocking state [ 2101.618421][T28748] bridge929: port 1(syz_tun) entered disabled state [ 2101.790114][T28767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xffffffff}}, 0x20}}, 0x0) [ 2102.014350][T12786] usbhid 1-1:0.0: can't add hid device: -71 [ 2102.046839][T12786] usbhid: probe of 1-1:0.0 failed with error -71 [ 2102.095086][T28770] bridge1035: port 1(syz_tun) entered disabled state [ 2102.135832][T12786] usb 1-1: USB disconnect, device number 30 [ 2102.257178][T28770] bridge1036: port 1(syz_tun) entered blocking state [ 2102.329473][T28770] bridge1036: port 1(syz_tun) entered disabled state [ 2102.540272][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000586500000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:53 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:50:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xfffffff0}}, 0x20}}, 0x0) [ 2102.766951][T28782] device syz_tun left promiscuous mode [ 2102.775770][T28782] bridge1212: port 1(syz_tun) entered disabled state [ 2102.889934][T28782] bridge1213: port 1(syz_tun) entered blocking state [ 2102.930432][T28782] bridge1213: port 1(syz_tun) entered disabled state [ 2102.959556][T28782] device syz_tun entered promiscuous mode [ 2103.020735][T28786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2103.208063][T28789] bridge1632: port 1(syz_tun) entered disabled state 15:50:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000010000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2103.329770][T28789] bridge1633: port 1(syz_tun) entered blocking state [ 2103.357950][T28789] bridge1633: port 1(syz_tun) entered disabled state 15:50:54 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2103.526657][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2103.666139][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2103.687306][T28811] bridge929: port 1(syz_tun) entered disabled state [ 2103.768745][T28811] bridge930: port 1(syz_tun) entered blocking state [ 2103.785721][T28811] bridge930: port 1(syz_tun) entered disabled state 15:50:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:50:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xfffff000}}, 0x20}}, 0x0) [ 2104.105158][T28828] bridge1036: port 1(syz_tun) entered disabled state 15:50:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000006800000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2104.289631][T28828] bridge1037: port 1(syz_tun) entered blocking state [ 2104.329360][T28828] bridge1037: port 1(syz_tun) entered disabled state 15:50:55 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:50:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xfffffff0}}, 0x20}}, 0x0) [ 2104.595942][T28843] device syz_tun left promiscuous mode [ 2104.609872][T28843] bridge1213: port 1(syz_tun) entered disabled state [ 2104.738313][T28843] bridge1214: port 1(syz_tun) entered blocking state [ 2104.762755][T28843] bridge1214: port 1(syz_tun) entered disabled state [ 2104.854002][T28843] device syz_tun entered promiscuous mode 15:50:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000010000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2104.898471][T28853] __nla_validate_parse: 2 callbacks suppressed [ 2104.898510][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2105.177853][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2105.488961][T28857] bridge1633: port 1(syz_tun) entered disabled state [ 2105.558259][T28857] bridge1634: port 1(syz_tun) entered blocking state [ 2105.577072][T28857] bridge1634: port 1(syz_tun) entered disabled state [ 2105.636741][T28858] bridge930: port 1(syz_tun) entered disabled state [ 2105.699001][T28858] bridge931: port 1(syz_tun) entered blocking state [ 2105.718394][T28858] bridge931: port 1(syz_tun) entered disabled state [ 2105.786814][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:50:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000006c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:50:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xfffff000}}, 0x20}}, 0x0) [ 2105.965239][T28874] bridge1037: port 1(syz_tun) entered disabled state [ 2106.067992][T28874] bridge1038: port 1(syz_tun) entered blocking state [ 2106.109807][T28874] bridge1038: port 1(syz_tun) entered disabled state [ 2106.206979][T28859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2106.308971][T28881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xfffffff0}}, 0x20}}, 0x0) 15:50:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x9011faa2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2106.598669][T28887] device syz_tun left promiscuous mode [ 2106.617975][T28887] bridge1214: port 1(syz_tun) entered disabled state 15:50:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2106.730120][T28887] bridge1215: port 1(syz_tun) entered blocking state [ 2106.838533][T28887] bridge1215: port 1(syz_tun) entered disabled state [ 2106.912253][T28887] device syz_tun entered promiscuous mode [ 2107.006656][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:50:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000010000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2107.308709][T28911] bridge931: port 1(syz_tun) entered disabled state 15:50:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000007400000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2107.457502][T28911] bridge932: port 1(syz_tun) entered blocking state 15:50:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2107.529212][T28911] bridge932: port 1(syz_tun) entered disabled state [ 2107.639194][T28918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:50:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xfffff000}}, 0x20}}, 0x0) [ 2107.748341][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2108.020497][ T3207] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2108.137477][T28925] bridge1038: port 1(syz_tun) entered disabled state [ 2108.194148][T28925] bridge1039: port 1(syz_tun) entered blocking state [ 2108.226202][T28925] bridge1039: port 1(syz_tun) entered disabled state [ 2108.309984][T28926] bridge1634: port 1(syz_tun) entered disabled state [ 2108.356705][T28926] bridge1635: port 1(syz_tun) entered blocking state [ 2108.385497][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2108.397589][T28926] bridge1635: port 1(syz_tun) entered disabled state [ 2108.468644][T28939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:50:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xdc854e9b, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2108.588191][T28928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2108.702709][T28943] device syz_tun left promiscuous mode [ 2108.720057][ T3207] usb 1-1: new high-speed USB device number 32 using dummy_hcd 15:51:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2108.775531][T28943] bridge1215: port 1(syz_tun) entered disabled state [ 2108.895745][T28943] bridge1216: port 1(syz_tun) entered blocking state [ 2108.974800][T28943] bridge1216: port 1(syz_tun) entered disabled state [ 2108.977692][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2109.035935][T28943] device syz_tun entered promiscuous mode 15:51:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000007a00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2109.230525][ T3207] usb usb1-port1: attempt power cycle 15:51:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000006000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2109.330059][T28963] bridge932: port 1(syz_tun) entered disabled state [ 2109.418708][T28963] bridge933: port 1(syz_tun) entered blocking state [ 2109.445677][T28963] bridge933: port 1(syz_tun) entered disabled state 15:51:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2109.667731][T28977] bridge1039: port 1(syz_tun) entered disabled state [ 2109.756880][T28977] bridge1040: port 1(syz_tun) entered blocking state [ 2109.771470][T28977] bridge1040: port 1(syz_tun) entered disabled state 15:51:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xdc854e9b, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2110.056940][ T3207] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2110.058702][T28982] bridge1635: port 1(syz_tun) entered disabled state [ 2110.234710][T28982] bridge1636: port 1(syz_tun) entered blocking state [ 2110.284863][ T3207] usb 1-1: device descriptor read/8, error -61 [ 2110.285332][T28982] bridge1636: port 1(syz_tun) entered disabled state [ 2110.379948][T28992] __nla_validate_parse: 3 callbacks suppressed [ 2110.379975][T28992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000008100000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2110.507986][T28999] device syz_tun left promiscuous mode [ 2110.518276][T28999] bridge1216: port 1(syz_tun) entered disabled state [ 2110.589418][ T3207] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2110.629053][T28999] bridge1217: port 1(syz_tun) entered blocking state 15:51:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2110.686718][T28999] bridge1217: port 1(syz_tun) entered disabled state [ 2110.746901][T28999] device syz_tun entered promiscuous mode [ 2110.748260][ T3207] usb 1-1: device descriptor read/8, error -71 [ 2110.816187][T28983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2110.886125][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2110.908242][ T3207] usb usb1-port1: unable to enumerate USB device 15:51:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000006000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2111.039370][T29010] bridge933: port 1(syz_tun) entered disabled state 15:51:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xa2fa1190}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2111.134674][T29010] bridge934: port 1(syz_tun) entered blocking state [ 2111.200085][T29010] bridge934: port 1(syz_tun) entered disabled state [ 2111.329652][ T3207] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2111.378951][T29017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2111.559137][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2111.706393][T29019] bridge1040: port 1(syz_tun) entered disabled state [ 2111.775374][T29019] bridge1041: port 1(syz_tun) entered blocking state [ 2111.798500][T29019] bridge1041: port 1(syz_tun) entered disabled state [ 2111.864441][ T3207] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2111.877582][T29039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000001eaf00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2111.989957][T29042] device syz_tun left promiscuous mode [ 2112.051685][T29042] bridge1217: port 1(syz_tun) entered disabled state [ 2112.106598][ T3207] usb 1-1: device descriptor read/64, error 18 15:51:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xdc854e9b, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2112.163955][T29042] bridge1218: port 1(syz_tun) entered blocking state [ 2112.195596][T29042] bridge1218: port 1(syz_tun) entered disabled state [ 2112.244977][T29042] device syz_tun entered promiscuous mode [ 2112.275084][T29043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2112.345659][ T3207] usb usb1-port1: attempt power cycle 15:51:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000006000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2112.487657][T29046] bridge1636: port 1(syz_tun) entered disabled state [ 2112.546324][T29046] bridge1637: port 1(syz_tun) entered blocking state [ 2112.558560][T29046] bridge1637: port 1(syz_tun) entered disabled state [ 2112.626306][T29057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2112.761688][T29059] bridge934: port 1(syz_tun) entered disabled state [ 2112.824754][T29059] bridge935: port 1(syz_tun) entered blocking state [ 2112.844692][T29059] bridge935: port 1(syz_tun) entered disabled state [ 2112.906684][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2112.939041][T29074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000009ef00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2113.094716][ T3207] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2113.185889][T29080] bridge1041: port 1(syz_tun) entered disabled state [ 2113.246445][T29080] bridge1042: port 1(syz_tun) entered blocking state [ 2113.280002][T29080] bridge1042: port 1(syz_tun) entered disabled state [ 2113.358633][ T3207] usb 1-1: device descriptor read/8, error -61 [ 2113.379167][T29083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0x7000000}}, 0x20}}, 0x0) [ 2113.569471][T29085] device syz_tun left promiscuous mode [ 2113.579551][T29085] bridge1218: port 1(syz_tun) entered disabled state [ 2113.638010][ T3207] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2113.655839][T29085] bridge1219: port 1(syz_tun) entered blocking state [ 2113.709681][T29085] bridge1219: port 1(syz_tun) entered disabled state 15:51:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2113.828569][T29085] device syz_tun entered promiscuous mode [ 2113.907192][ T3207] usb 1-1: device descriptor read/8, error -71 [ 2114.050782][ T3207] usb usb1-port1: unable to enumerate USB device [ 2114.066405][T29103] bridge1637: port 1(syz_tun) entered disabled state 15:51:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000f0000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000f000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2114.206425][T29103] bridge1638: port 1(syz_tun) entered blocking state [ 2114.229211][T29103] bridge1638: port 1(syz_tun) entered disabled state [ 2114.508210][T29111] bridge935: port 1(syz_tun) entered disabled state [ 2114.554759][ T3207] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2114.565742][T29111] bridge936: port 1(syz_tun) entered blocking state [ 2114.565812][T29111] bridge936: port 1(syz_tun) entered disabled state 15:51:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000010000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2114.738752][T29118] bridge1042: port 1(syz_tun) entered disabled state [ 2114.816740][T29118] bridge1043: port 1(syz_tun) entered blocking state [ 2114.827816][T29118] bridge1043: port 1(syz_tun) entered disabled state [ 2114.874600][ T3207] usb 1-1: device descriptor read/64, error 18 15:51:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0x7000000}}, 0x20}}, 0x0) 15:51:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2115.085096][T29143] device syz_tun left promiscuous mode [ 2115.147010][T29143] bridge1219: port 1(syz_tun) entered disabled state [ 2115.188362][ T3207] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2115.264735][T29143] bridge1220: port 1(syz_tun) entered blocking state [ 2115.284101][T29143] bridge1220: port 1(syz_tun) entered disabled state [ 2115.317047][T29143] device syz_tun entered promiscuous mode [ 2115.386418][T29150] __nla_validate_parse: 5 callbacks suppressed [ 2115.386445][T29150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000009fc00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2115.438234][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2115.579218][ T3207] usb usb1-port1: attempt power cycle [ 2115.644715][T29156] bridge936: port 1(syz_tun) entered disabled state 15:51:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000f0000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2115.746680][T29156] bridge937: port 1(syz_tun) entered blocking state [ 2115.820418][T29156] bridge937: port 1(syz_tun) entered disabled state [ 2115.906316][T29161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xe00}}, 0x20}}, 0x0) [ 2116.038796][T29164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2116.125357][T29165] bridge1638: port 1(syz_tun) entered disabled state [ 2116.249848][T29165] bridge1639: port 1(syz_tun) entered blocking state [ 2116.275570][T29165] bridge1639: port 1(syz_tun) entered disabled state [ 2116.328278][ T3207] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2116.387894][T29167] bridge1043: port 1(syz_tun) entered disabled state [ 2116.465095][T29167] bridge1044: port 1(syz_tun) entered blocking state [ 2116.476388][T29167] bridge1044: port 1(syz_tun) entered disabled state [ 2116.534853][ T3207] usb 1-1: device descriptor read/8, error -61 [ 2116.554872][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0x7000000}}, 0x20}}, 0x0) 15:51:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2116.748273][T29163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2116.859170][T29185] bridge1639: port 1(syz_tun) entered disabled state [ 2116.885935][ T3207] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2116.948896][T29185] bridge1640: port 1(syz_tun) entered blocking state [ 2116.976953][T29185] bridge1640: port 1(syz_tun) entered disabled state 15:51:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2117.108136][ T3207] usb 1-1: device descriptor read/8, error -71 [ 2117.165742][T29182] device syz_tun left promiscuous mode [ 2117.175659][T29182] bridge1220: port 1(syz_tun) entered disabled state 15:51:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2117.234781][ T3207] usb usb1-port1: unable to enumerate USB device [ 2117.359847][T29182] bridge1221: port 1(syz_tun) entered blocking state [ 2117.388844][T29182] bridge1221: port 1(syz_tun) entered disabled state [ 2117.477713][T29182] device syz_tun entered promiscuous mode [ 2117.554889][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2117.714642][ T3207] usb 1-1: new high-speed USB device number 43 using dummy_hcd 15:51:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000f0000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2117.919240][T29197] bridge937: port 1(syz_tun) entered disabled state [ 2117.935005][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2118.019585][T29197] bridge938: port 1(syz_tun) entered blocking state [ 2118.076873][T29197] bridge938: port 1(syz_tun) entered disabled state [ 2118.129174][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xe00}}, 0x20}}, 0x0) [ 2118.239510][T29211] bridge1044: port 1(syz_tun) entered disabled state [ 2118.261107][ T3207] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2118.327057][T29211] bridge1045: port 1(syz_tun) entered blocking state 15:51:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000004000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2118.447727][T29211] bridge1045: port 1(syz_tun) entered disabled state [ 2118.484199][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2118.638272][ T3207] usb usb1-port1: attempt power cycle [ 2118.649621][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xc00}}, 0x20}}, 0x0) [ 2118.928391][T29222] bridge1640: port 1(syz_tun) entered disabled state [ 2118.954457][T29222] bridge1641: port 1(syz_tun) entered blocking state [ 2118.970582][T29222] bridge1641: port 1(syz_tun) entered disabled state [ 2118.999477][T29233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2119.158325][T29240] device syz_tun left promiscuous mode [ 2119.169405][T29240] bridge1221: port 1(syz_tun) entered disabled state [ 2119.245781][T29240] bridge1222: port 1(syz_tun) entered blocking state [ 2119.269371][T29240] bridge1222: port 1(syz_tun) entered disabled state [ 2119.325227][T29240] device syz_tun entered promiscuous mode [ 2119.360045][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2119.379055][ T3207] usb 1-1: new high-speed USB device number 45 using dummy_hcd 15:51:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000ffffe0000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2119.613539][T29250] bridge938: port 1(syz_tun) entered disabled state [ 2119.628717][ T3207] usb 1-1: device descriptor read/8, error -61 [ 2119.701054][T29250] bridge939: port 1(syz_tun) entered blocking state [ 2119.720036][T29250] bridge939: port 1(syz_tun) entered disabled state [ 2119.857198][T29262] bridge1045: port 1(syz_tun) entered disabled state 15:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xe00}}, 0x20}}, 0x0) [ 2119.929595][T29262] bridge1046: port 1(syz_tun) entered blocking state [ 2119.955750][ T3207] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2120.009337][T29262] bridge1046: port 1(syz_tun) entered disabled state 15:51:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xc00}}, 0x20}}, 0x0) 15:51:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2120.328418][ T3207] usb 1-1: device descriptor read/8, error -71 [ 2120.457302][ T3207] usb usb1-port1: unable to enumerate USB device 15:51:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000fffff0000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2120.566792][T29287] device syz_tun left promiscuous mode [ 2120.576899][T29287] bridge1222: port 1(syz_tun) entered disabled state [ 2120.676145][T29287] bridge1223: port 1(syz_tun) entered blocking state [ 2120.725508][T29287] bridge1223: port 1(syz_tun) entered disabled state [ 2120.779327][T29287] device syz_tun entered promiscuous mode [ 2120.814556][T29288] bridge1641: port 1(syz_tun) entered disabled state [ 2120.884638][T29288] bridge1642: port 1(syz_tun) entered blocking state [ 2120.913895][T29288] bridge1642: port 1(syz_tun) entered disabled state [ 2120.978361][ T3207] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2121.037112][T29295] __nla_validate_parse: 4 callbacks suppressed [ 2121.037139][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2121.169598][T29303] bridge939: port 1(syz_tun) entered disabled state [ 2121.204247][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2121.249252][T29303] bridge940: port 1(syz_tun) entered blocking state [ 2121.275455][T29303] bridge940: port 1(syz_tun) entered disabled state [ 2121.349632][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2121.507621][ T3207] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2121.555390][T29314] bridge1046: port 1(syz_tun) entered disabled state 15:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xa00}}, 0x20}}, 0x0) [ 2121.621214][T29314] bridge1047: port 1(syz_tun) entered blocking state [ 2121.646473][T29314] bridge1047: port 1(syz_tun) entered disabled state [ 2121.786811][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009, 0xc00}}, 0x20}}, 0x0) [ 2121.851251][ T3207] usb 1-1: device descriptor read/64, error 18 [ 2121.866624][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000010000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2122.060612][ T3207] usb usb1-port1: attempt power cycle [ 2122.113965][T29333] device syz_tun left promiscuous mode [ 2122.120426][T29333] bridge1223: port 1(syz_tun) entered disabled state [ 2122.240971][T29333] bridge1224: port 1(syz_tun) entered blocking state [ 2122.247798][T29333] bridge1224: port 1(syz_tun) entered disabled state [ 2122.277127][T29333] device syz_tun entered promiscuous mode [ 2122.372263][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xf000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2122.457540][T29342] bridge940: port 1(syz_tun) entered disabled state [ 2122.568028][T29342] bridge941: port 1(syz_tun) entered blocking state [ 2122.574990][T29342] bridge941: port 1(syz_tun) entered disabled state [ 2122.614469][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2122.693432][T29353] bridge1047: port 1(syz_tun) entered disabled state [ 2122.793446][T29353] bridge1048: port 1(syz_tun) entered blocking state [ 2122.809069][T29353] bridge1048: port 1(syz_tun) entered disabled state [ 2122.847818][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000a2fa1190000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2122.972343][T29363] bridge1642: port 1(syz_tun) entered disabled state [ 2123.011021][T29363] bridge1643: port 1(syz_tun) entered blocking state 15:51:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2123.025843][T29363] bridge1643: port 1(syz_tun) entered disabled state [ 2123.071623][T29372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000020000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2123.249946][ T3207] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2123.391005][T29374] device syz_tun left promiscuous mode [ 2123.396703][T29374] bridge1224: port 1(syz_tun) entered disabled state [ 2123.481636][T29374] bridge1225: port 1(syz_tun) entered blocking state [ 2123.497610][T29374] bridge1225: port 1(syz_tun) entered disabled state 15:51:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2123.554314][T29374] device syz_tun entered promiscuous mode [ 2123.628821][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2123.648705][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2123.735464][ T3207] usb 1-1: device descriptor read/8, error -71 15:51:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r5, 0x8009}}, 0x20}}, 0x0) 15:51:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2123.846382][T29395] bridge941: port 1(syz_tun) entered disabled state [ 2123.903956][T29395] bridge942: port 1(syz_tun) entered blocking state [ 2123.929239][T29395] bridge942: port 1(syz_tun) entered disabled state [ 2124.089839][T29400] bridge1048: port 1(syz_tun) entered disabled state 15:51:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000a2fa1190000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000030000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2124.166381][T29400] bridge1049: port 1(syz_tun) entered blocking state [ 2124.192400][T29400] bridge1049: port 1(syz_tun) entered disabled state 15:51:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2124.588025][T29424] device syz_tun left promiscuous mode [ 2124.594082][T29424] bridge1225: port 1(syz_tun) entered disabled state [ 2124.711561][T29424] bridge1226: port 1(syz_tun) entered blocking state [ 2124.723178][T29424] bridge1226: port 1(syz_tun) entered disabled state [ 2124.760350][T29424] device syz_tun entered promiscuous mode [ 2124.781463][T29423] bridge1643: port 1(syz_tun) entered disabled state [ 2124.845462][ T3207] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2124.876592][T29423] bridge1644: port 1(syz_tun) entered blocking state [ 2124.905295][T29423] bridge1644: port 1(syz_tun) entered disabled state [ 2124.967036][T29453] bridge1049: port 1(syz_tun) entered disabled state 15:51:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000000c000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2125.187025][T29438] bridge942: port 1(syz_tun) entered disabled state [ 2125.205825][ T3207] usb 1-1: device descriptor read/8, error -61 [ 2125.277918][T29438] bridge943: port 1(syz_tun) entered blocking state [ 2125.296358][T29438] bridge943: port 1(syz_tun) entered disabled state [ 2125.334742][ T3207] usb usb1-port1: unable to enumerate USB device 15:51:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000a2fa1190000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2125.665159][T29465] device syz_tun left promiscuous mode [ 2125.692622][T29465] bridge1226: port 1(syz_tun) entered disabled state 15:51:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000040000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2125.951791][T29465] bridge1227: port 1(syz_tun) entered blocking state 15:51:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104009effffff00000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2126.009939][T29465] bridge1227: port 1(syz_tun) entered disabled state [ 2126.069921][T29465] device syz_tun entered promiscuous mode [ 2126.148383][T29469] __nla_validate_parse: 7 callbacks suppressed [ 2126.148412][T29469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2126.425161][T29475] bridge943: port 1(syz_tun) entered disabled state [ 2126.477171][T29475] bridge944: port 1(syz_tun) entered blocking state [ 2126.544809][T29475] bridge944: port 1(syz_tun) entered disabled state [ 2126.662162][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:51:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7, r5, 0x8009}}, 0x20}}, 0x0) [ 2126.902580][T29481] bridge1644: port 1(syz_tun) entered disabled state [ 2126.929835][T29481] bridge1645: port 1(syz_tun) entered blocking state [ 2126.993189][T29481] bridge1645: port 1(syz_tun) entered disabled state [ 2127.108498][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000050000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2127.253364][T29493] bridge1051: port 1(syz_tun) entered blocking state [ 2127.296236][T29493] bridge1051: port 1(syz_tun) entered disabled state [ 2127.387914][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2127.409674][ T5] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2127.489231][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104009effffff00000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2127.685937][T29506] device syz_tun left promiscuous mode [ 2127.706249][T29506] bridge1227: port 1(syz_tun) entered disabled state [ 2127.817386][T29506] bridge1228: port 1(syz_tun) entered blocking state [ 2127.857540][T29506] bridge1228: port 1(syz_tun) entered disabled state [ 2127.929829][T29506] device syz_tun entered promiscuous mode [ 2127.936766][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 2128.047022][T29512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2128.067751][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 15:51:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2128.088978][ T5] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.156377][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2128.184385][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.233797][ T5] usb 1-1: config 0 descriptor?? [ 2128.239381][T29517] bridge944: port 1(syz_tun) entered disabled state [ 2128.319465][T29517] bridge945: port 1(syz_tun) entered blocking state [ 2128.344676][T29517] bridge945: port 1(syz_tun) entered disabled state [ 2128.444415][T29533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000060000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7, r5, 0x8009}}, 0x20}}, 0x0) [ 2128.568208][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2128.800346][T29539] bridge1051: port 1(syz_tun) entered disabled state [ 2128.847049][T29539] bridge1052: port 1(syz_tun) entered blocking state [ 2128.858557][T29539] bridge1052: port 1(syz_tun) entered disabled state [ 2128.909653][T29540] bridge1645: port 1(syz_tun) entered disabled state 15:51:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104009effffff00000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2129.075160][T29540] bridge1646: port 1(syz_tun) entered blocking state [ 2129.088835][T29540] bridge1646: port 1(syz_tun) entered disabled state [ 2129.237388][T29580] bridge1052: port 1(syz_tun) entered disabled state [ 2129.285190][T29552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2129.427832][T29555] device syz_tun left promiscuous mode [ 2129.441832][T29555] bridge1228: port 1(syz_tun) entered disabled state [ 2129.520858][T29555] bridge1229: port 1(syz_tun) entered blocking state [ 2129.528053][T29555] bridge1229: port 1(syz_tun) entered disabled state [ 2129.571234][T29555] device syz_tun entered promiscuous mode [ 2129.613713][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2129.909833][T29573] bridge945: port 1(syz_tun) entered disabled state [ 2129.978874][T29573] bridge946: port 1(syz_tun) entered blocking state [ 2129.990686][T29573] bridge946: port 1(syz_tun) entered disabled state 15:51:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2130.097419][ T3207] usb 1-1: USB disconnect, device number 51 15:51:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7, r5, 0x8009}}, 0x20}}, 0x0) 15:51:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000070000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2130.395909][T29595] bridge1646: port 1(syz_tun) entered disabled state [ 2130.435891][T29595] bridge1647: port 1(syz_tun) entered blocking state 15:51:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6, r5, 0x8009}}, 0x20}}, 0x0) [ 2130.539796][T29595] bridge1647: port 1(syz_tun) entered disabled state [ 2130.650195][ T3207] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2130.897284][T29607] device syz_tun left promiscuous mode [ 2130.938499][ T3207] usb 1-1: Using ep0 maxpacket: 16 [ 2130.948878][T29607] bridge1229: port 1(syz_tun) entered disabled state [ 2131.077954][T29607] bridge1230: port 1(syz_tun) entered blocking state [ 2131.089646][T29607] bridge1230: port 1(syz_tun) entered disabled state [ 2131.123982][ T3207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.141517][ T3207] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2131.188815][T29607] device syz_tun entered promiscuous mode [ 2131.258584][ T3207] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2131.289339][ T3207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.327169][ T3207] usb 1-1: config 0 descriptor?? [ 2131.384212][T29618] __nla_validate_parse: 4 callbacks suppressed [ 2131.384238][T29618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000080000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2131.618512][T29592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2131.709325][T29622] bridge946: port 1(syz_tun) entered disabled state 15:51:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2131.859742][T29622] bridge947: port 1(syz_tun) entered blocking state [ 2131.941862][T29622] bridge947: port 1(syz_tun) entered disabled state [ 2132.065083][T29623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xc, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2132.199514][T29634] bridge1054: port 1(syz_tun) entered blocking state [ 2132.211566][T29634] bridge1054: port 1(syz_tun) entered disabled state 15:51:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6, r5, 0x8009}}, 0x20}}, 0x0) [ 2132.387588][T29648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2132.487262][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000090000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2132.671555][T29652] device syz_tun left promiscuous mode [ 2132.677373][T29652] bridge1230: port 1(syz_tun) entered disabled state [ 2132.745710][T29652] bridge1231: port 1(syz_tun) entered blocking state [ 2132.758964][T29652] bridge1231: port 1(syz_tun) entered disabled state [ 2132.808773][T29652] device syz_tun entered promiscuous mode [ 2132.845345][T29686] bridge1054: port 1(syz_tun) entered disabled state 15:51:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2132.930101][T29655] bridge1647: port 1(syz_tun) entered disabled state [ 2133.022765][T29655] bridge1648: port 1(syz_tun) entered blocking state [ 2133.047074][T29655] bridge1648: port 1(syz_tun) entered disabled state [ 2133.133981][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2133.284930][ T8655] usb 1-1: USB disconnect, device number 52 [ 2133.366836][T29667] bridge947: port 1(syz_tun) entered disabled state [ 2133.476294][T29667] bridge948: port 1(syz_tun) entered blocking state [ 2133.499862][T29667] bridge948: port 1(syz_tun) entered disabled state [ 2133.594355][T29681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xc, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2133.698100][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000000a0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2133.821523][T29657] bridge1648: port 1(syz_tun) entered disabled state [ 2133.868047][T29657] bridge1649: port 1(syz_tun) entered blocking state [ 2133.889046][ T8655] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2133.938239][T29657] bridge1649: port 1(syz_tun) entered disabled state 15:51:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2134.208428][ T8655] usb 1-1: Using ep0 maxpacket: 16 [ 2134.250983][T29689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2134.404799][ T8655] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.419639][ T8655] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2134.449224][T29695] device syz_tun left promiscuous mode [ 2134.489796][T29695] bridge1231: port 1(syz_tun) entered disabled state [ 2134.496009][ T8655] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 15:51:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x65580000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2134.564710][ T8655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.611742][ T8655] usb 1-1: config 0 descriptor?? [ 2134.713626][T29695] bridge1232: port 1(syz_tun) entered blocking state [ 2134.758279][T29695] bridge1232: port 1(syz_tun) entered disabled state [ 2134.787641][T29695] device syz_tun entered promiscuous mode [ 2134.876245][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2135.028996][T29719] bridge948: port 1(syz_tun) entered disabled state [ 2135.090817][T29719] bridge949: port 1(syz_tun) entered blocking state [ 2135.097922][T29719] bridge949: port 1(syz_tun) entered disabled state 15:51:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0xc, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2135.277392][T29730] bridge1649: port 1(syz_tun) entered disabled state [ 2135.329704][T29730] bridge1650: port 1(syz_tun) entered blocking state [ 2135.374329][T29730] bridge1650: port 1(syz_tun) entered disabled state 15:51:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000000c0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2135.607519][T29744] bridge1056: port 1(syz_tun) entered blocking state [ 2135.619844][T29744] bridge1056: port 1(syz_tun) entered disabled state [ 2135.789800][T29751] device syz_tun left promiscuous mode [ 2135.795987][T29751] bridge1232: port 1(syz_tun) entered disabled state [ 2135.886878][T29751] bridge1233: port 1(syz_tun) entered blocking state [ 2135.899451][T29751] bridge1233: port 1(syz_tun) entered disabled state [ 2135.918565][T29751] device syz_tun entered promiscuous mode 15:51:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400f000"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2136.197923][T29767] bridge949: port 1(syz_tun) entered disabled state 15:51:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xa) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0xc, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2136.303731][T29767] bridge950: port 1(syz_tun) entered blocking state [ 2136.394797][T29767] bridge950: port 1(syz_tun) entered disabled state 15:51:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2136.494767][ T3218] usb 1-1: USB disconnect, device number 53 [ 2136.621759][T29801] bridge1650: port 1(syz_tun) entered disabled state 15:51:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2136.771643][T29783] __nla_validate_parse: 5 callbacks suppressed [ 2136.771670][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000000e0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2136.927646][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2137.188789][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2137.224434][T29790] device syz_tun left promiscuous mode [ 2137.235690][T29790] bridge1233: port 1(syz_tun) entered disabled state [ 2137.296581][ T3218] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2137.346807][T29790] bridge1234: port 1(syz_tun) entered blocking state [ 2137.378443][T29790] bridge1234: port 1(syz_tun) entered disabled state [ 2137.418431][T29790] device syz_tun entered promiscuous mode 15:51:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x6, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2137.547606][T29793] bridge1056: port 1(syz_tun) entered disabled state [ 2137.629995][T29793] bridge1057: port 1(syz_tun) entered blocking state [ 2137.650946][ T3218] usb 1-1: Using ep0 maxpacket: 16 [ 2137.664689][T29793] bridge1057: port 1(syz_tun) entered disabled state 15:51:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400f000"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2137.759618][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2137.798608][ T3218] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2137.838172][ T3218] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2137.884762][ T3218] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2137.930883][ T3218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.971504][ T3218] usb 1-1: config 0 descriptor?? [ 2137.999211][T29816] bridge950: port 1(syz_tun) entered disabled state [ 2138.037941][T29816] bridge951: port 1(syz_tun) entered blocking state [ 2138.048402][T29816] bridge951: port 1(syz_tun) entered disabled state [ 2138.053627][ T3218] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2138.139875][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2138.183129][T29805] bridge1651: port 1(syz_tun) entered blocking state [ 2138.192198][T29805] bridge1651: port 1(syz_tun) entered disabled state 15:51:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000100000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2138.329655][T29833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2138.529702][T29835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2138.898128][T29843] device syz_tun left promiscuous mode [ 2138.924746][T29843] bridge1234: port 1(syz_tun) entered disabled state [ 2139.048666][T29843] bridge1235: port 1(syz_tun) entered blocking state [ 2139.060021][T29843] bridge1235: port 1(syz_tun) entered disabled state [ 2139.085875][T29843] device syz_tun entered promiscuous mode [ 2139.116069][T29846] bridge1057: port 1(syz_tun) entered disabled state [ 2139.159397][T29846] bridge1058: port 1(syz_tun) entered blocking state [ 2139.206077][T29846] bridge1058: port 1(syz_tun) entered disabled state [ 2139.299776][T29851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x6, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400f000"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2139.549565][T29857] bridge951: port 1(syz_tun) entered disabled state [ 2139.598748][T29857] bridge952: port 1(syz_tun) entered blocking state [ 2139.652861][T29857] bridge952: port 1(syz_tun) entered disabled state 15:51:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000001f0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2139.805385][T29865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2139.808689][ T3218] usb 1-1: USB disconnect, device number 54 15:51:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2140.085393][T29871] bridge1651: port 1(syz_tun) entered disabled state [ 2140.173533][T29871] bridge1652: port 1(syz_tun) entered blocking state [ 2140.214427][T29871] bridge1652: port 1(syz_tun) entered disabled state [ 2140.295051][T29874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2140.459332][ T3218] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2140.639323][T29891] bridge1058: port 1(syz_tun) entered disabled state [ 2140.718533][T29891] bridge1059: port 1(syz_tun) entered blocking state [ 2140.736088][T29891] bridge1059: port 1(syz_tun) entered disabled state [ 2140.798555][ T3218] usb 1-1: Using ep0 maxpacket: 16 15:51:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2140.854008][T29893] device syz_tun left promiscuous mode [ 2140.859810][T29893] bridge1235: port 1(syz_tun) entered disabled state [ 2140.938789][ T3218] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.992988][ T3218] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 15:51:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000200000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2141.040030][T29893] bridge1236: port 1(syz_tun) entered blocking state [ 2141.061567][ T3218] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2141.086422][ T3218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.125701][ T3218] usb 1-1: config 0 descriptor?? [ 2141.135817][T29893] bridge1236: port 1(syz_tun) entered disabled state [ 2141.176227][T29893] device syz_tun entered promiscuous mode [ 2141.201747][ T3218] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2141.274541][T18931] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2141.344931][T29916] bridge952: port 1(syz_tun) entered disabled state 15:51:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x6, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2141.447121][T29916] bridge953: port 1(syz_tun) entered blocking state [ 2141.474225][T29916] bridge953: port 1(syz_tun) entered disabled state [ 2141.544158][T18931] usb 2-1: Using ep0 maxpacket: 16 15:51:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2141.674805][T18931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.696439][T18931] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2141.796589][T18931] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2141.827301][T29931] bridge1652: port 1(syz_tun) entered disabled state [ 2141.854106][T18931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.917609][T29931] bridge1653: port 1(syz_tun) entered blocking state [ 2141.928335][T18931] usb 2-1: config 0 descriptor?? [ 2141.967503][T29931] bridge1653: port 1(syz_tun) entered disabled state [ 2142.027261][T18931] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2142.071051][T29932] __nla_validate_parse: 4 callbacks suppressed [ 2142.071077][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2142.288879][T29951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000003c0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2142.548481][T29955] device syz_tun left promiscuous mode [ 2142.554470][T29955] bridge1236: port 1(syz_tun) entered disabled state [ 2142.680162][T29955] bridge1237: port 1(syz_tun) entered blocking state [ 2142.705087][T29955] bridge1237: port 1(syz_tun) entered disabled state [ 2142.738193][T29955] device syz_tun entered promiscuous mode [ 2142.803987][T29967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2143.048675][T29970] bridge953: port 1(syz_tun) entered disabled state 15:51:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2143.091669][ T3207] usb 1-1: USB disconnect, device number 55 [ 2143.126955][T29970] bridge954: port 1(syz_tun) entered blocking state [ 2143.176498][T29970] bridge954: port 1(syz_tun) entered disabled state [ 2143.325638][T29977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2143.458196][T29982] bridge1653: port 1(syz_tun) entered disabled state [ 2143.511116][T29982] bridge1654: port 1(syz_tun) entered blocking state [ 2143.543408][T29982] bridge1654: port 1(syz_tun) entered disabled state 15:51:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000fffd5c3c0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2143.709130][T29998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2143.748480][ T3207] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2143.894240][T30002] device syz_tun left promiscuous mode [ 2143.900094][T30002] bridge1237: port 1(syz_tun) entered disabled state [ 2143.992831][T30002] bridge1238: port 1(syz_tun) entered blocking state [ 2144.019718][ T5] usb 2-1: USB disconnect, device number 73 [ 2144.026546][T30002] bridge1238: port 1(syz_tun) entered disabled state [ 2144.033859][T30002] device syz_tun entered promiscuous mode [ 2144.053998][ T3207] usb 1-1: Using ep0 maxpacket: 16 15:51:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2144.157234][T29983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2144.210422][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2144.225431][ T3207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.254268][ T3207] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 15:51:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x60) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2144.355760][T30019] bridge954: port 1(syz_tun) entered disabled state [ 2144.362471][ T3207] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2144.362518][ T3207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.369191][ T3207] usb 1-1: config 0 descriptor?? 15:51:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2144.482977][T30019] bridge955: port 1(syz_tun) entered blocking state [ 2144.490403][T30019] bridge955: port 1(syz_tun) entered disabled state [ 2144.594284][T30032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2144.718387][ T3207] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 15:51:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000003f0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2144.860426][T30039] bridge1059: port 1(syz_tun) entered disabled state [ 2144.918384][T30039] bridge1060: port 1(syz_tun) entered blocking state [ 2144.942074][T30039] bridge1060: port 1(syz_tun) entered disabled state [ 2145.029979][T30043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2145.204940][T30044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2145.417600][T30052] bridge1654: port 1(syz_tun) entered disabled state [ 2145.448032][T30052] bridge1655: port 1(syz_tun) entered blocking state [ 2145.475341][T30052] bridge1655: port 1(syz_tun) entered disabled state [ 2145.520608][T30054] device syz_tun left promiscuous mode [ 2145.526795][T30054] bridge1238: port 1(syz_tun) entered disabled state [ 2145.574914][T30054] bridge1239: port 1(syz_tun) entered blocking state [ 2145.603476][T30054] bridge1239: port 1(syz_tun) entered disabled state [ 2145.629327][T30054] device syz_tun entered promiscuous mode 15:51:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2145.888856][T30071] bridge955: port 1(syz_tun) entered disabled state [ 2145.979938][T30071] bridge956: port 1(syz_tun) entered blocking state [ 2145.995773][T30071] bridge956: port 1(syz_tun) entered disabled state [ 2146.136776][T30096] device syz_tun left promiscuous mode [ 2146.174546][T30096] bridge1239: port 1(syz_tun) entered disabled state 15:51:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2146.208496][ T3207] usb 1-1: USB disconnect, device number 56 15:51:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xf0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2146.429216][T30083] bridge1060: port 1(syz_tun) entered disabled state [ 2146.538549][T30083] bridge1061: port 1(syz_tun) entered blocking state [ 2146.576812][T30083] bridge1061: port 1(syz_tun) entered disabled state [ 2146.818173][ T3207] usb 1-1: new high-speed USB device number 57 using dummy_hcd 15:51:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2147.026865][T30112] bridge956: port 1(syz_tun) entered disabled state [ 2147.129955][ T3207] usb 1-1: Using ep0 maxpacket: 16 [ 2147.206580][T30112] bridge957: port 1(syz_tun) entered blocking state [ 2147.278788][ T3207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.309943][T30112] bridge957: port 1(syz_tun) entered disabled state 15:51:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001049effffff0000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2147.316639][ T3207] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2147.408397][ T3207] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2147.426501][T30113] __nla_validate_parse: 5 callbacks suppressed [ 2147.426524][T30113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2147.459677][ T3207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.544671][ T3207] usb 1-1: config 0 descriptor?? [ 2147.589193][ T3207] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2147.665986][T30120] bridge1655: port 1(syz_tun) entered disabled state [ 2147.729206][T30120] bridge1656: port 1(syz_tun) entered blocking state [ 2147.745764][T30120] bridge1656: port 1(syz_tun) entered disabled state [ 2147.768989][T30128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2148.009541][T30133] bridge1061: port 1(syz_tun) entered disabled state [ 2148.060830][T30133] bridge1062: port 1(syz_tun) entered blocking state [ 2148.067696][T30133] bridge1062: port 1(syz_tun) entered disabled state 15:51:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000004c0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2148.156509][T30121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000c00000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2148.216488][T30150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x600) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2148.363598][T30152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2148.611345][T30161] bridge1241: port 1(syz_tun) entered blocking state [ 2148.632622][T30161] bridge1241: port 1(syz_tun) entered disabled state [ 2148.674298][T30161] device syz_tun entered promiscuous mode [ 2148.705274][T30160] bridge957: port 1(syz_tun) entered disabled state [ 2148.784620][T30160] bridge958: port 1(syz_tun) entered blocking state [ 2148.829103][T30160] bridge958: port 1(syz_tun) entered disabled state 15:51:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xc000000, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2148.905914][T30173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000600000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2148.997007][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2149.218724][T30183] bridge1656: port 1(syz_tun) entered disabled state [ 2149.243393][T30183] bridge1657: port 1(syz_tun) entered blocking state [ 2149.251434][T30183] bridge1657: port 1(syz_tun) entered disabled state [ 2149.333084][T30186] bridge1062: port 1(syz_tun) entered disabled state [ 2149.405349][T30186] bridge1063: port 1(syz_tun) entered blocking state [ 2149.412726][T30186] bridge1063: port 1(syz_tun) entered disabled state 15:51:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:51:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2149.490188][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2149.509654][ T19] usb 1-1: USB disconnect, device number 57 15:51:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001005010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2149.686798][T30222] bridge958: port 1(syz_tun) entered disabled state 15:51:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000058650000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2149.804615][T30201] device syz_tun left promiscuous mode [ 2149.819090][T30201] bridge1241: port 1(syz_tun) entered disabled state 15:51:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104fffffffffffff00000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2149.867618][T30201] bridge1242: port 1(syz_tun) entered blocking state [ 2149.927246][T30201] bridge1242: port 1(syz_tun) entered disabled state [ 2149.953117][T30201] device syz_tun entered promiscuous mode [ 2150.019952][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2150.059428][T30215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x10, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xa00) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2150.206497][T30232] bridge1063: port 1(syz_tun) entered disabled state 15:51:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000680000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000e0000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x60, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2150.460197][ T19] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2150.513241][T30243] device syz_tun left promiscuous mode [ 2150.519375][T30243] bridge1242: port 1(syz_tun) entered disabled state [ 2150.585337][T30243] bridge1243: port 1(syz_tun) entered blocking state [ 2150.621852][T30243] bridge1243: port 1(syz_tun) entered disabled state [ 2150.714675][T30243] device syz_tun entered promiscuous mode [ 2150.875511][T30242] bridge1657: port 1(syz_tun) entered disabled state [ 2150.939600][T30242] bridge1658: port 1(syz_tun) entered blocking state [ 2150.962851][T30242] bridge1658: port 1(syz_tun) entered disabled state 15:51:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104fffff0000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000006c0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2151.288873][T30261] bridge960: port 1(syz_tun) entered blocking state [ 2151.307714][T30261] bridge960: port 1(syz_tun) entered disabled state [ 2151.377875][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 2151.415981][T30260] bridge1064: port 1(syz_tun) entered blocking state [ 2151.439186][T30260] bridge1064: port 1(syz_tun) entered disabled state [ 2151.635141][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.668530][T30283] device syz_tun left promiscuous mode [ 2151.688723][T30283] bridge1243: port 1(syz_tun) entered disabled state [ 2151.709846][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2151.849493][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2151.892598][T30283] bridge1244: port 1(syz_tun) entered blocking state [ 2151.925174][T30283] bridge1244: port 1(syz_tun) entered disabled state [ 2151.927156][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.968669][T30283] device syz_tun entered promiscuous mode [ 2152.036646][ T19] usb 1-1: config 0 descriptor?? [ 2152.231219][ T19] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 15:51:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:51:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000e0000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xc00) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xa, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104fffff0000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000740000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2153.505941][T28110] usb 1-1: USB disconnect, device number 58 [ 2153.657823][T30307] __nla_validate_parse: 6 callbacks suppressed [ 2153.657846][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000000000007a0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2153.897721][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2154.016021][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2154.159771][T30317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2154.256604][T30318] device syz_tun left promiscuous mode [ 2154.279310][T30318] bridge1244: port 1(syz_tun) entered disabled state [ 2154.315718][T28110] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2154.367771][T30318] bridge1245: port 1(syz_tun) entered blocking state [ 2154.398780][T30318] bridge1245: port 1(syz_tun) entered disabled state [ 2154.419162][T30318] device syz_tun entered promiscuous mode [ 2154.544416][T30320] bridge1064: port 1(syz_tun) entered disabled state 15:51:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104fffff0000000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2154.627669][T30320] bridge1065: port 1(syz_tun) entered blocking state [ 2154.649071][T28110] usb 1-1: Using ep0 maxpacket: 16 [ 2154.659652][T30320] bridge1065: port 1(syz_tun) entered disabled state [ 2154.774692][T28110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2154.800051][T30326] bridge1658: port 1(syz_tun) entered disabled state [ 2154.833517][T28110] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 15:51:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000810000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000e0000000000000000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2154.904817][T28110] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2154.929626][T30326] bridge1659: port 1(syz_tun) entered blocking state [ 2154.954561][T30326] bridge1659: port 1(syz_tun) entered disabled state [ 2154.975701][T28110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.008604][T28110] usb 1-1: config 0 descriptor?? [ 2155.081690][T30333] bridge960: port 1(syz_tun) entered disabled state [ 2155.148581][T30333] bridge961: port 1(syz_tun) entered blocking state [ 2155.159555][T30333] bridge961: port 1(syz_tun) entered disabled state [ 2155.239387][T28110] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 15:51:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xa, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2155.334656][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2155.348775][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xe00) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2155.504058][T30357] device syz_tun left promiscuous mode [ 2155.515806][T30357] bridge1245: port 1(syz_tun) entered disabled state [ 2155.572408][T30357] bridge1246: port 1(syz_tun) entered blocking state [ 2155.597492][T30357] bridge1246: port 1(syz_tun) entered disabled state [ 2155.704643][T30357] device syz_tun entered promiscuous mode [ 2155.735161][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2155.950038][T30369] bridge1065: port 1(syz_tun) entered disabled state [ 2156.074724][T30369] bridge1066: port 1(syz_tun) entered blocking state [ 2156.099625][T30369] bridge1066: port 1(syz_tun) entered disabled state [ 2156.137463][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2156.266250][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2156.366948][T30381] bridge961: port 1(syz_tun) entered disabled state [ 2156.435394][T30381] bridge962: port 1(syz_tun) entered blocking state [ 2156.458567][T30381] bridge962: port 1(syz_tun) entered disabled state [ 2156.574025][T30391] bridge1659: port 1(syz_tun) entered disabled state [ 2156.659551][T30391] bridge1660: port 1(syz_tun) entered blocking state [ 2156.698362][T30391] bridge1660: port 1(syz_tun) entered disabled state [ 2156.778799][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:51:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000ffffa8880000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0xa, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x5865) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2156.949462][ T19] usb 1-1: USB disconnect, device number 59 15:51:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000ffffff9e0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2157.544112][ T19] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2157.559570][T30429] device syz_tun left promiscuous mode [ 2157.566692][T30429] bridge1246: port 1(syz_tun) entered disabled state [ 2157.668848][T30429] bridge1247: port 1(syz_tun) entered blocking state [ 2157.684531][T30429] bridge1247: port 1(syz_tun) entered disabled state [ 2157.699567][T30429] device syz_tun entered promiscuous mode [ 2157.765265][T30431] bridge1066: port 1(syz_tun) entered disabled state [ 2157.823930][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 2157.827488][T30431] bridge1067: port 1(syz_tun) entered blocking state [ 2157.857651][T30431] bridge1067: port 1(syz_tun) entered disabled state [ 2157.957790][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2157.972660][T30436] bridge962: port 1(syz_tun) entered disabled state [ 2158.018766][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2158.027011][T30436] bridge963: port 1(syz_tun) entered blocking state [ 2158.047440][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.086206][ T19] usb 1-1: config 0 descriptor?? 15:51:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2158.136787][ T19] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2158.166624][T30436] bridge963: port 1(syz_tun) entered disabled state 15:51:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000001eaf0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x6000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2158.679186][T30461] device syz_tun left promiscuous mode [ 2158.694191][T30461] bridge1247: port 1(syz_tun) entered disabled state [ 2158.874968][T30461] bridge1248: port 1(syz_tun) entered blocking state [ 2158.888662][T30461] bridge1248: port 1(syz_tun) entered disabled state [ 2158.926044][T30461] device syz_tun entered promiscuous mode [ 2159.081808][T30477] __nla_validate_parse: 7 callbacks suppressed [ 2159.081835][T30477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2159.201389][T30478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2159.302560][T30469] bridge963: port 1(syz_tun) entered disabled state [ 2159.359179][T30469] bridge964: port 1(syz_tun) entered blocking state [ 2159.372069][T30469] bridge964: port 1(syz_tun) entered disabled state [ 2159.396741][T30484] bridge1067: port 1(syz_tun) entered disabled state [ 2159.454783][T30484] bridge1068: port 1(syz_tun) entered blocking state [ 2159.471894][T30484] bridge1068: port 1(syz_tun) entered disabled state [ 2159.589963][T30488] bridge1660: port 1(syz_tun) entered disabled state [ 2159.689390][T30488] bridge1662: port 1(syz_tun) entered blocking state [ 2159.728571][T30488] bridge1662: port 1(syz_tun) entered disabled state [ 2159.848285][T30491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:51:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000ffffffc30000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:51:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x6558) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2160.199898][T28110] usb 1-1: USB disconnect, device number 60 [ 2160.316295][T30517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2160.517869][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2160.587747][T30520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000009ef0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2160.715637][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2160.958435][T28110] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2160.987687][T30533] bridge1662: port 1(syz_tun) entered disabled state [ 2161.104449][T30533] bridge1663: port 1(syz_tun) entered blocking state [ 2161.126107][T30533] bridge1663: port 1(syz_tun) entered disabled state [ 2161.168211][T30529] bridge964: port 1(syz_tun) entered disabled state [ 2161.219828][T30529] bridge965: port 1(syz_tun) entered blocking state [ 2161.245644][T30529] bridge965: port 1(syz_tun) entered disabled state [ 2161.278702][T28110] usb 1-1: Using ep0 maxpacket: 16 [ 2161.290784][T30534] bridge1068: port 1(syz_tun) entered disabled state [ 2161.336918][T30534] bridge1069: port 1(syz_tun) entered blocking state [ 2161.348932][T30534] bridge1069: port 1(syz_tun) entered disabled state [ 2161.419000][T28110] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2161.498120][T28110] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2161.521636][T28110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:51:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000fffffff00000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2161.599347][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2161.625104][T28110] usb 1-1: config 0 descriptor?? 15:51:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x402, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2161.731692][T28110] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2161.853207][T30533] bridge1663: port 1(syz_tun) entered disabled state [ 2161.947332][T30566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x8100) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000009fc0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2162.214310][T30572] bridge1069: port 1(syz_tun) entered disabled state [ 2162.350338][T30572] bridge1070: port 1(syz_tun) entered blocking state [ 2162.357604][T30572] bridge1070: port 1(syz_tun) entered disabled state [ 2162.414256][T30571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2162.970870][T30582] device syz_tun left promiscuous mode [ 2162.976663][T30582] bridge1248: port 1(syz_tun) entered disabled state [ 2163.045839][T30582] bridge1250: port 1(syz_tun) entered blocking state [ 2163.066594][T30582] bridge1250: port 1(syz_tun) entered disabled state [ 2163.103906][T30582] device syz_tun entered promiscuous mode [ 2163.149463][T30584] bridge965: port 1(syz_tun) entered disabled state 15:51:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x402, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2163.242187][T30584] bridge966: port 1(syz_tun) entered blocking state [ 2163.263275][T30584] bridge966: port 1(syz_tun) entered disabled state 15:51:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000fffffffe0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2163.537513][T24845] usb 1-1: USB disconnect, device number 61 15:51:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:51:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2163.686276][T30593] bridge1665: port 1(syz_tun) entered blocking state [ 2163.736520][T30593] bridge1665: port 1(syz_tun) entered disabled state 15:51:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xf000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2164.027755][T30616] device syz_tun left promiscuous mode [ 2164.039728][T30616] bridge1250: port 1(syz_tun) entered disabled state [ 2164.161147][T30616] bridge1251: port 1(syz_tun) entered blocking state [ 2164.214986][T24845] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2164.226571][T30616] bridge1251: port 1(syz_tun) entered disabled state [ 2164.233111][T30616] device syz_tun entered promiscuous mode [ 2164.278529][T30631] __nla_validate_parse: 4 callbacks suppressed [ 2164.278554][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000003c5cfdff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x402, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2164.537040][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2164.568561][T24845] usb 1-1: Using ep0 maxpacket: 16 [ 2164.680842][T30640] bridge1070: port 1(syz_tun) entered disabled state [ 2164.705022][T24845] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2164.737483][T24845] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2164.781490][T30640] bridge1071: port 1(syz_tun) entered blocking state [ 2164.789119][T30640] bridge1071: port 1(syz_tun) entered disabled state [ 2164.818788][T24845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.869452][T24845] usb 1-1: config 0 descriptor?? [ 2164.945616][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2164.957006][T24845] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 15:51:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2165.035352][T30646] bridge966: port 1(syz_tun) entered disabled state [ 2165.169442][T30646] bridge967: port 1(syz_tun) entered blocking state [ 2165.218839][T30646] bridge967: port 1(syz_tun) entered disabled state 15:51:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2165.315142][T30651] bridge1665: port 1(syz_tun) entered disabled state [ 2165.404656][T30651] bridge1666: port 1(syz_tun) entered blocking state [ 2165.417359][T30651] bridge1666: port 1(syz_tun) entered disabled state [ 2165.509442][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2165.755812][T30665] device syz_tun left promiscuous mode [ 2165.776224][T30665] bridge1251: port 1(syz_tun) entered disabled state [ 2165.825376][T30665] bridge1252: port 1(syz_tun) entered blocking state [ 2165.839914][T30665] bridge1252: port 1(syz_tun) entered disabled state [ 2165.904758][T30665] device syz_tun entered promiscuous mode [ 2165.951183][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2166.005550][T30677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xf0ffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:51:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000088a8ffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:51:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xc00, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2166.086274][T30683] bridge1071: port 1(syz_tun) entered disabled state [ 2166.186725][T30683] bridge1072: port 1(syz_tun) entered blocking state [ 2166.198525][T30683] bridge1072: port 1(syz_tun) entered disabled state [ 2166.297400][T30691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:51:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa00, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2166.451600][T30697] bridge967: port 1(syz_tun) entered disabled state [ 2166.587564][T30697] bridge968: port 1(syz_tun) entered blocking state [ 2166.626807][T30697] bridge968: port 1(syz_tun) entered disabled state [ 2166.659487][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2166.770213][T30707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:51:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:51:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa000000, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2167.024621][T12730] usb 1-1: USB disconnect, device number 62 [ 2167.113067][T30714] device syz_tun left promiscuous mode [ 2167.131235][T30714] bridge1252: port 1(syz_tun) entered disabled state [ 2167.186155][T30714] bridge1253: port 1(syz_tun) entered blocking state [ 2167.214948][T30714] bridge1253: port 1(syz_tun) entered disabled state [ 2167.283323][T30714] device syz_tun entered promiscuous mode [ 2167.455426][T30723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:51:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xc00, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2167.635371][T12730] usb 1-1: new high-speed USB device number 63 using dummy_hcd 15:51:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000e0ffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2167.707400][T30727] bridge1072: port 1(syz_tun) entered disabled state [ 2167.780035][T30727] bridge1073: port 1(syz_tun) entered blocking state [ 2167.795189][T30727] bridge1073: port 1(syz_tun) entered disabled state [ 2167.914360][T12730] usb 1-1: Using ep0 maxpacket: 16 15:51:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x1000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2167.988572][T30751] bridge968: port 1(syz_tun) entered disabled state 15:51:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa00, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2168.052124][T30751] bridge969: port 1(syz_tun) entered blocking state [ 2168.079746][T30751] bridge969: port 1(syz_tun) entered disabled state [ 2168.084530][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2168.166680][T12730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2168.208670][T12730] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2168.244812][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.307817][T12730] usb 1-1: config 0 descriptor?? [ 2168.365993][T12730] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 15:51:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280058651000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2168.504616][T30762] device syz_tun left promiscuous mode [ 2168.510575][T30762] bridge1253: port 1(syz_tun) entered disabled state 15:51:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000f0ffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2168.736865][T30762] bridge1254: port 1(syz_tun) entered blocking state [ 2168.757417][T30762] bridge1254: port 1(syz_tun) entered disabled state [ 2168.799365][T30762] device syz_tun entered promiscuous mode 15:52:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xc00, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2169.038502][T30781] bridge1666: port 1(syz_tun) entered disabled state [ 2169.081689][T30781] bridge1668: port 1(syz_tun) entered blocking state [ 2169.120219][T30781] bridge1668: port 1(syz_tun) entered disabled state [ 2169.344383][T30787] bridge1073: port 1(syz_tun) entered disabled state [ 2169.387539][T30787] bridge1074: port 1(syz_tun) entered blocking state [ 2169.406309][T30787] bridge1074: port 1(syz_tun) entered disabled state [ 2169.481776][T30790] __nla_validate_parse: 5 callbacks suppressed [ 2169.481803][T30790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2169.664696][T30769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0xa00, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:52:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280058651000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2169.747575][T30806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:52:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000007fffffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2169.938622][T30810] device syz_tun left promiscuous mode [ 2169.948351][T30810] bridge1254: port 1(syz_tun) entered disabled state [ 2170.159093][T30810] bridge1255: port 1(syz_tun) entered blocking state [ 2170.238825][T30810] bridge1255: port 1(syz_tun) entered disabled state [ 2170.320262][T28110] usb 1-1: USB disconnect, device number 63 [ 2170.338053][T30810] device syz_tun entered promiscuous mode 15:52:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:52:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2170.587745][T30827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:52:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0xf, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2170.681029][T30826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:52:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280058651000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2171.018941][T30833] bridge1074: port 1(syz_tun) entered disabled state 15:52:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000000000009effffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2171.079841][T30833] bridge1075: port 1(syz_tun) entered blocking state [ 2171.095038][T30833] bridge1075: port 1(syz_tun) entered disabled state [ 2171.137461][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x60, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2171.362734][T30849] bridge1668: port 1(syz_tun) entered disabled state [ 2171.385623][T30849] bridge1669: port 1(syz_tun) entered blocking state [ 2171.393529][T30849] bridge1669: port 1(syz_tun) entered disabled state [ 2171.500623][T30858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2171.549644][T30866] device syz_tun left promiscuous mode [ 2171.557747][T30866] bridge1255: port 1(syz_tun) entered disabled state [ 2171.584651][T30866] bridge1256: port 1(syz_tun) entered blocking state [ 2171.592553][T30866] bridge1256: port 1(syz_tun) entered disabled state [ 2171.612003][T30866] device syz_tun entered promiscuous mode [ 2171.631375][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2171.642249][T30873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:52:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280004001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2171.817904][T30884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:52:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000c3ffffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2171.991639][T30890] bridge1075: port 1(syz_tun) entered disabled state [ 2172.037527][T30890] bridge1076: port 1(syz_tun) entered blocking state [ 2172.102911][T28110] usb 1-1: new high-speed USB device number 64 using dummy_hcd 15:52:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2172.151316][T30890] bridge1076: port 1(syz_tun) entered disabled state 15:52:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x6, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2172.496423][T30913] bridge1669: port 1(syz_tun) entered disabled state 15:52:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000f0ffffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2172.583766][T30913] bridge1670: port 1(syz_tun) entered blocking state [ 2172.598414][T30913] bridge1670: port 1(syz_tun) entered disabled state [ 2172.685335][T30924] bridge969: port 1(syz_tun) entered disabled state [ 2172.718959][T30924] bridge973: port 1(syz_tun) entered blocking state [ 2172.806629][T30924] bridge973: port 1(syz_tun) entered disabled state [ 2173.003792][T28110] usb 1-1: Using ep0 maxpacket: 16 [ 2173.153473][T30935] bridge1076: port 1(syz_tun) entered disabled state [ 2173.198858][T30935] bridge1077: port 1(syz_tun) entered blocking state [ 2173.226388][T30935] bridge1077: port 1(syz_tun) entered disabled state [ 2173.252056][T28110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.275238][T28110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2173.405716][T28110] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2173.420139][T28110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.431185][T28110] usb 1-1: config 0 descriptor?? 15:52:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:52:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:52:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000c001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000feffffff0000", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2173.666637][T28110] usb 1-1: can't set config #0, error -71 [ 2173.694499][T28110] usb 1-1: USB disconnect, device number 64 15:52:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000040010100", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2174.117777][T30976] bridge1670: port 1(syz_tun) entered disabled state [ 2174.136921][T30976] bridge1671: port 1(syz_tun) entered blocking state [ 2174.153066][T30976] bridge1671: port 1(syz_tun) entered disabled state [ 2174.239814][T30959] device syz_tun left promiscuous mode 15:52:05 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c7b6842040200073bd2a000000010902ec581afff50000000009040006017e1ac50009050102000200"], 0x0) [ 2174.289625][T30959] bridge1256: port 1(syz_tun) entered disabled state [ 2174.435558][T30959] bridge1258: port 1(syz_tun) entered blocking state [ 2174.465614][T28110] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2174.531847][T30959] bridge1258: port 1(syz_tun) entered disabled state [ 2174.569733][T30959] device syz_tun entered promiscuous mode 15:52:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000000000010140", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2174.817262][T30990] bridge1077: port 1(syz_tun) entered disabled state [ 2174.857004][T30990] bridge1078: port 1(syz_tun) entered blocking state [ 2174.863946][T30990] bridge1078: port 1(syz_tun) entered disabled state 15:52:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) [ 2174.903170][T30963] __nla_validate_parse: 9 callbacks suppressed [ 2174.903195][T30963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r5], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x20, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x8009}}, 0x20}}, 0x0) 15:52:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2175.059382][T31011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2175.138960][T31015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2175.227824][ T8655] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2175.253570][T31011] device syz_tun left promiscuous mode [ 2175.259343][T31011] bridge1258: port 1(syz_tun) entered disabled state [ 2175.297957][T28110] usb 1-1: Using ep0 maxpacket: 16 [ 2175.329557][T31011] bridge1259: port 1(syz_tun) entered blocking state [ 2175.372407][T31011] bridge1259: port 1(syz_tun) entered disabled state [ 2175.390818][T31011] device syz_tun entered promiscuous mode [ 2175.548122][T31015] bridge1078: port 1(syz_tun) entered disabled state [ 2175.589444][T31015] bridge1079: port 1(syz_tun) entered blocking state [ 2175.597328][T31015] bridge1079: port 1(syz_tun) entered disabled state [ 2175.791085][T28110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2175.801147][T28110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2175.840159][T28110] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2175.849289][T28110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.917922][ T8655] usb 3-1: Using ep0 maxpacket: 32 [ 2175.929729][T28110] usb 1-1: config 0 descriptor?? [ 2176.029074][T28110] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2176.148801][ T8655] usb 3-1: config index 0 descriptor too short (expected 22764, got 27) [ 2176.166169][ T8655] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.181996][ T8655] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 26 [ 2176.207113][ T8655] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2176.225644][ T8655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.557829][ T8655] usb 3-1: string descriptor 0 read error: -71 [ 2176.571429][ T8655] usb 3-1: USB disconnect, device number 53 15:52:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:52:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x8000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:08 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_usb_connect(0x0, 0x11ec, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xb4, 0x0, 0xdc, 0xff, 0x16c0, 0x5df, 0x95f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11da, 0x4, 0x0, 0x8d, 0x0, 0x9, [{{0x9, 0x4, 0x16, 0x80, 0x0, 0x3, 0x0, 0x0, 0x20, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d3a8"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x741e, 0x3, 0x4, 0x3b}, [@country_functional={0x10, 0x24, 0x7, 0x1, 0x1, [0x8aff, 0x7f, 0x401, 0x1, 0x1b87]}, @mdlm={0x15, 0x24, 0x12, 0x3ff}, @obex={0x5, 0x24, 0x15, 0xb8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}]}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x93, 0x2, 0x81, 0x5, "b5ea67cce8e9876b"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x4, 0x1, 'y'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x37, 0x4, 0x9, 0x8e, '%', "ed"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5b, 0x7f, "06762d3a9fd937"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xfa, 0x2}]}]}}, {{0x9, 0x4, 0x8a, 0x34, 0x7, 0xb0, 0xea, 0xfe, 0x0, [], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0xff, 0x1, [@generic={0x46, 0x21, "1997e9695d4ed140a8e7a3a88382033024544088053f2a62055565484bc5fae71e70b28c4c1a7cd53f3eaa6d3ff01c5f3dabb30d60bfd88e304846d72282506bbe4e1137"}, @generic={0xfe, 0xb, "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"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x8, 0x9, 0xd0}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x7, 0x6, [@generic={0x44, 0x9, "866d8b48bb80370b1b6f5723ceaf3952c13ab4f2a062161995ae8306b86062264962565d572516a689af4174b580b60b71c834c023cd9046f0ec17792fd612e2656d"}, @generic={0xe0, 0x21, "f12b6b4297c2c488287e673ec63c345b35890c017fc4e3b14d87f000c80c8e184f3b82978c7cebfb2998488cfff60304505e54109ad539a7b03e020612bc2ddcc033bf7da5038f82173fa4d83cb9acb734ca24d136cacc155e0b547f5d8b72212b2b82ca15d9ae7c8530a63f49f43ed29e00cd30fc081c16c8b861b6adf3ed4b2c150bfd0fa1314f98574a1b9e50d5b4621421198b6d5d431873b9533434fdee521df0019b71a4c7ac57d36c28416e92d2c3142f05d06f80748608303cbb153e03535f3eac031bb6b6d21fde038877dabd685aacab9009e5e8ff6e45fedb"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7f, 0x8, 0x7, [@generic={0xdd, 0x11, "cb4702db6cd3dbbf93f13648319d566d5a6fbc36b5fed65223d88c6058460e2ad9b4266bad10d26e5f4fe78472b16dbe74f3d8dd5f28f1690cc1c294028511ec9bdf68606060371ee7008e8aec7d0bce8e9368638536824b0c02b6aed40289812014149c5641b3d4d2c114b70c15887a393a11963d59cac333127764826624cdaa4ed098671b8b90635c6a2504261a957c806fb35a6b66eda83783917f9635ed5d09ebfdb672a7cc46afec6289ee552bd0bf3222467df804e1f2ee87cb48c2a404bc3d6cf3f53b21658d22307f26d41b0752eb742d952c5a0245b9"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x2, 0x40, 0x1}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x7, 0xde, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1ff}, @generic={0xc5, 0x2a, "e23a174db50f6630c585658e0d21f2e173f4a9e44e285db28dda520885ef9c8b1c71f24bc5cd417f8b946d2d9a776e3639d12a2b280e5e00b34bc8f3e33038138d2194d880078e3ac4d28a21452565c3fdd0c78d823982630bc0126d6886b78222bbe8a6d20fcbc9936a6e2653e0e74d55fa257343dd83a59280743c3e36cbff122f3fb6c9ccd0b320c60d77d5aa1981ad9ad50bd0c20328ab203be2c69de6c37134b946890abef3831b3a151ecb52ea2604618ca67c2d83a41de40ac351b6b7b49331"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x2, 0x0, 0x1f, [@generic={0x16, 0x7, "9c23c6beedb526c7d4456476aa188f31435918b1"}]}}]}}, {{0x9, 0x4, 0xb4, 0x2, 0xf, 0x2, 0xd, 0x0, 0x0, [@hid_hid={0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x347}}, @uac_control={{0xa, 0x24, 0x1, 0xfc9f, 0x1}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x3, 0x9, "e4c9a6f607"}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x5, 0x3, "ac"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x8, 0x3, "f2"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x1, 0x8, "bd5dabaac5"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x3}]}], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0x4, 0x6, 0x6, [@generic={0xed, 0x11, "f83f14c09f91e8d5d05621fb9b6f70c266e1fc1664c2d199fffb5fa3ec17cc5f0382f15eaa7b79cabf508b63be5445e4c2d12d1ac0b9910bd6739177fd47b5045bd0d904c9b2fcfbf1d39263d74c4ca33910464e2264d7630c7e35b694e4aa393c34fb08960410d5a7da1d261886c73f4f1b1e2045adaf387dc408e999034141c06a1fd34e05ffd0dcc65507c8e5a12603073d4cdf0041504f823b73ef3b641ec59457cd60bafd4e14272f6977d7da048f058fc454d5e1174888b948374f8fd21295e9460be885b908c6dbda703c117978db440ca8ff4c9c86b76575ff56c23ff2202323834cb44ce7fe91"}]}}, {{0x9, 0x5, 0x0, 0x453b7900ec392244, 0x3ff, 0x3, 0x9f, 0xe8, [@generic={0xb0, 0x24, "43ff565bb4a58377e70813441bdce78f97eb7093939c28a780decedd6a45c6f42617f1048488b2d3a79ed3721137acf8317c4c600e395a18af5b070a07bb12846d352ddb86d63d829f4aab5d02cf9042e6d93d6bcee1bd7cc4b7ab258826dea1098d6b883ffc7d7641ecd6747c6517f06484bc57c8c7ae0762024abc7fa01e3e0789881ddca98efe8e8b92e670cf627f3ff471b496622c414dd10e98403b4d26462f84114479af3cdeb994b3811d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x0, 0x1, [@generic={0xa3, 0xe, "0328ee77235f4d628268b754cf186844efa95de1a751811ab7f3ce986773263bb4c0c10b5a458578a4b551570b7710954ed85448f8ac6522a0a1402ea34ec8fed42f18d363c9069c18c7d6d6d836f438531820aa02c1e8dd0faa7206178ee938456c780f16405ebfa80247d0d324fe1d02abddf7381d0eba6dc3e4cca6a7a9aad66aca416069dc840b280b173d4c840736478f88e0359532bb364e9231b01d16c8"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x4, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7a, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xf0, 0x7, 0x0, [@generic={0x20, 0x8, "3a37214de9304d301aee0a7a9937b3cef8174f1ee09b372867126d461824"}, @generic={0xba, 0x11, "a010ecca88b8de735cacf5bd879de5cb8197f11d909664b3765c32d58fb9bef802286193c26452269b7c4bbc2daacbb059f4e119346422d31f946880f64f37c0d47cfc323128cfa898e4d1c11f756545a54c5815f99914d37a59d1a82e54de403052d549ab746391173c3d729371c23f38b9ef50ee003d543d898bbffa632f7f090743f2e246c4adfd7e2401895409810cb3c00a2bd5e65735950c594c32db3c8038da06b0c4fc8adf0f9bb67e915c9a8256056db31740e3"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x1a, 0x2, [@generic={0x41, 0xa, "1dfbe79787dc8a51ccf3ad709c63639abb3fe571553b31c0c9bcc41271c78cfc9a2feaaa840945f42bd7e2cb00542c924fb6ba90a3a6c3972c5f6e2f104827"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x638, 0x5d, 0x3f, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0x7, 0x1, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x1}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x3, 0xd8, 0x81}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x66, 0xff, 0x1, [@generic={0x7d, 0x2, "16ca6df5e60f4ccd4c3dbeb2a1e1c50c4653b9c12c5436321a3098be9610d9a36e1dd9f53107189e8d2cf598c86e85344639cc3786bae78c91ef0b09167d31099de1621c03ee47c021624fedc25412ad5cbf11b6cf947a7a564d7b7a1d5c7a80da90b9921471a6d77eb588d7d6961d91340118bb0e19a9fff9d111"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x0, 0xb}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x1, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x1, 0x0, 0xef, 0x1f, 0x73}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x8, 0x9, 0x2}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x2, 0x0, 0x81, [@generic={0xd4, 0x10, "0c3b1a3e09d560be3c0277757461bd659c4d9c888ca3588f607da484d9c37ef78ba1299c4d31284aa9354873f9812cef40fe2d6455dbbfc28dd6053a7c8155b01c2cebfef80fd3b1ff4da0749b9d70da34fc586bfdbc1bd56b66d1ea5154ea1ea1331c750ec4cfce54e67cdee992ab3a132e0a4ac350d8ee46fc4e15ddeb0b2bb9701956d6b9a6d4b36504bc73379d5998850525167b7abd87ba374bd183cd60a384b54337b5b1133a3d706dd1973e7329522fe2b0f7f663786f4ec86f031283fb8372d4043548f4d231f02388129726f2ed"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x27}]}}]}}, {{0x9, 0x4, 0xb8, 0x1, 0xc, 0xed, 0xb6, 0xee, 0x7, [@hid_hid={0x9, 0x21, 0x101, 0xe2, 0x1, {0x22, 0xd41}}, @uac_control={{0xa, 0x24, 0x1, 0x7d, 0xe8}}], [{{0x9, 0x5, 0xa, 0x1d, 0x10, 0x7f, 0x4, 0x20, [@generic={0x15, 0x24, "cc201a33be1a72239ec1a1b321f85c81900390"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x7bf, 0x3, 0x1, 0x1, [@generic={0xbf, 0xc, "4c6c335ee3365de211a827ac7599ffb4df2160dcfda9bf87725f60c4637c85c809e153eb4684086d3994d4db324c80b641e0eeb6e55d7b6d540c5418e8c981aba740b9ec28fe4dd09fbac843891f29d090bb4c380acd998fd5d09782318728f0e931a2e0d329004f793c2f7ddcf270a7dda36dc4b6c242f7cb24beea8d7031eb45bb0e26105f3ca303e1d6950d095a6066c48ecb3df99c504e5b48804f56978415e3a8fe20ded318391d17e6eb8aa6f27e6abcf5601ed5f3692416f091"}, @generic={0x63, 0x28, "24091fd8ae2516361614de5df8cf2d8b1c763de26a15f40d9c0fe9246f45da52f2f375d8238cee9f771b9d0dd5c223869d8e097fafc1e6492fc5c2a2f478573156f3090ee15f489b48130adae9dc7acbdab9c595f3d8314b16b867a4693cfec9fa"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1, 0x3, 0x3f, [@generic={0xc3, 0x23, "bf84b7c1bd826816c0714e864756169007e354b55488946de6e61789da138ab7ad9c4e7430e4d12fd35075adb8a5703a72875a9183b4e7c82de22a45a7317635d2f91d1fa1805254ec7e9d2a61db30cc83bc335a05148d2b0631109ee4d000d78bcb27cde70f940a784b006f6617402ba3b0675ef80120bfbfb33684754fbc59a1eb5cd09075d0633e4d697a1d3f498b0953b8d2ca5484c0700046c34a2e3060a47236e4f041112cee1b8dcd5194bc9531bd46b7d696359c7b38768458d44b5315"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x31, 0x86, 0x8}}, {{0x9, 0x5, 0x81, 0x14, 0x40, 0x30}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x4, 0x8, 0x9, [@generic={0x94, 0x5, "785b1946ef313c9e8cf64b36ba37abc74eb4445c4bee46300bda5a10ee5e0d2f5568bd9875c4b201cf2e0d4366323bff163021994a3dbc2fe6cf127327793093efaff5b730f73a5e2e7c4705ca6b9a910c59aa4f56e0382dbf91df19dc834b47468ffdddd76eabcd224e3a63c1bbb8d286c2a37fd84db39a59a14b34e13b7ea0641c1cb2c4986d5572b89410491352c4d917"}, @generic={0xcc, 0x0, "798ac4ef102d72d98b388d9e670c512f71d2b48b61a8376b8d14c8c2f02e7ed372552c8cb706e2310c34639a899f9970cacc31502fa5161346fa4829905f791e95cd78e0a30192e8c26c23c77de69968b15437bef6b934b91258a4e189f5e1aff861eee35acf5f0d2e472e2587a0424fb17837869a9a4babc42f1cd6c95848fd10db7c938cd1c8b3aaa26999e5e05c2d17236435247815bbcca3dcee7d46f4855144dcc6e8d76cad8771c2a44e3105ea121115baa49eae028c0dce9637834b26dccca7a8e0fa381e4e3f"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x80, 0x8, 0x0, [@generic={0xf1, 0xb, "f90d724d8f25c1839d941f8cc1ecac2794fbaca2db32b14f929f5c1792eadbf02229cb99bf4d0e1d418d164cc11d7de078393f4bfea005201d3d6828d4cb9f5825cbfa0be9da8461035af74f997e8b14f7b32dfcba3d967ddd48160e033bb8b4fc4ce66c46fb3b3d887e2e6678afc0d3d2057a29c7dcbc6872a8d265373bfd9d39e1994d7b994504a69264ab052fd946a039b88df899fb3d6444fde0e2e692736d223bbb2bea8a4d43491e1e0a7ce6f74fc9b65a81435b4accd7a99ab57207604206da3eff35f7d49b9bbe08d84cfecf43d2ba40f38a2b0190dd275ea553bec87322d81c280262df8cc287d2939bff"}, @generic={0x86, 0x17, "6e4952266625d3b502fd8da4876cda3d28f44260024d3ab43084ce81781da462f32a29e9e0fc1dea24abb5c1e140bb2950e95d78d82a916988d4a6499ef5ec8b465b8e856262c1d8f0c32bcc53a4ed0cc0249b561dbbbfdfa3be136c4c4223824d25e590cb87aad0a1222e1f9fd9211095c57030360c69b0620967f41617cd2501774ddd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xc0, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x32, 0xff, 0x3f, [@generic={0x81, 0x22, "ef049737b2d9541bbf831a9c24c08d2eec4ffc3f63896f4f49d59de0283b05571aa7ebe9b7bd919d18b0a1ef88d0f6d192c1f7560873eb69714525c667aeb88d3cc207ec409c42042e8a6166af5f7f4c27dc64a83573b14d69d49dfa7e0db4c018a15954ff2f80001974d71f2fef0118421a194a2db9b418fb8ffc4bdb2e84"}, @generic={0xe1, 0x7, "8471f78f06644c76ede3735ba2090609b2cd5251f716173dc9fe6953a6de2739169ab4b02c0e0dbec356c7a7ea6a868e34e1c1733ed3f8fe036f49160b0e92843a03a5ccd20be142e74ea8acbd51ec213d3d3335dddc3e79d573e8355a9753d035104475d8ca217dcd74b7880a4a1b843d0eef8a394b2c5d9e230ad27dc65f77a62323d0a9b132ad7dd939d16ee14d8ec72220c5207763bfc226c0ea98fe6b61bb4d1919709b682e8f831b37c8101563e55ce023c3c7a5f9f833724eb9dddb0687690fef39dd816899ac5eba149c7f6d48d8d629d0af0285e572fa9166a6c3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x1, 0x4b, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x66a}, @generic={0x63, 0x23, "d35d57ba5e111bb16e5b85be48f765f1948558be37fd52f49e8a4a0097490c99a62d0d03d108034428340fd8fa781575869b51d0cacd4a58bf9625b3498af3381a1b69694f4132cbb88125c0cf0df9306270ee892486dc50e0c696150b00954344"}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0x4, 0x3, 0x10, 0x3}, 0x7d, &(0x7f00000019c0)=ANY=[@ANYBLOB="050f7d000610100a06e10000000f000500000000000710021800071002001a08003f1002b54d82bf1755b131f4b5dd1fd07286fcde124826e5f1adf92fdd66ed530ce0a4644bc402c1b1a1bd0a4eac36880367875ccfc127e0faf893e1d72f1a14100400e76dba6065596f94b6ea7966ad35324607100212290600"], 0x9, [{0x63, &(0x7f0000000100)=@string={0x63, 0x3, "ac09437a21c957f8fd3ff59988048a88488be6333ab2a306c5f5ce729c54603d53b28deea49fcf8cac3dc1541962c05ae5e1ee9dae3b56d8f3bcf91293d8916eb277ba7cb8be4e9012eab14fff56312007396051d1607a28c7bfa330859ba495c2"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x445}}, {0xe5, &(0x7f0000001540)=@string={0xe5, 0x3, "385edef2c694e9b867b6fbcbb85aa263867242d9055a7ce0554afd1cac7435bac7b2f4461cf445d7513b8044bba49e8d8780d95168ec16d8de0f6ad0fa26c0c7352141aaa240a77c580b58765782e5dee5ec3744329a2f1f49755616b83922ec98964756cbbc87645942a1cccc7c16c7ca1a743370cc9ec9b89fbb5c9c082732255d3725870c0f2d518529222f42f4362366a8aebad16f16aade75b93a0e1929fec8c7dfed9f415e958b33a73a2f0aae1aaec4599541bb48a3293bc88ca245ae38326a6c3de9f6d17e58a0aba29d9121be4512ab58703290e74f2c0b611878be004ac7"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x82c}}, {0x82, &(0x7f0000001680)=@string={0x82, 0x3, "9e42f2514425b36a3e02af624da5d6bd8e84b48b523b9c6179ef424abfc6f981ec9c01c8700005931d71a2bb23b5d746f34b180e213d706a3cb1652cfd212f3b0b0957396092a47ebc99b616e579155eaf5782a186ce162f9566ea33d92ef7b75421f4683489d5975270abc104dcf441a5a7a2453d511c49ed00000000000000"}}, {0x5, &(0x7f0000000040)=@string={0x5, 0x3, "0626cc"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x444}}, {0xe3, &(0x7f0000001800)=@string={0xe3, 0x3, "97b28f76b2cf99c3895c3313c9c182ea89cec0cf0e8f77cf66cbf79daac37770e1b1690f3dbf4ce955ce5fcc08481d327e9c2c450246930c939f9f6405272b07cb740245c8c7f1fb213d58e5c6716ae2c40d6df7d07fdf5bb18ce8f07287cea5e97fbe35d6bbf0cccc801bd196ad745409847c10f974daf03ecb26467dda8cb1999e79b55368139ba42f2ad93a7638bf951b58545adfe8d922cd09a40a1aacda70894a3c4248f4c28d30047b4d92674f007003d65cb24f5b1c8cb1bc5e1d29699c5ddbb8b3895a6322ed1e51ba7b3b62815ba74a4c53518a32299e4811ccf48ca0"}}]}) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a40)={0x0, 0x21, 0x9c, {0x9c, 0xe, "f7a5952da1012564fa225362b61decf876f1f25ef220f2af224fe7af4f982042a014002a9cab90f6fee5f67ee399759b1496671a0844a0ae09fbece6d40bd770ce6de241a2f01bf5b5e053685d43a6b421b5679ab1f40582856a438b4eb7b6731c0d007099694eaa0c3a4b304f42985872aa47117eb40dfa81f95e7e030183d094a89f0d3d06595f17f2a7c65835c683681636e6fa85e8b4cb7a"}}, &(0x7f0000001b00)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "4ee028a1f8f9ab69935fa1db721ad3db24d69ad6941e2ab3c43a43e3d4e0370ad07392769b85d8c54eaf94fd8fb8823c7810ca1411176df7b15e266e846b834c2bb8e5866e5b55fd1c396a6106b5c0ca309cb942473830829d65a26e28b541a8389faec38382a53e78fd5baca831b260b52faa350cdf709ae9ee5655662c78a0d78245b2c16d8198c215ed47855a12109023527e0f685cf8794bcd44c2862cb7a71ab0c3ad1d4ed7ac41a99a50ebfb36"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x9, 0xf8, "d4603312", "d6855b5c"}}, &(0x7f0000001740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x9, 0x5, 0x6, 0x5f4, 0x800}}}, &(0x7f0000002080)={0x84, &(0x7f0000001c00)={0x20, 0xd, 0x94, "18836f8a40da6ec2d69883197d78bbe5be6a72de3a429f2b208fa657c0ac3b2b24469dadf0d07a0fe0c7f4a032fd60736dd06d2e4e0e3329709cb34f4934be9efa6b725e5e6abf82e487c5b7963878d8ccc46f32d15b972d55f0617f0994a219ef22b6308a922f131b0d85840249a9315601d309a4519739c0762eb5d04a12d4479e3ad4ed613a5a6d3fe8aabba0dc6469886b7e"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001d40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001d80)={0x20, 0x0, 0x4, {0x1e0, 0x2}}, &(0x7f0000001dc0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001e00)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001e40)={0x40, 0xb, 0x2, "f6b0"}, &(0x7f0000001e80)={0x40, 0xf, 0x2, 0xf31e}, &(0x7f0000001ec0)={0x40, 0x13, 0x6}, &(0x7f0000001f00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001f40)={0x40, 0x19, 0x2, "b73c"}, &(0x7f0000001f80)={0x40, 0x1a, 0x2, 0x5000}, &(0x7f0000001fc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000002000)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002040)={0x40, 0x21, 0x1, 0x5}}) 15:52:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2177.287229][ T19] usb 1-1: USB disconnect, device number 65 [ 2177.314964][T12730] usb 3-1: new high-speed USB device number 54 using dummy_hcd 15:52:08 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2177.469023][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2177.536379][T31060] FAULT_INJECTION: forcing a failure. [ 2177.536379][T31060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.579281][T31060] CPU: 1 PID: 31060 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0 [ 2177.588107][T31060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.598601][T31060] Call Trace: [ 2177.602613][T31060] dump_stack+0x107/0x163 [ 2177.608057][T31060] should_fail.cold+0x5/0xa [ 2177.613563][T31060] _copy_from_user+0x2c/0x180 [ 2177.619948][T31060] __copy_msghdr_from_user+0x91/0x4b0 [ 2177.625876][T31060] ? __ia32_sys_shutdown+0x70/0x70 [ 2177.632145][T31060] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2177.639944][T31060] sendmsg_copy_msghdr+0xa1/0x160 [ 2177.646076][T31060] ? do_recvmmsg+0x6c0/0x6c0 [ 2177.650735][T31060] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2177.656761][T31060] ? _parse_integer+0x132/0x180 [ 2177.661697][T31060] ___sys_sendmsg+0xc6/0x170 [ 2177.667062][T31060] ? sendmsg_copy_msghdr+0x160/0x160 [ 2177.673581][T31060] ? __fget_files+0x266/0x3d0 [ 2177.678941][T31060] ? lock_downgrade+0x6d0/0x6d0 [ 2177.683881][T31060] ? __fget_files+0x288/0x3d0 [ 2177.686671][T31058] bridge1671: port 1(syz_tun) entered disabled state [ 2177.688727][T31060] ? __fget_light+0xea/0x280 [ 2177.701004][T31060] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2177.707868][T31060] __sys_sendmsg+0xe5/0x1b0 [ 2177.713195][T31060] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2177.718763][T31060] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2177.726386][T31060] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2177.732699][T31060] ? fput+0x2a/0x50 [ 2177.737383][T31060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2177.744605][T31060] do_syscall_64+0x2d/0x70 [ 2177.750335][T31060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2177.758504][T31060] RIP: 0033:0x45e219 [ 2177.763622][T31060] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2177.783747][T31060] RSP: 002b:00007f2ff121cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2177.792663][T31060] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2177.801713][T31060] RDX: 0000000000000000 RSI: 0000000020005300 RDI: 0000000000000003 [ 2177.810085][T31060] RBP: 00007f2ff121cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2177.818440][T31060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2177.827314][T31060] R13: 00000000016afb5f R14: 00007f2ff121d9c0 R15: 000000000119bf8c [ 2177.907385][T12730] usb 3-1: Using ep0 maxpacket: 32 15:52:09 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2178.093711][T31058] bridge1672: port 1(syz_tun) entered blocking state [ 2178.095653][ T8655] usb 5-1: new high-speed USB device number 20 using dummy_hcd 15:52:09 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc7, 0xb6, 0x84, 0x20, 0x2040, 0x7300, 0x2abd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7e, 0x1a, 0xc5, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0xae, {0xae, 0x21, "fa36a065ae66019892d901bad896dab196f8d95a7973d957faee543e173bc075fb2cd48b0e201eb96eae9c8d890382013f610c1b2644eeb2a69aae40468c8b6515e1d1fef552d856f0a715d0e778ac01d3616626ae7d34bc90f0b8cf0f090620350eaaf094527d5ddd1fc18f53360e424c76fab997c1a471bf242d09ef5a70bb63cd5f26d4714787524377b0563ab187b1d5de23d327f995d06582437eca6896bf6355cc24289cc266debde7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x20, 0x8, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x8, 0x85, 0x1, 0x2}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x82, 0x1}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x7, 0xc6, "c904aef4", "f2b818bf"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0x1, 0x4, 0x40, 0x100, 0x7ff}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x11, 0xf8, "db68775e6e4b4fb8d6d4d147006715ef08d1f45994baa541aaa3f16c6225110f844cb55356dd0d5774b23a81931f94ae79189ee29b89fb1bac615e355dcf426244f11468f9c7988f072754a674a28bc8f2d489f41b54317f7503746abbb374bf44eedcc699a63d859789bb7b42494e68934a9d0bcfa1369ff17afa553a0ece1eb2bc90828add3b0753367ed4261b2c896ad7708d0a6931c11de0214d3f786f7ab5b595aa8537d6754493675608382d5124ca40dd285038975adb81a478a35663186a6763f31a692d51a4abcf268995932ebc1273afa4d63fb38dadc2263fc8433c996f31af59df3e2058ff23032ff9872b4183c800448a46"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x1e0, 0x80, [0x0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x600}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "31b3"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={[], 0x38}}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "7ec5"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) [ 2178.155049][T31058] bridge1672: port 1(syz_tun) entered disabled state [ 2178.166614][T12730] usb 3-1: device descriptor read/all, error -71 [ 2178.277088][ T19] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2178.293640][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2178.388140][T31081] FAULT_INJECTION: forcing a failure. [ 2178.388140][T31081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.399111][T31076] bridge1672: port 1(syz_tun) entered disabled state [ 2178.456841][ T8655] usb 5-1: Using ep0 maxpacket: 32 [ 2178.548730][T31081] CPU: 1 PID: 31081 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0 [ 2178.557969][T31081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.568350][T31081] Call Trace: [ 2178.571678][T31081] dump_stack+0x107/0x163 [ 2178.576054][T31081] should_fail.cold+0x5/0xa [ 2178.580611][T31081] _copy_from_user+0x2c/0x180 [ 2178.585339][T31081] iovec_from_user+0x242/0x3c0 [ 2178.590174][T31081] __import_iovec+0x65/0x500 [ 2178.595190][T31081] import_iovec+0x10c/0x150 [ 2178.599841][T31081] sendmsg_copy_msghdr+0x12d/0x160 [ 2178.605009][T31081] ? do_recvmmsg+0x6c0/0x6c0 [ 2178.610822][T31081] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2178.616856][T31081] ? _parse_integer+0x132/0x180 [ 2178.621911][T31081] ___sys_sendmsg+0xc6/0x170 [ 2178.627241][T31081] ? sendmsg_copy_msghdr+0x160/0x160 [ 2178.632719][T31081] ? __fget_files+0x266/0x3d0 [ 2178.638142][T31081] ? lock_downgrade+0x6d0/0x6d0 [ 2178.643609][T31081] ? __fget_files+0x288/0x3d0 [ 2178.648956][T31081] ? __fget_light+0xea/0x280 [ 2178.654342][T31081] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2178.660668][T31081] __sys_sendmsg+0xe5/0x1b0 [ 2178.666549][T31081] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2178.672104][T31081] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2178.678408][T31081] ? fput+0x2a/0x50 [ 2178.684722][T31081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.691955][T31081] do_syscall_64+0x2d/0x70 [ 2178.697148][T31081] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2178.703076][T31081] RIP: 0033:0x45e219 [ 2178.708383][T31081] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2178.729249][T31081] RSP: 002b:00007f2ff121cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2178.737823][T31081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 15:52:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2178.746032][T31081] RDX: 0000000000000000 RSI: 0000000020005300 RDI: 0000000000000003 [ 2178.754616][T31081] RBP: 00007f2ff121cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.762637][T31081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.772157][T31081] R13: 00000000016afb5f R14: 00007f2ff121d9c0 R15: 000000000119bf8c 15:52:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xa000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2178.835601][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 2178.865884][ T8655] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 2178.888977][ T8655] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2178.975108][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.981476][T31092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2179.048093][ T8655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.059765][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.059811][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2179.059871][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2179.059907][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.105821][ T19] usb 1-1: config 0 descriptor?? [ 2179.134625][T12730] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2179.254413][T31096] bridge1674: port 1(syz_tun) entered blocking state [ 2179.269914][T31096] bridge1674: port 1(syz_tun) entered disabled state 15:52:10 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2179.394787][T12730] usb 3-1: Using ep0 maxpacket: 32 15:52:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2179.416381][ T8655] usb 5-1: config 0 descriptor?? [ 2179.432319][T31092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2179.568298][T12730] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2179.575288][T12730] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2179.601118][T12730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.683687][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 2179.689854][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 2179.705843][T12730] usb 3-1: config 0 descriptor?? [ 2179.742576][ T8655] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2179.747912][ T19] usb 1-1: USB disconnect, device number 66 [ 2179.797086][T12730] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2179.818754][T12730] usb 3-1: selecting invalid altsetting 0 [ 2179.837023][ T4046] pvrusb2: Invalid read control endpoint [ 2179.848489][ T4046] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 2179.906243][ T4046] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2179.947410][ T4046] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2179.949649][T31057] udc-core: couldn't find an available UDC or it's busy [ 2180.002468][T31057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2180.034960][ T4046] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 2180.063945][ T4046] pvrusb2: Failure uploading firmware1 [ 2180.085516][ T4046] pvrusb2: Device initialization was not successful. [ 2180.152832][ T8655] usb 5-1: USB disconnect, device number 20 [ 2180.163711][ T8655] pvrusb2: Device being rendered inoperable 15:52:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:52:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xc000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2180.209188][ T4046] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2180.339910][T31135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2180.536985][T31141] bridge1674: port 1(syz_tun) entered disabled state [ 2180.629638][T31141] bridge1675: port 1(syz_tun) entered blocking state [ 2180.658275][T31141] bridge1675: port 1(syz_tun) entered disabled state [ 2180.767302][T31135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2180.788083][T28110] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2181.028639][T12799] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2181.093876][T28110] usb 1-1: Using ep0 maxpacket: 16 [ 2181.257641][T28110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.286408][T28110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.299993][T18931] usb 3-1: USB disconnect, device number 55 [ 2181.305607][T18931] pvrusb2: Device being rendered inoperable [ 2181.410121][T28110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2181.465010][T12799] usb 5-1: Using ep0 maxpacket: 32 [ 2181.482593][T28110] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2181.497697][T28110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.516154][T28110] usb 1-1: config 0 descriptor?? 15:52:12 executing program 4: syz_usb_connect(0x3, 0x3d3, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x75, 0x87, 0x7, 0x20, 0xf11, 0x1040, 0xe3bf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3c1, 0x1, 0x1, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x9b, 0x0, 0xf, 0xc5, 0xc2, 0xa, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0xff, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x70, 0x76}, @generic={0x1f, 0xb, "627b53e5b979b4c5b6d55b3e566956ffe265bb0d1a1cc4cd9c58e26aa0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x40, 0x2, 0x8}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0xc0, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x0, 0x7, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x20, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x85, 0xf0ce}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x7, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x1, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x800}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x7b, 0x35, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @generic={0x57, 0x8, "257b6f0d25d47133158e195f2261128dcab2bd1d88fc1c388c22445b5cd1d5aa16ed00ab97508322fd66beffe061c64de2e99a59d5255a7e0677a7ff46b023780c1add5a288054e99f448315345910249db0fe04c9"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x1, 0x7f, 0x4, [@generic={0x102, 0x1, "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"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xff, 0x6, 0x6, [@generic={0x41, 0x10, "1c32cd4a9bde80581ffbce3c5a42302c50968e7f354eb65e6afb9a3dd1cf36f8bfe13722fe618905ce5d74c094e2e30e7b7fc6a3721b7e59b71770b76a3adb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x14, 0x9, [@generic={0x3, 0x4, 'W'}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7, 0x9}]}}, {{0x9, 0x5, 0x8b, 0x4, 0x20, 0xff, 0x2, 0x7, [@generic={0x73, 0x5, "927820350a68509b56c8c0eda5100fd8db28098942a7017c0012647e52b7559077baaa38482ad581aa350a219b78b3714b4c97f7d05fbb3df551870a1e6a7c64094b04aef0f0bc87b601872f8e1420743ce09192f9053bc697cc30d114b6f57e3e190a65e6c18fa38a35c8d9d6e116d979"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x44}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0xe6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x0, 0x0, [@generic={0x45, 0xd, "7a0e944e5215100d558e49806e95cf4df3f52be4726964a3567baad4f7f8d4c0472a482d7458c762aa4de6bcace6e477c988eb6944fe794787c1b8664cafd8bb1cb677"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x3f, 0x66, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x17, 0x8}, @generic={0x67, 0x7, "e51b056364bd56d7ae003af109262ffcb1729bba0c2f8a70498001d453abd478dcf53c292a977080b943efc51b243734a96b90e526e8e9f310670db37b22685394edf2214bf61fe26171cb9e874c406231a37f60072f5420b520b06408bfa0ff1eb655c359"}]}}]}}]}}]}}, 0x0) 15:52:12 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xe000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000000ffffffffffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:12 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c3b6842040200001000000000904e805017e1ac500090501020002000000"], 0x0) [ 2181.708887][T12799] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2181.726297][T12799] usb 5-1: can't read configurations, error -71 [ 2181.789730][T31168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:13 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x2, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2182.039829][T12730] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2182.065180][T31176] bridge1675: port 1(syz_tun) entered disabled state [ 2182.137863][T28110] usbhid 1-1:0.0: can't add hid device: -71 [ 2182.144064][T28110] usbhid: probe of 1-1:0.0 failed with error -71 [ 2182.169926][T28110] usb 1-1: USB disconnect, device number 67 [ 2182.274923][T31176] bridge1676: port 1(syz_tun) entered blocking state [ 2182.306493][T12730] usb 3-1: Using ep0 maxpacket: 32 [ 2182.343290][T31176] bridge1676: port 1(syz_tun) entered disabled state [ 2182.424706][T31168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2182.474429][T12730] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2182.495526][T12730] usb 3-1: can't read configurations, error -61 [ 2182.505678][T31176] bridge1676: port 1(syz_tun) entered disabled state 15:52:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) 15:52:13 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x3, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2182.681365][T12799] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2182.690311][T12730] usb 3-1: new high-speed USB device number 57 using dummy_hcd 15:52:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x10000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2182.926834][T31210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2183.055093][T12799] usb 5-1: Using ep0 maxpacket: 32 [ 2183.066650][T12730] usb 3-1: Using ep0 maxpacket: 32 [ 2183.085907][T31217] bridge1678: port 1(syz_tun) entered blocking state [ 2183.157294][T31217] bridge1678: port 1(syz_tun) entered disabled state [ 2183.199781][T12799] usb 5-1: config 1 has an invalid interface number: 155 but max is 0 [ 2183.217553][T12799] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2183.251397][T18931] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2183.299511][T12799] usb 5-1: config 1 has an invalid interface number: 174 but max is 0 [ 2183.325676][T12799] usb 5-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 2183.355082][T31210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2183.355453][T12799] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 2183.387574][T12799] usb 5-1: config 1 has no interface number 0 [ 2183.398512][T12799] usb 5-1: config 1 has no interface number 1 [ 2183.409841][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2183.445609][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0x5 has an invalid bInterval 192, changing to 11 [ 2183.536229][T12799] usb 5-1: config 1 interface 155 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2183.560796][T12730] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2183.568456][T12730] usb 3-1: can't read configurations, error -61 [ 2183.578586][T12799] usb 5-1: config 1 interface 155 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2183.631870][T12730] usb usb3-port1: attempt power cycle [ 2183.639579][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2183.689151][T18931] usb 1-1: Using ep0 maxpacket: 16 [ 2183.708707][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2183.729098][T12799] usb 5-1: config 1 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2183.768017][T12799] usb 5-1: config 1 interface 155 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2183.835790][T12799] usb 5-1: config 1 interface 155 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 2183.867841][T12799] usb 5-1: too many endpoints for config 1 interface 174 altsetting 240: 240, using maximum allowed: 30 [ 2183.886294][T18931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2183.886345][T18931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2183.886380][T18931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2183.886436][T18931] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2183.886475][T18931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.888807][T18931] usb 1-1: config 0 descriptor?? [ 2183.934200][T12799] usb 5-1: config 1 interface 174 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 2184.064733][T12799] usb 5-1: config 1 interface 174 has no altsetting 0 [ 2184.129603][T12799] usb 5-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=e3.bf [ 2184.159152][T12799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.353995][T12730] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2184.455454][T12730] usb 3-1: Using ep0 maxpacket: 32 [ 2184.524684][T18931] usbhid 1-1:0.0: can't add hid device: -71 [ 2184.534944][T18931] usbhid: probe of 1-1:0.0 failed with error -71 [ 2184.614288][T18931] usb 1-1: USB disconnect, device number 68 [ 2184.624758][T12730] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2184.631247][T12799] usb 5-1: string descriptor 0 read error: -71 [ 2184.644417][T12730] usb 3-1: can't read configurations, error -61 [ 2184.664413][T12799] ldusb 5-1:1.155: Interrupt in endpoint not found [ 2184.720237][T12799] ldusb 5-1:1.174: Interrupt in endpoint not found [ 2184.862986][T12799] usb 5-1: USB disconnect, device number 22 [ 2184.864069][T12730] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2185.134342][T12730] usb 3-1: device not accepting address 59, error -71 [ 2185.145642][T12730] usb usb3-port1: unable to enumerate USB device [ 2185.588395][T12799] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2185.858738][T12799] usb 5-1: Using ep0 maxpacket: 32 [ 2186.008246][T12799] usb 5-1: config 1 has an invalid interface number: 155 but max is 0 [ 2186.025470][T12799] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2186.059779][T12799] usb 5-1: config 1 has an invalid interface number: 174 but max is 0 [ 2186.077353][T12799] usb 5-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 2186.097090][T12799] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 2186.115585][T12799] usb 5-1: config 1 has no interface number 0 [ 2186.126154][T12799] usb 5-1: config 1 has no interface number 1 [ 2186.139355][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 15:52:17 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c78940014ca3aa37542a0000000109021200010000000009043d00007e1ac500"], 0x0) 15:52:17 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x4, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x60000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:17 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc7, 0xb6, 0x84, 0x20, 0x2040, 0x7300, 0x2abd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7e, 0x1a, 0xc5, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x4, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xc6, 0x13, 0xb8, 0x40, 0x6cd, 0x107, 0x786b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x9, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x91, 0x2, 0x1, 0x44, 0x14, 0x49, 0x7, [], [{{0x9, 0x5, 0xc, 0xc, 0x428, 0x1, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x401}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x0, 0x2, 0xff, 0xa9}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xfe, 0x3, 0x1}]}, 0x3, [{0xc1, &(0x7f00000000c0)=@string={0xc1, 0x3, "3df66344130e5c9fe2e4fa6abe608cc50770ee15dcbf3055ec7938b1ca0fb20a4f4c031bca3d6ee84a0f9abaa008c264fd321fa445310693a26c26a87cd765a4e0a8626176115c958b662b74eeb94bc44ada12472dce8c590e1666bc56f17e0b253f428124c2d86908a3f4cb7bb588419b88f0545d17b257bf5a8efa27cd7f0097b045622d61642f3782b5f67182aba3346e572d728fe8cec57e9b756b61c00a58f08332ab00276bb4309ddd0e1d2f10a2247428767797d89113108cefe7b3"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x183b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x802}}]}) syz_usb_connect$uac1(0x6, 0xcd, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x40, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x96, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x3, "6b2206"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x8, 0x1, "18423ea6"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x1f, "7d3e1cc5a1"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x5, 0x20, 0x0, 0x20, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x3f}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xd577, 0xe837, 0x1, 'c'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x600, 0x40, 0x2, "474d014456"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf8, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x1f, 0x9, "88", "45cc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0xd8, 0x7c, {0x7, 0x25, 0x1, 0x2, 0x4, 0x1f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x40, 0x80, {0x7, 0x25, 0x1, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x1f, 0xc0, 0xee, 0x40, 0x4}, 0x2b, &(0x7f00000002c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x0, 0xff, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d8a74689ab5f8d64ad16689511c8dcd2"}]}, 0x9, [{0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "e4a7005412b43b096fe28c58527ef976ff0e71d6dd2e226944d8354275cfc4576fd6f0560b4c58c445511edb5724bc6cd1b4401840ac15cf2d659428c0cf1db5dd0c91ef9a51c350"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0xf2, &(0x7f0000000500)=@string={0xf2, 0x3, "94ba1e162279609d81b824709a62b035b7c20ed7873c4b89d843da8837eac3341cc61d782dfe854b3481beea32632426c3beda6c599b9987beb990746026977f4d8c47b96837f2d3173247b7b3f0496e0efa6cd8a69cb340ed0e1e2281d990e26187e34751eb95bb1cc47ba691b3a7f48a78c590f168536dff4e4b1fe196ff1c85263a8956e225087898902a38ee9cd1452107c5ada38b5ddf9ca114206748d016642a4b5d65b09886f5b307883c95f66bfab092e288c04b38092c6084df4edcb0fd205a0d1d2954958c9e770f959339a2c46bc230d72862e64eeba0de62f44b0d923a198e7178aaee3bf1674706a1ef"}}, {0x78, &(0x7f0000000600)=@string={0x78, 0x3, "a26b480db33d8e8573b0fa83523ab802e8cac88e29884d699c1d87e904cca294c9c1ae9fc60ffc9645568f21ab561ca6f021312bea0b77ce20d5915149c7855f26b1dab8922c4206402013775fa4632e8075df5371c48958be93da25ccd52f06f52cbb10d4e2802ca39d655c4a642664730301106815"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x415}}, {0xe8, &(0x7f0000000700)=@string={0xe8, 0x3, "51e92dc6df37c0f91b5916073d8303100811afdb93969754eb3e460c081f2c9b6b710441cc24678a54e6459b9cb26438ddc51822f0ce3e094b0702725393d0e58dd608b365e90f4d7a2d81568e46cb29a64b3ad5dc9d14164befcd9e67a7824e6d56d3cbaa04b88dfaa96bb4696fc00452a0cfdb373c2bfe722b4a1ff077e650f5abb4b8579dae7756a3dc648278bdc6722c73050d388d4328e575231b0c23fe4c780ef365182735e66cff03246f8a666c6d35ac9a6d031a62f70ffc8850a677498260edd1fd5e97b3c4bbd99b87b0e12012d20faec923f4a020452e333d54e0256091279444"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x4ff}}, {0x3f, &(0x7f0000000840)=@string={0x3f, 0x3, "dcd954286a22eb62affcdc45ebf04c45d36177b06d1c65f2ac4b356d2e8a98647510f084baa41994b4e0d5c1cdf763379f90fd68da50008cde125d3e4f"}}]}) 15:52:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2186.218457][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0x5 has an invalid bInterval 192, changing to 11 [ 2186.352448][T12799] usb 5-1: config 1 interface 155 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2186.439929][T31259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2186.487068][T12799] usb 5-1: config 1 interface 155 altsetting 0 has a duplicate endpoint with address 0x5, skipping 15:52:17 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x5, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2186.587417][T12730] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2186.599666][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2186.633981][T18931] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2186.682281][T12799] usb 5-1: config 1 interface 155 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2186.728922][T12799] usb 5-1: config 1 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2186.752522][T31273] bridge1678: port 1(syz_tun) entered disabled state 15:52:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2186.807147][T12799] usb 5-1: config 1 interface 155 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2186.837986][T12799] usb 5-1: config 1 interface 155 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 2186.848901][T12730] usb 3-1: Using ep0 maxpacket: 32 [ 2186.874762][T18931] usb 1-1: Using ep0 maxpacket: 16 [ 2186.889862][T12799] usb 5-1: too many endpoints for config 1 interface 174 altsetting 240: 240, using maximum allowed: 30 [ 2186.947614][T12799] usb 5-1: config 1 interface 174 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 2186.977676][T12730] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2186.977733][T12730] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2186.977770][T12730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.985462][T12730] usb 3-1: config 0 descriptor?? [ 2187.019160][T18931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.045394][T18931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.060016][T18931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2187.069434][T12799] usb 5-1: config 1 interface 174 has no altsetting 0 [ 2187.088791][T18931] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2187.096308][T12799] usb 5-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=e3.bf [ 2187.108298][T12730] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2187.125133][T12730] usb 3-1: selecting invalid altsetting 0 [ 2187.148680][ T4046] pvrusb2: Invalid read control endpoint [ 2187.161809][ T4046] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 2187.169573][T18931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.207339][T18931] usb 1-1: config 0 descriptor?? [ 2187.218600][ T4046] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2187.268792][T12799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.298595][ T4046] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2187.386214][T12730] usb 3-1: USB disconnect, device number 60 [ 2187.396125][ T4046] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 2187.437985][ T4046] pvrusb2: Failure uploading firmware1 [ 2187.448503][T12799] usb 5-1: can't set config #1, error -71 [ 2187.461687][T12799] usb 5-1: USB disconnect, device number 23 [ 2187.517193][T31273] bridge1679: port 1(syz_tun) entered blocking state [ 2187.525570][ T4046] pvrusb2: Device initialization was not successful. [ 2187.525585][ T4046] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2187.525682][T12730] pvrusb2: Device being rendered inoperable [ 2187.593988][T31273] bridge1679: port 1(syz_tun) entered disabled state [ 2187.784603][T18931] usbhid 1-1:0.0: can't add hid device: -71 [ 2187.794940][T18931] usbhid: probe of 1-1:0.0 failed with error -71 [ 2187.805800][T31259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2187.918278][T12799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2187.919219][T18931] usb 1-1: USB disconnect, device number 69 15:52:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x65580000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:19 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x6, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2188.148333][T12799] usb 5-1: device descriptor read/64, error 18 [ 2188.238451][ T8655] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2188.289525][T31319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2188.470127][T12799] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2188.667066][T31322] bridge1679: port 1(syz_tun) entered disabled state [ 2188.699989][ T8655] usb 3-1: Using ep0 maxpacket: 32 [ 2188.719573][T31322] bridge1680: port 1(syz_tun) entered blocking state [ 2188.738712][T12799] usb 5-1: device descriptor read/64, error 18 [ 2188.774934][T31322] bridge1680: port 1(syz_tun) entered disabled state [ 2188.838036][ T8655] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2188.859443][ T8655] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2188.869433][T31319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2188.887135][ T5] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2188.917392][T12799] usb usb5-port1: attempt power cycle [ 2188.974868][ T8655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.067630][ T8655] usb 3-1: config 0 descriptor?? [ 2189.172965][ T8655] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2189.197196][ T8655] usb 3-1: selecting invalid altsetting 0 [ 2189.215751][ T4046] pvrusb2: Invalid read control endpoint [ 2189.223539][ T4046] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 2189.238200][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 2189.270712][ T4046] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2189.383179][ T4046] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2189.390860][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2189.450122][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2189.459690][T18931] usb 3-1: USB disconnect, device number 61 [ 2189.515720][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 15:52:20 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7ec00ef374a1545e6b68420401ed0e0cb7a7b18f43e889c200073bd2a0000000109021200010000000009040000007e1ac500"], 0x0) syz_usb_connect$uac1(0x4, 0xc6, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x5, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x93}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x5, 0x80, "8b"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0xd2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x3, 0x3, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x1, "e7"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x9}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x5, 0x3f, 'o'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2f, 0xbd, 0x5}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x6, 0xa, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0xd0, 0x1, "f8", "2817"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2c, 0x3, 0x5, 0x81, "254aa8", "9a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x1, 0xff, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x9, 0x9, {0x7, 0x25, 0x1, 0x80, 0x3f}}}}}}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x6, 0x80, 0x9, 0x10, 0xb3}, 0x49, &(0x7f0000000d00)={0x5, 0xf, 0x49, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7c, "862ad4b5339ed184c3840c993db76fd8"}, @ssp_cap={0x10, 0x10, 0xa, 0x82, 0x1, 0x81, 0xf00, 0x8, [0xff0030]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x1, 0x39, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xa4, 0x0, 0x1, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x58, 0x81}]}, 0x9, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0xc0a}}, {0x78, &(0x7f0000000dc0)=@string={0x78, 0x3, "2fdc14eb2579092fb6898ce2caff95bbd18ab2bd3afa5ca790e22a93355eaf9930cc80964c37d60ec905ee39a666d66e9d9f178f125f90ed1c634081c465025beb436c11f4cdf055823126e2d7bc76fa50d16d83a7eb5845b05693e6a048abe97f1d198637327f6f50c423bea0d54f3d8741a221a22b"}}, {0x33, &(0x7f0000000e40)=@string={0x33, 0x3, "b35ed595f7bd0932aaedddb97364397beea5181146a58a4e2eaa5a3481849709175e8f4ee4f2d058b2c029d1d1e6bca9ff"}}, {0x95, &(0x7f0000000e80)=@string={0x95, 0x3, "e0a9dc7e8751bbecad0ff0241358c3ef4d2dbbe207243ceab425e3235d18b92dc5b27ffd6963d1d69105bf1ec4bdb26daa37583528376d70df0bb1a5c3509418239feaf106af19cfe5201fed0dc4b8eaf2d451cea6cd71140a8feb361028c8c64af7ed741e6edd0ddea0fda5134646a44d08cd500fba83d459bc6f76201917b441141cfd71817ee34626891f4b1aa57956b4b7"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x81d}}, {0x21, &(0x7f0000000f80)=@string={0x21, 0x3, "d21033f57cd6780c859f52230dd3255b78bc5d740c439c813b3a0ca610d739"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x445}}, {0xf7, &(0x7f0000001000)=@string={0xf7, 0x3, "7bdc7b507c1ab17288736c4c12277ae4f61831d29167a4de0b45c49b982b5d77d4fd143880e007335c07afe49ec609962dc18d941d1ad625992be48535b0fba59cf047d000616e86d01d604c5729cd0635beeb0af985c21bca734e110f60bb2227c5cecfbe7742de0db703c0f14bd6f3c362e0e879f3e46a16a283bd743eb5200c0be4c52f7468bf4be7db14d9e015a69db919b642ed2e52fc5425df4a6d63c19005f3ef89b675f20a8e28b11eb46ef5b5b7449e30bb175a9e1f6d051d00521e424316668e8f0939ea794b5852e7876598c98f3b6e44437f09d100a3a91a4a249e16a833d2dfb9ae251e1af6e0a7c20e2b35ee0d68"}}, {0xb5, &(0x7f0000001100)=@string={0xb5, 0x3, "af069f43111e659fdc6f86d35e8d4c81e6bdcef4763845b483e127eab8508a1786cbdc0043de2578dc96d4ed52e84b1d3a928ceeae8f9eb7d4d0af7b31d9a1dfae9a3ce376602a1461d5400699f43f1f621604a400c0c95a901d203ee8b028f1bf8ce3debeed62e81dc09ff143cc4d75602ccb82c4f49d156be6e1051dcc2d3c625df473cf6efcdbc070365de5b5c3c862ac8f452572c90b8782afa8ab48692766626595ccc2b68dde2c0e06dd7b7fb7362d04"}}]}) syz_usb_connect(0x4, 0x9a4, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x86, 0xa9, 0x4f, 0xff, 0x154b, 0xf00d, 0x4d1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x992, 0x3, 0x3, 0x2, 0x20, 0x3, [{{0x9, 0x4, 0x60, 0x9a, 0x4, 0x94, 0x94, 0xed, 0x80, [], [{{0x9, 0x5, 0x80, 0x5, 0x20, 0x0, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xf9, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x40, 0x7, 0x21}}]}}, {{0x9, 0x4, 0x61, 0xfb, 0x10, 0xdb, 0xe2, 0x66, 0x6, [@generic={0x7c, 0x1, "e492933c2584088dd4fa4c375ada67f114fd9d2829fe83c225d24b867f40a3c75001a7d512d4be00bc721bff3aab860fba44adb3bf28f4d11313ea4273fd76c2d39c3001e26f38dbfaa45eb70f4eaebf4551b55bb5780438e8b0ec868d94a01b26f326f11432e381ab40a73e67eee1934917e877443c8f47cf85"}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "078491706da4"}, {0x5, 0x24, 0x0, 0xc0}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x3f, 0x5, 0x2b}, [@acm={0x4, 0x24, 0x2, 0xe}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm_detail={0x7a, 0x24, 0x13, 0x0, "c18f9bd0e327e7f1e366ae60d47c06f268ffe723323d5e3bfdbfe1f6385b8bb3f26bc67eeb4470bd184f33ec96199cf62b672a0d2fd97c3a88a386d70c4e34a90c70ec575647c144679284e97928d3947f7c69071a1475b426e4799d1d568f9e76f0a5303d3ee17ea0580a5e1bee71f69b54a0f07798"}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x9, 0x47, 0x3f}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x80, 0xa0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x22f0e56ba587ec22, 0x80, 0xf4b}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x12, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xa5, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x46, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x69d}]}}, {{0x9, 0x5, 0xd, 0x7, 0x629, 0xae, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x3, 0x80}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x81, 0x0, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x5e, 0x9, 0x7}}, {{0x9, 0x5, 0x2, 0x1c, 0x400, 0x68, 0x3, 0x7}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x80, 0x0, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xd036}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x2, 0x81, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x9, 0x4}, @generic={0x7a, 0x8, "098a1b602f59d4d78e49a4402c005d8f8fc2d0169d814aa0866260e6c39e35f447990e9519a8f1e9a5d6af8ff32e8c6198358c70ae6f784dde9135798b8191ffecf8802534b83dc8d802f1ae1ee9fbe41ca7f8de829d893c38f4ccb5f72d5e6a48638c6a519d7945bf08006b840ba315ea525dd95b54024e"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x81, 0xd3, 0x3f}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x31, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x200}, @generic={0xca, 0x30, "09d0c40c0f14684af28ac37f5b23aff3cea1eb554efbe3b27098e822e4656d5513a77ead09f2eb8ad45989a899df26d87fb73a5f556af2ff35a19e88e8607815fdd0aaf1b795367c7b6fef651d391125bd654c7949eb54ea6a38c2e410fd5676c486d5151a5d02fdf4ec63f3aa8f42b104e4ddd4fd832c8fbea31dd4ee4190afcb1395a4b3b4124cf84be2126fbb76d19226ddd12e247b7687303452a3f50dc70183ec777e6d3cc4e3e43a52a84c230ffeb8743d9eaf300ddb0c681bc43d54e67dfdc99f642be80b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x7, 0x2}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x2, 0x3f, 0x0, [@generic={0xbb, 0x21, "4b326a9d62cfcf97b1d1d9cce07ff45ef3a191b269429a38a6a46ae973cadf7b9c3c9e90e910497908f919c47ea10a0a8a6c8df43b8b3c810b7f48d1a703c21cec51e39afdf89dfca3123434115148b8e75c170c311c2e9974a2a48c3d3c3cc28645fb80db4c763c37517bbd561de323e71e5e244637cb38d9e6f131e53a638d45fda65c24687474a3f0968eb2cb98fb4e21e211f4d3fb1592256186556932c75908e7369faca0818642418d047e766a66bcea189c771b804f"}, @generic={0x2e, 0x21, "29ec5da9f157fd31219c742b280aad8e7576f7cac2d275bef6133de2e7fd3871d11d968def746d70d66d01fc"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x3, 0x0, 0x7f}}]}}, {{0x9, 0x4, 0x24, 0x6, 0xd, 0xe9, 0xa7, 0x49, 0x1, [], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x7, 0x4, 0x80}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x22, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x73, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x6, 0x7, [@generic={0xff, 0x22, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd5, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x7f, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}, @generic={0x42, 0xd, "3a4bf171f172a60cd6d8428ce8fdb1d92a3ddc99b52b054f106ea8d7735a41d866809730a1fe89b16bc476fe5ed8efe5314d05e94ff69ff651ad0f73759a4f82"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x1bf, 0x9, 0x8a, 0x1f, [@generic={0x40, 0x570e89ff029a11f9, "8676d0807c69846bf9678239d9710daf0f10d5b5dcc8163c3cd26ee4b5fc83f5769564f4670b2154bc79e2decc7d5f74800da42e029119ed8a20ab7e9842"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x22, 0x92ec}]}}, {{0x9, 0x5, 0x8, 0x1, 0x620, 0x2, 0x3, 0x3, [@generic={0xe3, 0xf, "0ead4dcf9cca9039e24f16197aabb9b5ea3556ff3b93967899820c525e8051f4cead11c839128a60f955d711afc8892ac1404b51a97fa9b78d8da07db4684d8cf753f596fdfc29a5a7aa65148f9dcdb1730cf678fce6593fc8cc5037d6029b6028620583f422274dfa8af5402eeb3147dc22699efea13170d72280b05107ec512fe808e1fc00d48fad9b3a76558eeb1b13a1beec4b446ca6e3cd5ee9c087f7f8e7bf28bffa5e688619b6d5bd5c165718e2bcc57c19c70684d26c42c3a971dff283704f7aaf159e734d062e728c27fa8f6775c5c39e812789f18a8728f20d643a30"}]}}, {{0x9, 0x5, 0xc, 0x11, 0x20, 0x80, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6, 0x18, 0x40, 0x2, 0x20, 0x0, [@generic={0x9f, 0x38, "22657f9c84d3bf9ccbb0c90210013f77fade8d0ad20491cf246de43618946cc8777e21f3506a66a76e35fb6f958254f23a7fdea7d84eaee30322368af9f136ede0f26bbc9a8dd706de3bc7438b99ee01f3303502a0f63b016d49d8483eaaf1289950d7e5781845cf8b07f2b99429ee4876ef6ab7fde8ef1080fc153f484204c2a6a3b197318237240de7011d8ce6756f5c856d302ec2063e3208273df3"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x7f, 0x9, 0x0, [@generic={0xb6, 0xc, "714a6fe4b084772c049ecf55157c55120ac1750c66600e4f99c7bd4a2cdfc93cae81b5d8f9175f6e495d40c856badd53bdb5078a352d067cb0f80ec25ab57596a618229c42a0fa66f97ed2f47864ba2f1b4b581fd803278361f60e250ba7c71c5d648a25fb7e93ffa2be2e09c2cfca72fa21f3350fb2afd8e30f4c452f15dca301f4568d6836c527c6a2aafad66a68a3f3cda0d22f729e4527fa1763f9b32925c843358b628906346ff1ce4a02efd687aa891cf1"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x9, 0x7f, 0x40, [@generic={0xd3, 0x24, "b1fa3cfa6cd87784903fcf800c62608ed3dd551c3cb5d4621c527520d2b4f3de44e07460a27873532733b6b34d2bd03ea8e6efbe931f17e40cdd29cfe3b2e535d38f7c4b1bab1107ba224a5a67516d61c27199c434ad77cd2e42c19fc0c31c82dfc6a14c640ef11f94da2e0c3f9f0e543917e2a0f7367228d9f71c321ffb2abbe34f1fdd0d23768e1086c40f7973ef3b628f98509b3283a0859ff5f5f103862eb69868a27098a29aa138694c6cf54040ed52f752ed7b4ec71572b49d0f25aab566b47cbfe2466c5c04213e0ad0212a8bb3"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0xf2, 0x40, 0x1c}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x40, 0x1f, 0x5, 0xff, 0xc9}, 0xd6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050fd60005231004b0702d0c7a49f52ae33c648a7bced90fac06d8a81ac690ff3c567f43742ccf921c100a182401000000000100117e000000c000000fc000003000ff00071002180601001410040662e18707049c5431d662b8e3b2ebc9ab771004feae1c147438c51e58537637c959f58357a9e8cb418dadaea2ff2419f2d484732114bd5778c8053baad2faad3fed10150e0b90e41e2805dc537f131de368d1ce47beae898fbf742f0af1c873f4be2de93c572f219957cc286cb5071723c9cef333ef71076ab0e8039b18c08da695bc2816ea1f9d"], 0x1, [{0x3a, &(0x7f0000000b40)=@string={0x3a, 0x3, "73402080b2338434ba1b27ee9eee51bb3de00546176855740b84c2374c36557955bab6f9a519620a0c5fa2726944ab77f54213d818a46e32"}}]}) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x5}, 0x2) syz_usb_connect$cdc_ecm(0x5, 0x69, &(0x7f0000001280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x65, 0x0, 0x8e, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x9b, {{0x7, 0x24, 0x6, 0x0, 0x0, 'lo'}, {0x5, 0x24, 0x0, 0x7695}, {0xd, 0x24, 0xf, 0x1, 0x1f, 0x7ff, 0x7, 0x40}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0xc8, 0x80}, @obex={0x5, 0x24, 0x15, 0x8}, @obex={0x5, 0x24, 0x15, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x220, 0x81, 0x4, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe8, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0xfa, 0x7}}}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x110, 0x40, 0x40, 0x2, 0x40, 0x9}, 0xad, &(0x7f0000001340)={0x5, 0xf, 0xad, 0x1, [@generic={0xa8, 0x10, 0x0, "1aeff4011f86f03e592ff3858e2b09af729cd9328c65c6e5183f2879a17ead7421a70f6601d7c28094ad753b9041feb194b34b21a64f1617fb950176dd28687e7f23583d41c96f351f82ff62be8ff2feaf27a33adac2cf820b81dae5d8294af5d11d07cfcf0592a890d38a102b74e70c088b74dae6867f34c4ad29d9734b7ac9c7859052ddb167eed0193a993474ff96f95a03fcf7092fcc55b28bbf0de9dde7c2c6c53a29"}]}, 0x2, [{0x5f, &(0x7f0000001400)=@string={0x5f, 0x3, "b713ae00c542851a3617d24ca815d4a50a20a115b9eea6ede3bdc899b3ca4ceb5e3548208f10f45f119196918a9251632681840ca4555f6ee2e038301752002ca211e80aef342799953c315f21c6d092f7d9775fe9b615ffe2c3b8bbcc"}}, {0xf1, &(0x7f0000001480)=@string={0xf1, 0x3, "5fde1390d99a52440ea9182a50c5ef5d3d883830fe03af898b7b96cf5caebcfc4f774e170cb9a4e9a0a3722c50f86e2621e4b661619c68db5c6a431b7a6be1f4d365382b4a5777ad2b990c1e458445b849eb63061ad88b3e76da8f0fb1ba71a5aa551dbbf5b797b2a9545fe4c577a1f877eadd16ccef5f3856069f7c3b6e8ba33c4fc2575f91353c5b6302a0bcf8bacf002df1062cc25c0bcfd5d8fcd109f72e46ee2ff41e365fc5b18bf94b87e3b8daa773dd7bbd0e77b55418dee306030d00168b25be190bf08a55a56af1997224a88d91b3dac38442c1b82e609b3ecf7cfef6daef2695f25c03e18d9e61af2a74"}}]}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) close(r0) [ 2189.590153][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2189.628581][ T4046] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 2189.634617][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.667389][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2189.684014][ T4046] pvrusb2: Failure uploading firmware1 15:52:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x81000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:20 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x7, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:20 executing program 2: syz_usb_connect(0x6, 0xe4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0xc, 0x54, 0x86, 0x40, 0x45e, 0x412, 0xa125, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xd2, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x63, 0x4, 0x1, 0x2d, 0x39, 0x63, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc3, 0x4, 0x2, 0x40, "", 'AG'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x82, 0x3, 0x41, 0x8f, "8bc10f7d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf6, 0x2, 0xee, 0x8, "06b8493aa296a4fc0b"}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'X'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0xff, 0x24}, [@dmm={0x7, 0x24, 0x14, 0xff, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x20, 0xc7}, @obex={0x5, 0x24, 0x15, 0x200}, @mdlm_detail={0x51, 0x24, 0x13, 0x7f, "5a39d8808de096e5c11643de8a2ef1a1b23208f28967ac5cb5705dd50179c3385612146109983bf07f6ad3fabed6fa92751ecaad9933a2ca0539f8cdd3168390414a9f8962c8d5198eef2cab0b"}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x80}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0xc29, &(0x7f00000014c0)={{0x12, 0x1, 0x300, 0x66, 0xaa, 0xf0, 0x10, 0x8ca, 0x2016, 0xe7d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc17, 0x3, 0x1f, 0xb9, 0x40, 0x6, [{{0x9, 0x4, 0x47, 0x8, 0x7, 0x59, 0xca, 0xe9, 0x8, [], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x87, 0x7f, 0x6, [@generic={0x3d, 0x21, "eb94c7a77c75c181a2641ea90cfd3353662137acabbdca4c4d412e2544c300fe7a9faceeacdefd0422a209cf1269484e658499cde3bc6a9cd5a271"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x3, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x44, 0xff, 0x1}, @generic={0xa1, 0x9, "5effd0f29a25b5e264b28103e2293480ccd518f01c7f8e6ef6a9d830990bfde4a9505964be33e8651b4d2353a2fc45723846f3171bc73fc1468800d264f47355f988cb35808f3b20bac5c086dcc968f284c99b724388a8065bf1cc822024cfd452a0ee2ee25929a2ef3ef227de4edc53a5006cd5c39979822bde80d31478829fac097e521f5c1e18d54cccd742db8fd6761d29c9826444e16eb06ca557c109"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x6, 0xa9, 0x20}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x0, 0x1f, 0xa7}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0xa1, 0x20, 0xfa, [@generic={0xb1, 0x24, "741149f5246f364eaa1f6250b8afb4125f87339ea1169353a20549347e9f2cad9d4e8e35dac47f7b91dd40efed73958a8b070e93a430b26aaa3e4694882f7b59195851517f2ae3479195b08941be0872fb6068714df61100c1967f27c57803dae7837dc7c63c2c8bb31f63750dc986df086e853c562a7407e5acb726e101e6dca91266e83bab6585f3a98cdb59a003b7fab6268dc226981322467c3b2c6e565bcc53720ca7aefec730752ffa7cdb20"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x101}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x0, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x608, 0xa7, 0xe, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x5d, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0x59, 0x9, 0x9, 0xff, 0x5d, 0x81, 0x36, [], [{{0x9, 0x5, 0x4, 0x3, 0x200, 0x80, 0x7, 0x36, [@generic={0xd8, 0x11, "0a818e7bab6f8d86ef72534bdb2916a933ab6bcbaf8f70681e0074f6e72889e6af0d07d93d353330bb7339c8fc1365c43ed77f8f8046ef338666cf2541885f23deed7742e0fa4fedf513ce589d6c19125af80691bda92322c245f2178a82cb41015eeaef3442d347bfa5346d13a30907d1230c66ad4e958f0c35ea3395980f76b01198ae4e529715fe5724e3a2fe55aa9d2265426d4cf313bb3dc14b6a87c0365b7a91b0414d3f1ecadef4bbf87092a31e47fa0e5a256e31dbfc795ca11bead9055d753b4bdff45f42b5a1e438909fb1c4850c68abb0"}, @generic={0xcd, 0xe, "6fd39da336ebb824626f29ca7927b1ad5239c4f427f5235f2cd4d39c7c731521b8d010a97d2bb3866d6e2f3a1394acc26ac02a98b669402beb1e632f6141bf70b3a2b1423e0ffb61f91ba76595fd256382a23e005f8604217dc4c56cfd7a8604856124a649cc869246b1ca058d949e446247a65cb43d7f0d85030d5989dc21234c2281e0345cbc32b008ce7a6cd419705e75536846269a99c8c6f14b818d0d175a04bdf7b1ce8d4662b8d6897017a1ecf4dbc9231e405d4c1ac88a2d52a1bec2316f62528d69652338756c"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x0, 0x1, 0x6b, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x1, 0xb2, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x1f, 0x6, 0x4}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x40, 0x81, 0x2, [@generic={0x23, 0x1, "5bddcf31691eea172dd50fb488642dd5b7f080d2691ff78efb40ae433be652bc37"}, @generic={0x53, 0x31, "c835d760ad0c93747560a4640537cd7fceecabe3eb2c9bcf09427153fca2560e825b41845ccec9833a2a147ea173db99db3c8731147d7ae91ea5aeb29f010fd2c84065fe3aac3a0fdb5986ef0dd8d58b67"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x4, 0x4, [@generic={0xc5, 0x10, "5ccc211c507456a2fe453bca21d7b64958cf95d58bba26024f2f52df9143580694c9c7bd614ce77f47dd6f7c16da4bd6f5df08483b13308817d3c78cffc0b514348f7f602f4cb5602fd2222d9f76fbcc821a82dcfeb113679a4d83c3b88c812605eb0da70c575a86dc593a0e7c7eb3058de95889f5b22557f6e2167123db21fc04d7e89001a8536cf4e88ad8c89ea5bddaf6c254c0ec72a375bfe6bb804b057f9e188b992bf7a4d7a163d5b8d97fc10cfba745e54842349e4097b77e45950fe2e146a5"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x4, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfffd}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x9e, 0x0, 0x3, [@generic={0xfa, 0x21, "312c0a4a90073200d2b6d5e7ba4fe781e7166503ea7d49d150217c0fc0903eabdb1d9fba243429f959dedda2ce389e50ca54cc6e9939badfc1c350bf9606a2da880e00aeef3eb8df3c015655f7d55949e87b857336aefb761fe57460c29431b186a2869698c6aeb89be844dc2e1c0e5b0d21ab27400cb6c8a921f240222dce40251165075e81ceab1aa5c46a45737a90830fc2a1c492112314af8361ef5f8093bf2401d08b0d186d10ea06dd2cf19f3425a70dc93adfe0d9c943187fb0cd19929a57e77a2f2d9707fc1c61351521a5b54e6ed96b5a07e05a6135ba7bc2668d6df2ccab7959a140026e2b60d2c46256bf7a6f6e68b1e6c70f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xe0, 0xf1, 0x20, [@generic={0x2a, 0x11, "d78a15ab3eb49e21879a794ba4951bf9d2de6cce0d03c66c516073a66a8b99eb374a9baade154f95"}, @generic={0x75, 0x2, "0b1025d4767b3d79945135e5d55704a5fe48aa5895644d7272ec688fe39f92e2c5ee3cd3195c7e3a3ac2ed2fe9d52866b593fe04614e89347caeafdc99ab2381657d08481ecfa4aacd17aa9b52d67523e3ef03aa2c9c5bafc9d2897a2343206c056299c0b7478e647390891f68c61c96d9fc48"}]}}]}}, {{0x9, 0x4, 0xab, 0x6, 0x10, 0x2a, 0xa2, 0x34, 0x0, [], [{{0x9, 0x5, 0xd, 0x2, 0x200, 0xec, 0xfc, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x1, 0x1, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x9, 0x1000}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0xc0, 0x7, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x40, 0x7f}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xba, 0x9, 0x80, [@generic={0x60, 0x3, "137a953d334c0f54f5a70e8cf832876500294cb86cb73b77212ab88423897d54bc62818e1762ed93d53b6d2c41f500005a8dd2da49431b557e37436727d807ffa5f0901de72e27bfb155f65e6f910589c8fae139c9d6367eb7374535a8df"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x7}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0xfe, 0x0, 0x2, [@generic={0x33, 0x2, "b3336187a108177d6754f0c768ad94a86010a02be18f609322fce358c766ce960d0cc7201614c2430b41c7d617b176d10f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x9, 0xf5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0xa55}]}}, {{0x9, 0x5, 0xc, 0x14, 0x40, 0x9, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1fc}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x8, 0x7f, 0x4, [@generic={0xa4, 0x22, "40f915573d99fc89f74014a3b45ec10d6ca35c3b8d45672e3f43a61d5a3898159c040edac2f34a9c399e64df316a419b95b3dacacde2de0a7d5f5cb8f52240c1ce729d7050ba87ecf9a3fd1c185d3da3f5f26dfe68cfe6f347b788b1df0afa523a076905c11e71e0e44b9ceade76d717c01197d6a718691849efd580ad6ad13ffed1620e83f3df97d8d4442f756325ed393610361f3eab6754e5deb95250f750ddb2"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x98, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0x2, 0x0, [@generic={0xe8, 0x23, "93a9be7ecd155817239b8f113d0f9a0441283d3990ce292cd8c398cfd320229623088cba975dccdc58bf951b508368de4c5bf14e0bb5ac2b0213c03af5dc7d35f88c23dba27035255d8b25ef08b12b0a81db76b3ad34538319706898b93e08890fbae5d1cba69f502ce84958cd155244a304c91031746957de0a6a6cb1994745ce6108a00e4f1c02477be8c09f2e465eea19a3b4fdae212f120bc5dafc7d0073ba6f8778656db4243138600498c3b9ab99151683d8e0937e280bd8917d3db004e32854545ea251f41035038c1745101f3f52510f95ee85a0fb55545e332f03b49b71e0267958"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x1, 0xff, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x20, 0x5, 0xcf, [@generic={0xac, 0x30, "72509587a8079cd4d3059602fcc56034afd24ca1b40f30167cf80c47a672aa04c0727ffe189ce30d15c15b70ae720c45ba97920dda76d0f75e4156a8afd97d3aee849d19204ecb71f34f1f1f0e20105a55b172be432d54b64b428a21051ad7c75bfbee287d77f1f8bd68b06fa40b67be9b086e495245484bbfa2909419f9ba037b7a0bb286d392688077cc08f5aada7a53f9d69553bd2d88453cc7bdb46c223f635a47bc56d1b4606584"}, @generic={0xac, 0x30, "ad09b7cd91c2f6cfd298066523099554e8c0a9dd8a412459f4564783a9676746885acb41c3310a17378be566f96d2d2a624f1feefdd26680f47ba4cfa1e5c739a60ee01bd57541bf6604c40c886d7f06eaa49aba6960da9dda99b2b1d5d1c3d1b784c2eab8607b5fdf533df1bb82c85991ca6ec967473917881e84b60cae46e9afb88fe7c60fe6d8592b44cf94a268c2234ca43742ad501ed772f833415b874976ec25d6faf673060f59"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x40, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}, @generic={0xf9, 0xd, "4bffa77f431ce4fa3ce9478ae239ba8ef12049b50177a4a2d930cfc024875ce3b280297dfdfcba04f2e372714a20efbb3c1dc18bfc256f2482b6f32e2fd630ca1fcfa2aa6a6b988a71086a303285d38434ad4b8f9bddb86d93b7413f1ac4a32a7719ad807b72e40d739ecdbbd452afd4d35580391acc8839f95a5703461ebdfc63dd83dca1443cfc48eb80ecb5e9dff42be2230c67da09478d7bb2278bf4fbb3cd0732c0e02607f2684536633b5140f23158c0982628aa962b4f0163461aa0936652521d43112d82a663fe0c8cdb50634eb3ab1cd11ef3c2abcefc09090c1e75204d189f828a5d90c9df72201d0eecd4bb0654c8368a3e"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x20, 0x6, 0xa9}}]}}]}}]}}, &(0x7f00000023c0)={0xa, &(0x7f0000002100)={0xa, 0x6, 0x250, 0x7f, 0x5, 0x1, 0x40}, 0x10, &(0x7f0000002140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x2, 0x6, 0xff82, 0xf9}]}, 0x6, [{0x8b, &(0x7f0000002180)=@string={0x8b, 0x3, "128e5adbefca2e43d29a1afbef2a2a9b4c83e105f8326b9d4b22c73e6c457542fd6c885b9229ac66331bcc789792eab3715af420fb32940f001405c4cec52bdee021e1d7f99166a607447f0b6c0e67680b272900e5593dc2decc97e38100d9a53e8d2635118563a09309ab22262edc5c46fddaf8e8a6a96af154c4d803f7fb3fa1c5f98202f00380c5"}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x44f}}, {0x40, &(0x7f0000002280)=@string={0x40, 0x3, "9190abae07fff9924061b2404ace033af083fa30be3a65a6df3648bfbfdcf7103c28a709d3f908726dfbdad50be1e717f445eebb7b2d3d2110de1d6c09d2"}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x410}}, {0x51, &(0x7f0000002340)=@string={0x51, 0x3, "ea74198dcb41eb7b153a7c6270f2b521cd483ca998ca917415c69819905ab3e346945871f0f7d7357de04b6d349ececa779d7ac653b2f61dd0ee1e5a00cc17a3b1a8a39cd736d693d0a99c77fa1581"}}]}) syz_usb_control_io(r0, &(0x7f00000026c0)={0x2c, &(0x7f0000002440)={0x20, 0xf, 0xae, {0xae, 0x30, "06f40d88a3928a997d8eb4f4375833ac332e403eda6370558525078a0684c2fa82feda1482646eb5c28533b808591eed3da9da9626d44eb9d058f9cbe22aa887cf72e4bc090f66334d7f94f651429a172c2b5b9d54ca09ffab3a76b4a22aafd4bddb89a65c914ced8e91ae1db7e60c54182480e533a2e93f55de34fc4529dcab326664c3e8e58e18e8c1df9dee6bbc7c78f934ed1e577e7d9c283efb0dd0ab90dc27cf36932cb63ce12f03e0"}}, &(0x7f0000002500)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "35f057ab4ea02653c9bd9f689f04afee3dc2ea9888207a44338e5ef1c2adfeed64a3d5e5c9032c5c60f549a29ecd4f14bf6a665f2a72e0a3d0b7e43dfb56008c1661c98550e0d59f2ac38128ddc848b32304978778c3d47ddf1b06ad81c2b880498d7c62c6a639ac0be890e30186767ecd483c2d048d0ca109070c8238ef5f46a5c51981c7d9b0b32f0d8e4b320585205976532eb9be012b2a4d1ac614beb887e477a88bcf3a45136e606cefe3a8411f70ab670a6231710ad264779afb6871b28a736d285c"}}, &(0x7f0000002600)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "e822d0a30b627e468652b92de5ecd247"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "ba619fdf6f3d41eafefd92d7e81860eb"}]}}, &(0x7f0000002640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x5, 0x0, "69e9712b", "e29760e5"}}, &(0x7f0000002680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc0, 0x2, 0x2, 0x80, 0x0, 0x5, 0x5}}}, &(0x7f0000002b80)={0x84, &(0x7f0000002700)={0x40, 0x15, 0xae, "eca258578821427892760302b250c7554c90c96587601244971a5d2092542e30c2629b05f3b3b0587e0a5cad34dad77bd6602d5ec7da2975eb192a4c5e8ed8b9acb8b525d5c7951c3995c21d3fd4c635d043356ef68ea4c108fa0d05676d58c7fd5be842c2c4ac956d1a3a1569b7d3c86297c52390dc705faf85cb7ab7b797125d6bfb5cf6ea6f8d9ef5d196122c775fd4c03c4e2a8757c3b9f6775a1c4e9f801e9b578d73a2b98043344c2c122e"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002840)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000002880)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f00000028c0)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000002900)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000002940)={0x40, 0xb, 0x2, "9066"}, &(0x7f0000002980)={0x40, 0xf, 0x2, 0x3500}, &(0x7f00000029c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002a00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000002a40)={0x40, 0x19, 0x2, "c5a4"}, &(0x7f0000002a80)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000002ac0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000002b00)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000002b40)={0x40, 0x21, 0x1, 0x81}}) syz_usb_connect$uac1(0x1, 0xe6, &(0x7f0000002c40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x2, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0x5ea2, 0x9, "e04e15c3bb58"}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x7, "3c9034a6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2a, 0x3, 0x20, 0x1, "4d7b150d130592b5f9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x8, 0x20, "8a16a4de95"}, @as_header={0x7, 0x24, 0x1, 0xe7, 0xc0, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0xc0, 0x8d, {0x7, 0x25, 0x1, 0x80, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1b, 0x3, 0x55, 0x4, "fb"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x86, 0x1, 0x1, 0x81, "c198f3bb33"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x932, 0x8d, 0xfc, "ab9b8c446d7d16"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfff, 0x8, 0x7, "126c57d30679b25259"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x40, 0x81, {0x7, 0x25, 0x1, 0x2, 0x1, 0x7}}}}}}}]}}, &(0x7f00000032c0)={0xa, &(0x7f0000002d40)={0xa, 0x6, 0x310, 0xff, 0x3, 0x1, 0xff, 0x5}, 0x114, &(0x7f0000002d80)={0x5, 0xf, 0x114, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5c, "5dd50c764d0705275d949f9e676cb959"}, @generic={0xd0, 0x10, 0x1, "9d7e6b9cdf1eb4929bb373376e98cf790f29ccf2bec3ce1bef045ecd7a348342d02c69a849fd0a6db6c104264148432860e3498882f050800812256f724f2b86bfac75f09efd132b047a3475693e6885ea8a1797ac42a0f1cb4b382f1e078c39178d43084bb7859ca9ad328de99d0d4027004a4e731efc9f1e7b65334cdbacc5a4c2fab1b4b277ffc8f018cd58a7f6f255131a81533dc05660e0176455ea47eeb0560bdf2cdb8f493f88af0b31da7f97b125e92145938320647a3cf5c7fcf128dc21262e23b6e92ca1c42c4432"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xb6, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "f2c24345b6e462f3ea8310d8f80e47c6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x1, 0xa8, 0x4}, @ptm_cap={0x3}]}, 0xa, [{0x8b, &(0x7f0000002ec0)=@string={0x8b, 0x3, "a1e802d3f3bc8de9873c7070d712885cf0f0a57a202125d9489d4d2294f73c921073d79f1239f10aae7811a1d6a130a5af275cd4e3ff2b2c09cf7fe2a8bd04c65c7766afcc8f91f8d2e993f746c22a0c7be1aaa7406aa76ed74e2986adce6231ae3117db18d39d6867d2fcae5eccbb3b766aa68b76cce187069220a697470d95b5ffb7284947feec0e"}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x81d}}, {0xb, &(0x7f0000003040)=@string={0xb, 0x3, "5276700f4243005813"}}, {0xae, &(0x7f0000003080)=@string={0xae, 0x3, "f314126877d8c20c12f3dadd9ce6aa3fe7a5a1ed1ac1bf588c96ad1279820bdb6896a7c07814329ee787a2f83b456bb891d7f2e835e7f444375336c6f7f2e9eee2036ae761683bd61cea44c3a912e14b08bc95e9160bdaca46affa19c3b01aa4cc1638ffbe0f4940c49311e5d0100f3f7f42b533c41617404c288fe61cb9be7315f025ac264ad680d2c084bea2dd949465ffc09e2bbba25d33af6fdafbe88bf1bb0e3413396ad50ed7d52133"}}, {0x4, &(0x7f0000003140)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x424}}, {0x18, &(0x7f00000031c0)=@string={0x18, 0x3, "9f764bcc765db2ac4b51811206ee525c14450a0f5b2c"}}, {0xb5, &(0x7f0000003200)=@string={0xb5, 0x3, "d36ec11d2064afe3fe92315faceab533e50c2c35cbfd7ff8af7daea14a494d781dc795b6c3f8f785aa05ce1b6788dc9aeaf74b69b0364f3f7db46a73498f3c18f759e28a34a7c5d61b77eee076cacdf0320b2e5e3863a4516fecb70b3ab409fa9bd9af7e1961748e6f7b0393ad622c27c739537e0cd6bf3a7cb6a87c808493cf9e8c2f56686f4735932d0dee6c7217637c2c615896b5473940a2c6284544531cd44586d42815c6f3a2722d39449c0e268713d9"}}]}) syz_usb_connect(0x3, 0xa53, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x24, 0x36, 0xbf, 0x8, 0x3eb, 0x7613, 0x5fe3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa41, 0x2, 0x7, 0x9, 0x80, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x9, 0xf8, 0xfb, 0x7c, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x401, 0x6f}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x3, 0x4, 0xe86, 0x1, 0x7b}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0xf7, "60e4"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x6, 0x7}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x7}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x20}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x3, "9b"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0xe0, 0x8000, 0xe8}, @feature_unit={0x11, 0x24, 0x6, 0x1f, 0x1, 0x5, [0xd, 0x1, 0x8, 0x6, 0x8], 0x1f}]}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x20, 0x6, 0xb5}}, {{0x9, 0x5, 0x4, 0x10, 0x7bf, 0x6, 0x37, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x9}, @generic={0x1a, 0x3, "a28db95577e5c809cbce1dc76f62011fcc84524cc972a7dd"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3f7, 0x1, 0x90, 0x6, [@generic={0x3b, 0xb, "b4a53e0d09fc9e0d09a0b81c95c755f642e67e1482028db81ac3738bf8350cc912c5c387e7ebdef216efabd52d7230304de7d4d3f0232623c7"}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x81, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x69, 0x3f, 0x5, [@generic={0xa7, 0xd, "d9667b675f045e37c7b1931ba75d1792aa9618ed8cb9d9d48970a4d5b774e89b2ceb493e12e4760b96c50af963c282778cc430b232e684f62d5b7e0d55e40a5b953d4416212529d1a01bc019a4b5027bba4f1227a990c82f9d320a846ad5560aa4213bd82701a04104446d76deb41bd59d2ce14e5d834e4179f75e3ec7d4a9124d5cb1d1317745f3e2ca301f38867b928bfb40d6ab78f012130e73710ca5ad25a776717186"}, @generic={0x2c, 0xe, "0dc4864972b24f4629159cbb574fa58db1ad1a5f5fd2702a09b9151dbce00971698aa1effe6ce482f071"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x5, 0xb7, 0xfa}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x9, 0x9, 0x5, [@generic={0x8e, 0x2, "110225aab6c89d60d1b439f158f54765f4abe8c6f6d36ab80b71bf135d333f769a32432c71c65f8953aa097b890a8e0da9472690125c7e8a388f5bcc43d9fab08aca77dac82ed4d7c1eece8efecb2bfb9bffa7dd71b1cf661d04edc55d8d4a864013728d63e1343e7df6d5f5f995a0283248de13ef361a29bb3324922e89fa2b235eb81bdedc91397b08af44"}, @generic={0xe2, 0x23, "bb26b726d69088da2d25360c894384557f8d231c1689288b951eda36e203da774ce0b3b72414ea7d2618b31422c6c9c2fbed136e0897ab90b688794945677d1a3ec3e2bc2523845ef5c17981f897bcacb1a07b5c4b81ceafdc70f63dfc3d346da32721c9c98cb2da9699f01d3a440655c6f982b378c585e3c7cd81479cfd830891e02677f142a9191477240620b132c2fc9cf4e9f3ceb496b88ebea25412c291ae02e74612b98370f7f16a936ce10ed8232d03dba2ca3af1e43166b3895e54e87f9de648bf5c1abad73cdd1071a6966ce86a1492e99591b1f60fc0300b3640cd"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x8, 0x4, 0x4, [@generic={0x4, 0x11, 'cG'}, @generic={0x37, 0x0, "4d22c55e9174079431046b41ac2eb4bc7b83ba5bcbbc7bb3bd54f8c629d6853c674f517bd6e5a4a86b183a33b6a0e6bdfcc32b0434"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x0, 0x5, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0xff, 0x5}, @generic={0xb0, 0x3, "f2c74abef381d0bc32694b7891e08cc5df9a6064f2af079f4b566d0a83a1b3ff4f5f8359cb89dae116c254a45032a1a24bd23b36abb6af81cb01c16eda1896dcb069a40778b6af090bb11dfeb8fdf84d72af1ea2d2bb596c8c4053232004a8a9eee536865a624e63b1946bfa8ac35254151dc81d600d7895fa56529414608702314da007bc556c2dc41afa3a08545e14ab9cac48bdc5066fe5b8649822702f718c420601c3cdcd58205ce8fbd1ef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}]}}, {{0x9, 0x4, 0xf4, 0xff, 0x10, 0xff, 0x3e, 0x85, 0x1f, [@hid_hid={0x9, 0x21, 0xfe01, 0x0, 0x1, {0x22, 0x8bf}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9dfd"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x100, 0xff00, 0x6, 0xeb}, {0x6, 0x24, 0x1a, 0xfff9}}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x68, 0x6, 0x7f, [@generic={0x35, 0x21, "79a47debeba37539b89bebd895f0fba71262ead425c384ee1b6929343c17efb83f617ca3d8da6c25df12b47cb20d4347c24b06"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x1, 0x1, 0x20}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x7, 0x40, [@generic={0x4f, 0x24, "ee24a1421b3a86a8771cfc2d36fa6e9cf2003e8b44f05b2d4b90dde2c19fa670154f72b430bf28d7bd13141aa2eda0915cf0ef2bd453f359d84c7c011bb383b4630f6029d9fa4bd55169cd2bc3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x1, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xae}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x8, 0xcc, 0x3, [@generic={0xa, 0x21, "caee079ee4d66e62"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x5, 0x3, 0x76, [@generic={0x76, 0x31, "60b841f2b2e1c70b8a4d7812d0e8b3ab73eefb2a60f0c69e225d9a5b5dbf2fcf8b1dc696ff90cb21ff31b05a1c7cab1172cbf4480d8b198f2b5e9788684ac272560582940f1a389e48fb514b5f41e6af29ff52f11132b21c503682fe184934a50fe60a3e0c71ab397f72c52f3ec8359be1516e73"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x20, 0x2, 0xcd, [@generic={0xe, 0x9, "ec77d5289534cb46de0b8182"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x3, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x1f, 0x1000}, @generic={0xdd, 0x8, "6a76fdcabf3a6f73ac8299610d584b96527d8972ccacd5a4053fa8aa8ec0f4eecde3bc7941dd15acc3b6506af1adfb02b25a025fadbeb792b4a6aab654d278ceb5535d308f997cdac7a8539084ec65527cdc61f94783fca6ec2ea25cc93eec76c55e5282393fc2218646463c5a2bfe987d4accd9fa4c94ed660195a650668d7e915e8abdd0ebd8ca71ef8f4b7c49687080662d2a62a917ca2224b8c81b84a1eb66eea9482a5e35564400eb2f18ed3f7f963a7bd2361d0682759f291f7c0916ff32fc5dbdb2de3183bf564e74b43f8ec92154413c14625987913b85"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x6, 0x7f, 0x7f}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x1, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x4, 0x8}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x0, 0x6, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x600, 0x2, 0x7, 0x3, [@generic={0x64, 0x22, "9de1799b17393c324416665486b78219a9cfc7e089d519207ed957f9cd57edf5a1f0f22b5c692bdfb2ac73922bc56da8bc22afa240932fe84d6686ed7a3bb02cfe077fd89a1b93a726567b4a2096ab28c05930a471d8693b05701d31078035d1c922"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x0, 0x6, 0x4, [@generic={0xc6, 0xf, "459867c7e4b1cf5d14829683fb4d714ff9b0eb76645a94232e72661845b381a760ff4160d340b80f6bbbc6a16ff6669c31f75e97c3415e30e146319e1136dbd0394368a75a4a907f553ed9b2038dedddadf3fcc274ceff467c42dbab0a05da205968eb68344ec162b1ac5e43265e5e9d37b70031c5eac8f5b988467716f7e3d848d6f0cee6eac11da8593051cffd2df7702252f4e8262de87ebabd3f717e52ec72e066d1cce04fd05c6ab1e36e1b7431dc7f55506f94acc247a53a48a949d459d3e6b080"}, @generic={0x33, 0x30, "b91ee4ee745db134adf4ff68ad51e8a6512f5024263b915d2aa1dc6deed93c3c9ea49195cd5490552f77a19bb273519617"}]}}, {{0x9, 0x5, 0xe, 0x1c, 0x8, 0x5, 0x8, 0x4, [@generic={0x1a, 0x11, "f8bad4a0cf3739fb8347e14215a51bdae771e112069d0d17"}, @generic={0xc4, 0x3, "f5c5dae379edfb0fe64b114680f6dc66a0f6a9d1d290ee34478e1d30ae7f8f959c560c673ca36fd437c88a4fde9c204c5c3b2e9be03e41e20a128cfd4d0416caf708de4853d4888c9634edf24742e2ebe684bfea9e5acd951878937144911f0b0f02360f74ea84033b3ab1c22c8692114f1c60828ac8fa5d870ebc09d72922e5ec930f19f497747c72d91da0cdf981ff6dc48e7e2f0d04eecdc09b478a96445aad8d511a440a9d3408335b81f95e4d46d129fd3ddebbb5641cd7629f4f9e961be630"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}, @generic={0xa4, 0x8, "5d624be6e8ff2bc773f39b9ca477c86294eb6a858129808d2ca1c82abc592469e29441ce672c6051e11f352d241163baf43575610037f69c976d3a7c5b7e40f38f2cbfd502bd7e539ac65e219d72c350432b0e83e0e7033b7086a39d6408e2d50e9ff6d52fc099da81825f6d5a14115b543e7c496c406477ed9f44c2abe7b4e799f4e98be52f48071c91477490f0170f54341fcf0cfb2ec283ddffde599124cb0a6e"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xe3, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x2}, @generic={0xd, 0x10, "c23a5bba548d29731a610d"}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x200, 0x9, 0x7, 0x1f, 0x10, 0x3}, 0xc, &(0x7f0000001000)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x5, 0x401}]}, 0x9, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x7c, &(0x7f0000001140)=@string={0x7c, 0x3, "3cd0b742ab54124da2a1a22e8b02bd0cdf089671de2a42b497e3b03f3677910ad8416a77a3fdd089569b03a30da138369a04030d0bd7b1886bf0c512be51b052b60dfe2e7bb5dd33eb5366fff9c26cd814f833049d680d6c2894a8413611c68125239b83d30916a7cfef8669cbead56b7f5f83fee6d4c697af39"}}, {0xe4, &(0x7f00000011c0)=@string={0xe4, 0x3, "1d2a9cb015273f1311b128ccb5a13684bc65814f8b76fe5e2b5d7c4dbd8fc3838406c9247aa9c1caa3f34215e893369210aa1a2dc7aeb9d47d383d87f065bbceb5eba96462042572cb6f34c5b39e55c6d7a57d3d881fe4ead44941a5915b3ad9b3309a4cac8953ec4847f9732385818ab9d9dbb1a254023e07e3012cab02b3d167ad3f63d87fe71430f8d1b436875d5dfeff9c219962e081365f055c96640164be43d5a52ddf19a79d32d8d63f6bf54d94c75695053e011f6dfb1aeb46ce1c25191d9e3f7493ae7416914dc5d4b2b527e0134fe77fb0da233747fcafba3e750bd818"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb7, &(0x7f0000001300)=@string={0xb7, 0x3, "361f9dabb06e2ab7141b7da798e6ffdb9deab9e266ad2207dce6b31f29d405099a7779de96992cc6988d954efe1eaf4a905a3f6eed330f43af5d23b899edef32fd7ed85703291aa3c75534321c9f042793dccf05019ae70ef6d2ed9ba345a468ad01e6fca17253736711e9cdd78a8e71a0165f9a99dfd9f8dcac0d5eefaa4f6fb692f9d1aead0530bb77e11286cded5918fe10beb6f4755e9bcfc69bd24183db30ba8b306e3ee4baf0a7ea4031644a2f79c0efba13"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_connect$uac1(0x60029bffd0f9919b, 0xcc, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x2b, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x5}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x5, 0x3, "1442daf380"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x8a, 0x0, "455d3fbe65af4f"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x25, 0x1003}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x1, 0x1, 0x81, "9083fd59e2bf992e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x0, 0x2, {0x7, 0x25, 0x1, 0x83, 0x3f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x80, 0x2, 'I'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x3}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x4, 0x8, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x3f, 0x81, "ee4c", '{'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x9, 0x7, {0x7, 0x25, 0x1, 0x82, 0x6, 0x6}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x7, 0x3b, 0x7, 0x10, 0x80}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x0, 0x4}]}, 0x6, [{0xad, &(0x7f0000000280)=ANY=[@ANYBLOB="ad031d3a66318c477e54d8c592fef71bda956d6a50637dba4fc1367ac63f3581fba4e1848378fce2dd95ffe15e95bb11189637427ad31d23c84ff132b24ea963937ccfd096cf7123a633ad5792b6f47a80bce88d9feb2aefa2be1e645c0e60587be4d503c5633bf47392c899ba61e9e7178ad315d04eb225dacfd3f852afc396ae46099464db0deb05211100071e8fd9257e7fa83ce444e518e175e0db3458e17d62954512b0c10fc4754e9470"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x445}}, {0x79, &(0x7f0000000400)=@string={0x79, 0x3, "c5de0fe9cab545c183e807d6a3cf2b5365051530cd8f507196a9dae48a3a1d6ce0e0777c851011b071dc7ee9a9f8a0fbbc8e8e78aae505301eab8bb8624b580d3f2a289a91f62db01783dd6b3d7d3a4c95adc8407d110c0015dcc3462be391101720c52dbc46e20b13c16a12368c28dedd66379610fc05"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf0ff}}]}) [ 2189.746814][ T5] usb 1-1: config 0 descriptor?? [ 2189.753177][ T4046] pvrusb2: Device initialization was not successful. [ 2189.774643][ T4046] pvrusb2: Giving up since device microcontroller firmware appears to be missing. 15:52:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2189.864250][T18931] pvrusb2: Device being rendered inoperable [ 2190.024033][T12799] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 2190.035555][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x88a8ffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:21 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x8, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2190.268436][T12799] usb 5-1: new high-speed USB device number 27 using dummy_hcd 15:52:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2190.355211][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2190.393202][T12799] usb 5-1: Invalid ep0 maxpacket: 239 [ 2190.410665][T12799] usb usb5-port1: unable to enumerate USB device [ 2190.566605][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 2190.577855][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 2190.604092][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2190.608670][ T5] usb 1-1: USB disconnect, device number 70 15:52:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x9011faa2) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2190.887251][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2191.018766][T18931] usb 3-1: new high-speed USB device number 62 using dummy_hcd 15:52:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "b7e1ce82"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7ec50e9b"}]}}, 0x0}, 0x0) [ 2191.143405][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2191.374603][T18931] usb 3-1: Using ep0 maxpacket: 16 [ 2191.574207][ T19] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2191.587081][T18931] usb 3-1: config 31 has an invalid interface number: 71 but max is 2 [ 2191.599884][T18931] usb 3-1: config 31 has an invalid interface number: 89 but max is 2 [ 2191.617183][T18931] usb 3-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 2191.636219][T18931] usb 3-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 2191.649467][T18931] usb 3-1: config 31 has an invalid interface number: 171 but max is 2 [ 2191.667246][T18931] usb 3-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 2191.697568][T18931] usb 3-1: config 31 has no interface number 0 [ 2191.728363][T18931] usb 3-1: config 31 has no interface number 1 [ 2191.757668][T18931] usb 3-1: config 31 has no interface number 2 [ 2191.785469][T18931] usb 3-1: config 31 interface 71 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 2191.817466][T18931] usb 3-1: config 31 interface 71 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 2191.849299][T18931] usb 3-1: config 31 interface 71 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2191.875796][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 2191.909091][T18931] usb 3-1: config 31 interface 71 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 2191.929332][T18931] usb 3-1: config 31 interface 71 altsetting 8 endpoint 0x7 has invalid maxpacket 1544, setting to 64 [ 2191.948422][T18931] usb 3-1: config 31 interface 89 altsetting 9 endpoint 0x4 has an invalid bInterval 128, changing to 11 [ 2191.968202][T18931] usb 3-1: config 31 interface 89 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 2191.993940][T18931] usb 3-1: config 31 interface 89 altsetting 9 bulk endpoint 0xD has invalid maxpacket 0 [ 2192.008069][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.027235][T18931] usb 3-1: config 31 interface 89 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 2192.065185][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2192.092744][T18931] usb 3-1: config 31 interface 89 altsetting 9 bulk endpoint 0xB has invalid maxpacket 1023 [ 2192.107530][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2192.128436][T18931] usb 3-1: config 31 interface 89 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 2192.147462][T18931] usb 3-1: config 31 interface 89 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2192.165318][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2192.195085][T18931] usb 3-1: config 31 interface 89 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 2192.214206][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.244300][T18931] usb 3-1: config 31 interface 89 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 2192.266832][ T19] usb 1-1: config 0 descriptor?? [ 2192.278395][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 2192.344107][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 2192.386353][T18931] usb 3-1: config 31 interface 171 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 32 [ 2192.424292][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 2192.448282][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 2192.467462][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 2192.488859][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 2192.509504][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 2192.544325][T18931] usb 3-1: config 31 interface 171 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2192.559905][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 2192.578793][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 2192.598684][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 2192.618206][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 2192.673563][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 2192.704128][T18931] usb 3-1: config 31 interface 171 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 2192.779016][T18931] usb 3-1: config 31 interface 71 has no altsetting 0 [ 2192.816769][T18931] usb 3-1: config 31 interface 89 has no altsetting 0 [ 2192.854740][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 2192.865617][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 2192.895897][T18931] usb 3-1: config 31 interface 171 has no altsetting 0 [ 2192.907635][ T19] usb 1-1: USB disconnect, device number 71 15:52:24 executing program 4: syz_usb_connect(0x1, 0x99, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) [ 2192.994559][T18931] usb 3-1: string descriptor 0 read error: -71 15:52:24 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x9, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x9effffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:24 executing program 2: r0 = syz_usb_connect(0x0, 0x95c, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x93, 0xf0, 0xa6, 0x10, 0x2833, 0x201, 0x86a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x94a, 0x3, 0x0, 0x80, 0x0, 0x4, [{{0x9, 0x4, 0x37, 0x2, 0xd, 0xe, 0x1, 0x0, 0x6, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x1}, @generic={0x8, 0x21, "0c67e1afee64"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0x6, 0x20}}, {{0x9, 0x5, 0x0, 0x12, 0x8, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd8, 0x6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x7f, 0xfc, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x7, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfb, 0x80}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x19, 0x7f, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x9, 0x2, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0xff, 0x8001}, @generic={0x7a, 0xb, "011ca10e6d14275c3f11d3d958fa8fe3ee135b93a8a7b18886c900270baffb86eaa8356a62d5559d1d701f510449fa3d8408173433a254f256231804e96b3b2bed01b9427c9181fec542cbf96c79e083543c89dfbe678b842ba3a4ed305ea87dca00a91010d5fbf6a326ac6eca3170792a1115427c71ce1c"}]}}, {{0x9, 0x5, 0x8, 0x12da30704f8e3eb3, 0x40, 0x4, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3f}, @generic={0x47, 0xc, "5c86dd163e89f31181434ef902ddedbe0cc6ba5a01e65ac61abca3a00ba0f9caca84e20d8e9fad1fd122222e46382d99720364e03446c404cba990665837b9b23824245924"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x7, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x6, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @generic={0xf7, 0x22, "078be3fd579a8f8aa774b28099addb1e3f4b84fc9dabc8dae1251653ce448793533548b85c4e806873acf9dc7dc50c35192a8bc7df9801a24f93367c0c560f30cd348c5aea44aec86186240395404445a282b4561b84d711b7c63f85d1ae8fc115a15e0b697d92bd9d6191ee16ab4a2278df1edb64e8fcac293821b0a6bc473969f6d31f48ba67610aeaebd6db7bf2088a630396ac40045bde8a0c108e68625c6b00c6f236d9fc342102de62373113c2502ee144e23b41248cb5f59ca0124c0e22626ca409534b2bfbf10791266b0e30b7add998756ac0dab36ebb67719e86c3c5f8a569f57b75216f8389738af98609c886599247"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0x1, 0x3f}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x0, 0x96, 0x3f}}]}}, {{0x9, 0x4, 0x6e, 0x40, 0xc, 0x58, 0xf7, 0xa, 0x20, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0x3e0, 0x8}, [@acm={0x4, 0x24, 0x2, 0xf}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x4, 0x20}]}], [{{0x9, 0x5, 0x8, 0xe, 0x40, 0x7f, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x5}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x98, 0x80, 0x80}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x5, 0x2, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x7cf, 0x2, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x8}]}}, {{0x9, 0x5, 0xe, 0x1, 0x0, 0x5, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x28, 0x2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x8, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x2, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xbc, 0x9}, @generic={0x2c, 0x30, "1cb47efa08b41b832b0e65a3679d2f6ac8d4510e9a3c0c04d6bb4922f4e901bf7ae327ee714ac91b3099"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0xff, 0xdf, 0x0, [@generic={0x55, 0x24, "07c0fb6e3b543d0a8911b2658eced6a7a3784e9bcae02a9fa1089f795ec0676c55b840f031c7825710620a1e6103c0bc58ab1fa7c2bc501845fb0365963b89138c705aa2d6ea2500c5b92c54d0a5511d194a04"}, @generic={0xdc, 0x22, "6a15024f881d750a94a20f54c86e07ccdcb1921abf049f1c0ba8258e4fee8a37fd2cd69d22479c08a6a6678d0069da7d0b6afe1d3613153beb3c06a80ce67f6050c423600af3ca6556160b9a77158c4a995a850d6aafc6326b2cf7795df4c03f64b912dedd8979eb7eb5398b6c9a8b7db4d9b7420eb49e475b1db23122bc7c0bd9afa500ab25e4bfcf82783943d379a1ab7329d8999ef77f3e49d369c3ebe4c510ba68cc501552c01554d2e8c0e70d76ad08d3f476eb4f6800a144f6d851cda364353a8769a1b0a5b528a4ec376809639e7e0814c3cf88baa3fa"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x0, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x58, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x4, 0x81, 0x3f, [@generic={0x4d, 0x5, "40e709d8a2f0e246077990acdb7c0c3948920f46fecd46ea0417144ff614e76f473d61cbc0bbb26d50a06177cf1aa6d221367dfab6da4714a758493cd6348a799af4427574782a71d5bd97"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}, @generic={0xf7, 0x22, "5e023cae49cd949bef984e36f9024dc99e17fff1bf1cd0e8675b3e95fe764294275f105822837fb069c456ff4988a62871b9db5c1bcedce90c2aa4e046874510c47f0da377dcd8e307623f0798e27933f74d7e9c7bc0e8f106bbaf8ec5a0e3fe1874ecab83d9415acc282b185de0845f607a8f532380ec402fddd1379240883e4636fd65e8cf91cf44b3eb5996aaf7e0cb4777ebdeceb6c7385ced54a032c401a98a7e9b06d0d28d9864006a606516ec254ff8af856b85eed773ea447a90d8deda31e127f4ac4ff2839470f2f4aabe3f8c10cb79b743643525796de0f1940434c1838275769162315d3edf8bb25211b8a88c96790b"}]}}, {{0x9, 0x5, 0xf, 0xa, 0x3ff, 0x7, 0xff, 0x81}}]}}, {{0x9, 0x4, 0x90, 0x8, 0x7, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x71, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7, 0x0, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x1}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x8, [@generic={0xf1, 0x31, "f8a576596f79d8ea212d88e7106d4b4b5b038951bca896cbf8aca3502d1971653f76a42b5a7b067a7d3c2396cc315a12b65fb5377e5f5a0726d2b6477a567e99b5f1058843a11dcebf285a329fc335cd8485f39f5b5e3437f11b19ea00979d32388b0d019fd027ca79d5a2dabfb511aa202a91822fe8a8eca308c1e440374d149eadde4003816cb88bcac21374c237cf86af5041f2f386ed69adf645c95168cabed6472d374a922f5869271153a5dbfee9f586de88b089548473200b0e1b5679cc12222761b4dbcd61d21e9c414eb2a72b9962f50c54f327300635e1d8ec4e8c31e24c3b55a36f35af4e130dd11065"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5a, 0x4}]}}, {{0x9, 0x5, 0xb, 0x1e, 0x8, 0x2, 0x1e}}, {{0x9, 0x5, 0xe, 0x1c, 0x8, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xfc2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x9, 0xcb, 0x0, [@generic={0x79, 0xd, "b3b7ac9ed479736d8459f74c2afacac0ba9f234f7f486e44062a335b12d178394f16c770932db13608b164bde4131bb0da3852e455b4afcc9b52c62146441c175f0c2be5485fa856fbc0302c88a9e774801ffd72f420bd7cde0e2ec1a6a69340ed6c74983b02afafcabf0e09cbe4d68244b56445ee77a0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3686}, @generic={0xe5, 0x2, "1140ae1b2cf7a6588a4f4020b1112e2f35878db2038833a8bd44fd900efb0f252c691e1e34ac7ad67f275be0c4e82db961b6190bb5c73594361050290602c47c3835d5838f4b7c786c30680cffc103f5e2fda1946662fb2a09d905601b79895299ec28cde985eb6096eca256e52bf84e1c0bc0ec319a476af0644273cf5caeb4207825633a43f7255ef5a7ddc0e08e71d9761089ee1a99d0bf316d063e03500f73d130629a95e4722e5347fc3a75b8cedecd6ed65b8e9f1982f37f4913e5ade544109993f51f72cfb9afeede72e55f18d31bdbdb497097da28f90dad7ad22b802f6aec"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xfe, 0x93, 0xeb, [@generic={0x93, 0x2, "e7cffa9b782c6cb417a4bf25d6c75d14cfafd82a08d4df42d564569896381c5fee807622a3668ad9cf7f6e5be0e29122e142317c35df69a50f1a728b52bcef34c68271b4fd3af067ea7131a05d11dbffbdf2d3f4b663a61711b06908a83b8df94a6eefabf762a13b92cfff8b78d593bcc576327bc7648bba9c40ddb85fba360d46317bf8890c6b3ea627a227ee9acd9e67"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0xe2, {0xe2, 0x4, "9f157a96c3d5b72ff68c24a9eabf7eaebd791625f2a176ae0969af5fd46746b30c2a35102ede7a3875d087cf956c8a19db0c5c9a83e1db1c80ba30c2c2f887072f2bb18f08a5431043365c59236ac43efe0867cd9190b6570044884ae8c1d6481c60ee076a30d1ae3ea17970a79659bfd2d404ed03b2c2cb677d6f82a633cbeb65e35caa82f4ab551c5f91cabbf09d318d10eb21097c4416aaa04459264da5cb9bf45a931c151580d6e70ca67eb2d3b557a5f3309432e0704081d2d514c9afe43d100badb32e5f8ffa8a239f0e5756a7cc5f6bd401aff54b322a601a9ccaac98"}}, &(0x7f0000001080)=ANY=[@ANYBLOB="00030400335564bf335fb1988be6fffeffffffffff"], &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x3, 0x1, 0x6, "5965ba1c", "942ee72a"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x60, 0xdd, 0x4, 0x31, 0xa1a7, 0x3ff}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x40, 0x14, 0x2f, "007c72e66679148bca6224801f5ab4ce36821d7872b8d134e7fdfc7d08a653ec0a483c25aa826c5ea1f9f9be2db5ee"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1c00}}, &(0x7f0000000d00)={0x40, 0x7, 0x2}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "dcef"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000e40)={0x40, 0x17, 0x6}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "8661"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0xdf}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) [ 2193.066995][T18931] usb 3-1: Dual-Role OTG device on HNP port [ 2193.154306][T18931] usb 3-1: can't set HNP mode: -71 [ 2193.187291][T31438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2193.538403][T31446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2193.560480][T18931] usb 3-1: new high-speed USB device number 63 using dummy_hcd 15:52:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xa2fa1190) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:25 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0xa, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2193.813866][T28110] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 2193.814170][T18931] usb 3-1: Using ep0 maxpacket: 16 [ 2193.864150][T12730] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2193.954505][T18931] usb 3-1: config 0 has an invalid interface number: 55 but max is 2 [ 2193.986393][T18931] usb 3-1: config 0 has an invalid interface number: 110 but max is 2 [ 2193.999427][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2194.018121][T28110] usb 5-1: device descriptor read/64, error 18 15:52:25 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0xb, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2194.066028][T18931] usb 3-1: config 0 has an invalid interface number: 144 but max is 2 [ 2194.165127][T18931] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2194.178160][T12730] usb 1-1: Using ep0 maxpacket: 16 [ 2194.198977][T18931] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2194.304239][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2194.324821][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.324876][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.324920][T12730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2194.324976][T12730] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2194.325011][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.327946][T12730] usb 1-1: config 0 descriptor?? [ 2194.346213][T28110] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 2194.380149][T18931] usb 3-1: config 0 has no interface number 0 15:52:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2194.620245][T28110] usb 5-1: device descriptor read/64, error 18 [ 2194.624472][T18931] usb 3-1: config 0 has no interface number 1 [ 2194.640649][T18931] usb 3-1: config 0 has no interface number 2 [ 2194.666160][T18931] usb 3-1: config 0 interface 55 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 2194.706929][T18931] usb 3-1: config 0 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 2194.739865][T18931] usb 3-1: config 0 interface 55 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 2194.806467][T28110] usb usb5-port1: attempt power cycle [ 2194.830269][T18931] usb 3-1: config 0 interface 55 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 2194.874283][T18931] usb 3-1: config 0 interface 55 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2194.909157][T18931] usb 3-1: config 0 interface 55 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2194.923285][T18931] usb 3-1: config 0 interface 55 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 2194.976822][T18931] usb 3-1: config 0 interface 55 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 2194.996979][T18931] usb 3-1: config 0 interface 55 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 2195.009455][T18931] usb 3-1: config 0 interface 55 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2195.024454][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 2195.049016][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0x5, skipping [ 2195.068285][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 2195.123797][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 2195.166504][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 2195.185180][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 2195.204309][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 2195.224572][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 2195.275304][T18931] usb 3-1: config 0 interface 110 altsetting 64 has an invalid endpoint with address 0x40, skipping [ 2195.308917][T18931] usb 3-1: config 0 interface 110 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2195.349820][T18931] usb 3-1: config 0 interface 110 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 2195.370405][T12730] usbhid 1-1:0.0: can't add hid device: -71 [ 2195.376551][T12730] usbhid: probe of 1-1:0.0 failed with error -71 [ 2195.398713][T12730] usb 1-1: USB disconnect, device number 72 [ 2195.408813][T18931] usb 3-1: config 0 interface 110 altsetting 64 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 2195.438069][T18931] usb 3-1: config 0 interface 144 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2195.475092][T18931] usb 3-1: config 0 interface 144 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 2195.509343][T18931] usb 3-1: config 0 interface 144 altsetting 8 bulk endpoint 0xB has invalid maxpacket 8 [ 2195.528797][T18931] usb 3-1: config 0 interface 144 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 2195.549157][T18931] usb 3-1: config 0 interface 144 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 2195.558631][T28110] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 2195.586806][T18931] usb 3-1: config 0 interface 144 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 2195.619812][T18931] usb 3-1: config 0 interface 144 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 2195.678442][T18931] usb 3-1: config 0 interface 55 has no altsetting 0 [ 2195.705237][T18931] usb 3-1: config 0 interface 110 has no altsetting 0 [ 2195.717371][T18931] usb 3-1: config 0 interface 144 has no altsetting 0 [ 2195.729222][T18931] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=86.a3 [ 2195.747084][T18931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.789121][T28110] usb 5-1: device descriptor read/8, error -61 [ 2195.794011][T18931] usb 3-1: config 0 descriptor?? [ 2195.836404][T31440] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2195.879423][T31440] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2196.139352][T28110] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 2196.143922][T18931] usb 3-1: string descriptor 0 read error: -71 [ 2196.179380][T18931] uvcvideo: Found UVC 0.00 device (2833:0201) [ 2196.225878][T18931] uvcvideo: No valid video chain found. 15:52:27 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="2eb79c25ee19c253308f1a3559cb89f270870b53d952a29397ca3619b2f30825f019c0909dbbeeb3eb83eb256f368eac3141459e60c0a0444d7010c26b788a3afa4bc6235a8ebf1961079adea62159a6b75062a7d4956a98aab300ab98a82e04993804957e65b2377c5c2a2e3ebb2de7ae5cbfbac8abfc610a05b61d5b757b2cd3bf7109d16b3270c216302b185a454574f02575be6104bdaef42d79f83aca9efbcff4c2be6d4f9322f228761a459444983bb78de21ba050e172dc32561714fe30d9ca60087623343b775ef801e319b44481abe16f6568d65492610d9a0d1b0a85518168273368e8ac99a30bc2", &(0x7f0000000100)=""/18, 0x4}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c7ffffff7f200072bd2a0000000109021200010000000009040000007e1ac500ca5e634aa168a66512237a8835cda2655ce49eaac58398f245b135aaa1c1008ae4cb9edc9ed07dd6a203f35580193bbe4e9a70e5fe14d0a64635debdc00ff986a66f37ab3c4c9fe0e5e0cde04657c1a18ef4914fcfcab4ca3fc3886bce6ba4e52b"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001020000102505a1a440000102030109026900010101900609040003020206002009240600006cbced6a05240004000d040f010100000009009c56001524120500a317a88b045e578e30ecc0ffcb7e392a0c241b01000010201fc0708909051a1fff03cc3fff09058202ff031f3f080905030210000101fd"], &(0x7f0000000700)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x24, 0x80, 0x7f, 0xff, 0xff}, 0xff, &(0x7f0000000300)={0x5, 0xf, 0xff, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7, 0x0, 0x2, [0xf, 0xff00c0, 0x7e00, 0xff0000, 0x7e11, 0xff000f]}, @generic={0xcd, 0x10, 0xa, "9bf487827d90e748e6dd9f33f2a91dd453efc3b2e0d0529f54d02ba168676bb316b8d2dda754b4f770d4f150fc207077f308a40b0e544ef03609f73ec7b18478032632c17a681617774d32347a5face3365efce6029720db328b94b7b77fc40a4f577e5deb1264cb867fcee83d3af9ab77c21a6a8e01d356909f2f851b9f9aa928a0b9bcd5a378efb0b99b02504fc891a26e0cc4508645c7318e113395abb03d1d9d0f53632fac81ff9e3d705f7c1d2ee88581dd877f95878c97039aaf9d054c833e795725908c45745a"}, @ptm_cap={0x3}]}, 0x7, [{0xb, &(0x7f0000000400)=@string={0xb, 0x3, "706425747910525c08"}}, {0x26, &(0x7f0000000440)=@string={0x26, 0x3, "6c5f8d3ee4a96edca95432e8603ca4fc1aa89111fb76666225a10173775664a2454228bb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x425}}, {0xeb, &(0x7f00000004c0)=@string={0xeb, 0x3, "32fed4f80cb1f974f6dca8db38896643e8cd9001f9a0ceb5a4e50352bdfc2b3c7b3496558dac53acadb79c08d5f0d10deaeee8d99ec13459c32b41a3c5e5a9c08dbe36dba6619ebd98d75a35c5af7e8f4191d57d0c5c778bbbc5ee79aeb7af7a70071ecbfa1562ee54c0c49db0505de5393f921580db968c0f66338ad29b7258eb33f8ce7ad0f17a3e93cbcc1ffc7e5abac685134d6faab45ad75a052cdcb31f4f264d15214b639d541db5dac06de4b97276211faa9a04446c29f393609136c590049eb65dde774ae2e396d5425cbed652790964f34705dfc500b9ca1a19592f0557d2112f6d0646a2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x458}}, {0x9b, &(0x7f0000000600)=@string={0x9b, 0x3, "0055d2b05888433e9c40d65cb30100d83d52499dcdaf71777ce53ddb92d582b315c320bddc6c9374481dae93dfeea1a63fc2974b9113570e7204736e61f0a44e2acd1e74630767da4804f3eb57b801d724e715d9005d37d0cab0bac21628b3be5e24f185057eb5f969b7599c6495809930ed2dc92a0f96191a171f1a2e86bff1a9a26a16e5c494b6eead70ce5c2c4837208f2fe47d466f2bc8"}}, {0xa, &(0x7f00000006c0)=@string={0xa, 0x3, "592a8ff4390892b6"}}]}) [ 2196.328432][T18931] usb 3-1: USB disconnect, device number 63 15:52:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xf0ffffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:27 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0xc, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:52:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000000010002bbd7000fbdbdf2507004500636d0000"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2f, 0xfc, 0x86, 0x20, 0x1a8d, 0x100c, 0x7155, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9f, 0x6, 0x1, 0xff, 0x92, 0x7d, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3}}]}}]}}]}}, 0x0) [ 2196.418808][T28110] usb 5-1: device descriptor read/8, error -71 [ 2196.550372][T28110] usb usb5-port1: unable to enumerate USB device 15:52:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2196.677355][T31523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2196.817562][ T19] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2197.012795][T18931] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2197.026733][T31523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000000000fffd", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xffffa888) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2197.216139][ T19] usb 1-1: Using ep0 maxpacket: 16 15:52:28 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0xe, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2197.268157][T28110] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2197.345097][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2197.394140][T18931] usb 3-1: Using ep0 maxpacket: 32 [ 2197.406950][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2197.513047][T31556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2197.524877][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2197.533874][T28110] usb 5-1: Invalid ep0 maxpacket: 512 15:52:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2197.603843][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2197.640401][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.687428][ T19] usb 1-1: config 0 descriptor?? 15:52:28 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0xf, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2197.707581][T31556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2197.754375][T28110] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2197.780236][T18931] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 2197.788577][T18931] usb 3-1: config 0 has no interface number 0 [ 2197.820880][T18931] usb 3-1: config 0 interface 159 has no altsetting 0 [ 2197.850304][T18931] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100c, bcdDevice=71.55 [ 2197.880215][T18931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.926291][T18931] usb 3-1: config 0 descriptor?? [ 2198.078465][T28110] usb 5-1: Invalid ep0 maxpacket: 512 [ 2198.099058][T28110] usb usb5-port1: attempt power cycle [ 2198.121261][T18931] option 3-1:0.159: GSM modem (1-port) converter detected [ 2198.345596][T24845] usb 3-1: USB disconnect, device number 64 [ 2198.357704][T24845] option 3-1:0.159: device disconnected [ 2198.624473][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 2198.636285][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 2198.655790][ T19] usb 1-1: USB disconnect, device number 73 [ 2198.908656][T28110] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2199.038441][T28110] usb 5-1: Invalid ep0 maxpacket: 512 [ 2199.168221][T12799] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2199.218203][T28110] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2199.349503][T28110] usb 5-1: Invalid ep0 maxpacket: 512 [ 2199.359600][T28110] usb usb5-port1: unable to enumerate USB device [ 2199.438145][T12799] usb 3-1: Using ep0 maxpacket: 32 15:52:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x3}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7b6842040200073bd2a0000000109021200010000000009040000007e1ac5003b89389bd79afdc822197b30d16eb9a558733281ef39939c31d892ac8768f5e8152943ce4ba6f78ecafeb0c4096d23f5e265939cb2c7a17b47972164c4f67113c9e488d56737e51f47d94bdedba837407a2f62e2d6e3410a24d3d4b9cbb36746e7d98a"], 0x0) syz_usb_disconnect(r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x20000, 0x0) close(r2) 15:52:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xfffff000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:30 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x14, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2199.618951][T12799] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 2199.642059][T12799] usb 3-1: config 0 has no interface number 0 [ 2199.667982][T12799] usb 3-1: config 0 interface 159 has no altsetting 0 [ 2199.743697][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2199.813073][T12799] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100c, bcdDevice=71.55 15:52:31 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc7, 0xb6, 0x84, 0x20, 0x2040, 0x7300, 0x2abd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7e, 0x1a, 0xc5, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x4, 0x801, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x9b, 0xb3, 0x30, 0x40, 0x1b3b, 0x2951, 0x2a69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ef, 0x3, 0x5, 0x4, 0xb0, 0x0, [{{0x9, 0x4, 0x16, 0x6, 0xa, 0xe, 0x1, 0x0, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xbc}, [@selector_unit={0x7, 0x24, 0x5, 0x1, 0x2, 'r\r'}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x5, 0x1, "88bcbae5"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x83, "87d6a4d1"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x2, 0xd1, "d44ff2"}]}], [{{0x9, 0x5, 0xe, 0xc, 0x8, 0x6, 0x0, 0x1, [@generic={0xd, 0x6, "3b4ae1c7dc6a466c51f911"}, @generic={0x48, 0xe, "06f374ef87b40e9bf02a809caf23a4b7c6bd9c3f00c65c4b7ec0f6bc64fa2bc55d9e461441e40946596290ae2827579002340adafbf4d120a719e44cb321b56d4c90dc5882b8"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x7f, 0xec, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2f}, @generic={0x99, 0x22, "f22efe4e3350a1b6a5bfa5185cc63c942f2f278ebec171bb0f5e87cbef4ba8c0cad6651a2d7fe69fbb6cc4e68d4f7514c7f0a37705a5965d7f1c61f6829fd31fdb2a24d797898f60d06467910651d5c1ec2bf2c362512c3e57dd2847fe2389c1dd96de0c818969854f90807581631f6f070107f2bf0db5ca6bdcd993dddff3d730af2b99cebc0529e65e0eb40606be0a4c2ad040baf01d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1b, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1000}, @generic={0xf3, 0xd, "69ee6dc30c2bc5ef40bf063a0c0a13b72663c8d5d02a428d45abe573d4058b2dc0bf53e19e78c75a1da8b1ff538579a32796ecd3f22b68945b5c18a5cbf345ae016019f21ae487c7fac3e8606a673b0cf7f061b3c70ea7a91e15c55a5b0c6767759f32c02e9698ecd0fa93d490be9080981ad5080bcff339feaed9359709a759232af20c4ec3777e1a4b5b20454945446f483670e045a7e718ab4419e6f2c8bb4edd99f8144822df50fc46ecd281dc2f12074b2634fb731d4323a24c1a0dce3ba05c8fd5763bdd3e8b1f77a30cf7305b6c74493219ca71120aecce166cac9dd76016bf77095571ce2839da73e991d161a9"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0x1f, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xff}, @generic={0x7a, 0xd, "fef13fd6aad1734ca06fa5c99a3a0108768344004201888f549e1c680c7a0b0fb4477d1186f25cd09d31ba8589d489daab6eb983ebf33f037a979d5d2e356c4582de5f40aee9f70063c9435934d0060f5aa7ffdf8c15621dcc2918e76ab1693e4514723e0257938778cbf32e0d0c40f276cd4d9cfdd6eb08"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x1f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb8, 0xfffe}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x71, 0x5, 0x5, [@generic={0x6e, 0x24, "af969d49f12b9e00cb612b86b0fe1dc92677f2b493fec12090709b24bb14ff617ba2595481c36658e6ff8c7a797fb75794717ca4998effa9bf7dd1263e29e639096702b046c9886ae517b36063b3642d2c0c1a52e093bf69398b9e7d91b499791b6a74f38ff506f729dd6072"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x7f, 0x1, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x100}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x20, 0x7, 0x80}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x8, 0x21, 0x6, [@generic={0x11, 0x22, "0f1b8725ed1d7ed7a4b8564d915bc6"}, @generic={0xb, 0x21, "345a225118614439dd"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x0, 0xe2, 0x1, 0x4}}]}}, {{0x9, 0x4, 0x3f, 0x7, 0x8, 0xb, 0x8f, 0xc1, 0x1, [], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0x5, 0x8, 0x81}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0xea, 0x7, 0x0, [@generic={0x9c, 0x31, "f9b60fe471029b00bba2e3a461ca2166e5a5ce4617b3b30a67c53a73435e6eb9d2cc3e76a6bda1a146688c8f9d38edb543c62e98f225e91bc0c3a0270949eece5ee7ac72ef621a686f08e8389ea3555bcccf734a5c0470d5f4cac8be4188313a8a18e29dcee96e19d959357f98f096e8b7d96c62e47dd25c1c3e6d0514cefa0f2cb0e4c0bbc84d2223b3767ed4b1e48b144d5bce269d7193fd29"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x438, 0xa6, 0x1, 0x7, [@generic={0x46, 0x5, "83583b9218f37e150ee7676e9dfda331bf92658b2be04533bf77e7214964882687fb58c12dd5ca12d1db60699346cad1ffc512c0ef22524be8a9eb9a4c97a83e926aef10"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1f, 0x81, 0x3}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xf4, 0x8, 0x1}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x3f, 0xf4, 0x8e, [@generic={0xfb, 0x2, "4a37213da4fdb4e4f1778330f16c7a621ed42ae4b9dc45e2bfb4a62ee4733d5f2f89f90560cc59e1018ecb146e849a9731f78c81c12755be2f810c5acf3c8b48904d5658a0f193885c0bafa8e40e71b5c69a1ba8d89aba1b0d4fa9a667b8c9424396440ee1937d56986b80173f16e7e40495dc3258fbc85d0484ff5799c701b3ce4c041a4b04b41fdede13d0320eaa840c63f5765097355a45cf564dbaf1b8834d6467781d8ea63401eda90863d724c1a3281a60cb69c39ea57ae9b0fb8d3b5277a585b166ee50cfda1aae1570ef629044117fc92a7f772cacaa970012dfa3f00d0aaddaf51e373cb860f7492bce0cdec40a5f76863107583a"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x81, 0x0, 0x3, [@generic={0x1f, 0xe, "622cf79345bca21453d2b59e173e4c97c5cc2b17cb926e76d7bde8984f"}]}}]}}, {{0x9, 0x4, 0x63, 0x81, 0x6, 0xc0, 0x8a, 0x8e, 0x6, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1ffc, 0x9, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0x12}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9af, 0x7f}, @dmm={0x7, 0x24, 0x14, 0x0, 0x81}]}], [{{0x9, 0x5, 0x9, 0xc, 0x20, 0x2, 0x80, 0x2}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x9e, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xa443}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x81, 0x44}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xff, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfb, 0x7ff}, @generic={0x9d, 0xc, "f8287c655fdd629c841c3084bc6c57629cadc5b6bfe1dfa7ebe240c12a05237d426617d3d3b4159b0fc59d18f07e19e034369ac03f773d7b98bd1ecae6e354f756884734e8bc892bcf2433cfb8d48718c34908f03bba13b299b1e580951700f2971b96d25f0ce5aebf8c46a3844262e32a563fa633c6c14089766f7e6960599548a8d7d08a5bb86678a4fab7cd466881c338726851083b5bcfabbd"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x81, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x81}]}}, {{0x9, 0x5, 0x6, 0x14, 0x10, 0x7, 0xaa, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x0, 0x2, 0x7ff, 0x3f, 0x4, 0x6, [@generic={0xc0, 0x5, "383bd1719d9c826b35a3200c0013d454be3e9b0a8ca16cd61f66e3176eeb058ea44c06b365e02035a0ecd9d52eb0e5890d328011d873ff154cf9283c81908a53799a800cf0a1023bad981d56fa85a1e494e790755de47be57646ef92e3d2aa5fbf8e197f2a47dc354d7c8111165a4ec68fbea9b6b232ce91ec178efbb1f9dd258d7e273c00088bcac0805451ed6b89186b297bf724bf2679228bb44d0a360e022802d27efa9a6b21a0473b89be9a94adae76fa6864e226bc1f47accc6e0b"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x80, 0x3, 0x20, 0x1f}, 0x45, &(0x7f0000000040)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7f, 0x7, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x1f, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8a434bf54fab4b7090f154344be6b968"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "f4cc061383b17109c7b6494ae4fd3e2f"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2001}}, {0xe1, &(0x7f0000000100)=@string={0xe1, 0x3, "2a397350e44fe01efb080d53d6612ef91415f8e72bbec2c17239679cfcfd909c5a9ed4739850deada5d202bc65e1493e8c41eab295f405554691ddaee6eb564520abe57f30c077664e3b4fc4b64ea6184f387b26c5ec2bb939d102f349f397fc72620cefcb050ae6536fc390ef9c643055cc14aa06ead8f74dcd2733c73f95bb9edf17683cccae6356a073bd17df65baa7eeff0d48c8cc41ba8e20d3917036cfa119dd39654a8aa0faf156ec224f9813fd530b6b075a3ceba489573b04a5791b3d7508b3d857b4e7933ca26c1d8f469ffed4447cd78e6c6183857b993bf6df"}}, {0x81, &(0x7f0000000200)=@string={0x81, 0x3, "8de3a69fbf40445de209020373b0cffde400cd1ae7d86fafa4d243eab7ba1ca41396a615528529911759748eb85fda6029ba7d9103841640d3e739a1f82962f110683f534cc5b2011d09ed329f964b6c91ee4a644e8a66e94ddb3e2db972b730a128d8d8ffa6516cc865159e2155f9610041d6d1b415cb0d6d6d00d8e6e024"}}, {0x7d, &(0x7f0000000b80)=@string={0x7d, 0x3, "965f5e811a86f4a0883d238c431cf376706bdaed0ce7c12457cfef9f5e53f50f0650f6290645393026bf805fa4c68b49f7044eeab8804447e0640e47ba1437d76b564150eafa170ac40e256cfaa4e67a104ab1e07a85e39cc42f2d426329746ba18ed064434980f1cce004f39916129471fde6e76528d0eccad193"}}]}) [ 2199.946151][T12799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.974350][ T19] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2200.047423][T12799] usb 3-1: config 0 descriptor?? [ 2200.118461][T12799] usb 3-1: can't set config #0, error -71 [ 2200.136873][T12799] usb 3-1: USB disconnect, device number 65 15:52:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2200.208336][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2200.225683][ T19] usb 1-1: Using ep0 maxpacket: 16 15:52:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xffffff7f) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2200.367627][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.388721][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:52:31 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x60, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2200.415603][T28110] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2200.488657][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 15:52:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2200.578621][T31636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2200.665322][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2200.695170][T28110] usb 5-1: Using ep0 maxpacket: 32 [ 2200.749377][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.796128][T31636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2200.866781][T28110] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2200.908694][ T19] usb 1-1: config 0 descriptor?? 15:52:32 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0xf0, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2200.973049][T28110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.126705][T28110] usb 5-1: config 0 descriptor?? [ 2201.156103][T24845] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2201.414364][T24845] usb 3-1: Using ep0 maxpacket: 32 [ 2201.436296][T28110] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2201.524515][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 2201.535634][T24845] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2201.556492][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 2201.569674][T24845] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2201.589983][ T19] usb 1-1: USB disconnect, device number 74 [ 2201.617971][T24845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.655425][T24845] usb 3-1: config 0 descriptor?? [ 2201.716755][T24845] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2201.749654][ T4046] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 2201.767257][T28110] usb 5-1: USB disconnect, device number 36 [ 2201.787932][T24845] usb 3-1: selecting invalid altsetting 0 [ 2201.851626][ T4046] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2201.872992][ T4046] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2201.909274][ T4046] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 2201.945704][T24845] usb 3-1: USB disconnect, device number 66 [ 2201.990354][ T4046] pvrusb2: Failure uploading firmware1 [ 2202.006068][T24845] pvrusb2: Device being rendered inoperable [ 2202.008176][ T4046] pvrusb2: Device initialization was not successful. [ 2202.029123][ T4046] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2202.060376][T28110] pvrusb2: Device being rendered inoperable [ 2202.755538][T24845] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2202.818534][T28110] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2203.003930][T24845] usb 3-1: Using ep0 maxpacket: 32 [ 2203.104830][T28110] usb 5-1: Using ep0 maxpacket: 32 [ 2203.124998][T24845] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2203.146967][T24845] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2203.177705][T24845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.209482][T24845] usb 3-1: config 0 descriptor?? [ 2203.286798][T24845] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2203.304872][T24845] usb 3-1: selecting invalid altsetting 0 [ 2203.308384][T28110] usb 5-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2203.315333][ T4046] pvrusb2: Invalid read control endpoint [ 2203.332978][T28110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.344588][ T4046] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 2203.344639][ T4046] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2203.344653][ T4046] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2203.344664][ T4046] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 2203.344681][ T4046] pvrusb2: Failure uploading firmware1 [ 2203.344691][ T4046] pvrusb2: Device initialization was not successful. [ 2203.344700][ T4046] pvrusb2: Giving up since device microcontroller firmware appears to be missing. 15:52:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xffffff9e) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:34 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x300, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:52:34 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7b6842040200073bd2a000500000109021200010000000009040000007eb7c5003afea2d2af2e42541646549a4fc5dc4d9dfd4e17cebee93511725bdab507ca008b2db1d1dfedeba5ad7f299ebb1d6e31df71dcc2917e0512a66c5dcb7f486978e1d5fbb2892e7808000000e100000000000000000000000000000000881f"], 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x130, 0x5, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x4c2, 0x5, 0x1, {0x22, 0xdb5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9, 0x40, 0x5, 0x8, 0x1f}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x16, &(0x7f0000000180)=@string={0x16, 0x3, "cf0e2ee950478fb4e5cc34710368c628257cb3b7"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2801}}, {0x62, &(0x7f0000000240)=@string={0x62, 0x3, "28982029c5878c523e39131a4bece1771de466fa45ee410d662f1f49460442f1adfa50350b82a50b5f911813626e3f76630361558b802a57727003878c9f88b486f0b99d0129f9b1ad86ab238c929acb6d003f3a5d5940c073531bf6fdc0673e"}}, {0xa8, &(0x7f00000002c0)=@string={0xa8, 0x3, "e17f28869f61cfda96e65856abefdf2d1913022ed2f57dfd2a10f9be92013f77721ce1eab5b63fe943f675cb46a4288bda6da41297f50ae183887228241df1fa03a353d7aba181f13ba3bf5ce8a21d886a43470a2b78c1c0c123adca8f3222c3cf631bacec26be6d463f1a2d46ac8402fa3dc00daa5ca84f3c0cb72711aeb4d72fdaabf47a384c7fb180411d31f06832baf55c24283680bd641466a9826a2459488783cab5e7"}}, {0x93, &(0x7f0000000380)=@string={0x93, 0x3, "347cae677d60d6512f8bd7116863bb6344878b25b6a0aa86134e287331391401dbe20bc290e637add65f1d45c5334d2c6208b1e17e2a3c3ec5a44f74644e3107ba989626fbcda8411b2567811e3f1bc843bbd55f1f3e7737c02d693bbba8fd35c6f40b1cd025e6e6b0a5c8c67c9a1aecb911d945cb9466010b6557c976254d11f67938b30f8ba2d71a01e37f70d91372f1"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4ff}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f0000000500)={0x0, 0x10, 0x9b, {0x9b, 0x2, "7403482eb7f51cd6a96934c994b00013445a572bc3f1ecb059429bd281c4366c5939b7ed41963e27356ec3fb34f90cd190b778fadd45e9facc2dd6aff3c70b1c13899d0cfd03441066ff8ef7127e39fb5babc69432b909894b8e9b873479931fa0f1b9e7f4c6f17209d6381b33ebca6436a693831a81f1c05af525d0c8b468a33d1d37a11a8a5c908fc7d8f602e9a073fe849af97d82e213b7"}}, &(0x7f00000005c0)={0x0, 0x3, 0xec, @string={0xec, 0x3, "78eb63c25caf6b20599fdac15cad871fe77b2f3fb26dffb739aca9b61a4d604cdd67df76b040fe9aab301629179f76314578c9b92a34bc117df01a6765c5f5ebd9710fede469ffdad301b01639dd083d4f5dc5246f120ba481733042597a432389d851c7f79e3e626d017ca5050e82926a89a244dddf15104cc7c588974ddd96dfd309c158823cbcb07eb299ba0dee63afeb229822fae3b66285cb5ef99d69d90ca4c79a99fb834f6e0d17be27d952469eb6be947ad9afbc5f2cb38488f93a598865731d6b87b8e08398bb6e526beb4f267f465f5fff260ef3371f8ed83259f4f875c1def6d08fd1a902"}}, &(0x7f00000006c0)={0x0, 0x22, 0x21, {[@global=@item_4={0x3, 0x1, 0x2, "e8225ba8"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0xa, "d64e423f"}, @main=@item_012={0x1, 0x0, 0x9, ')'}, @global=@item_4={0x3, 0x1, 0x8, "5f2c8f53"}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0xa, "82e97386"}, @local=@item_4={0x3, 0x2, 0x1, "8351329a"}, @local=@item_012={0x2, 0x2, 0x0, 'Yu'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xff, 0x1, {0x22, 0x4cd}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x31, 0x1e, "5da10a542bb4dfa2452bd3387dcf4db329b766a845b0c67db1cea209fc0e"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x1, 0xd9, "363a170a45c091be3d8713ba06c331cecc930996e74e1caa3a6dccbfcb492f79a491ddda5740d43021bc7fb8fd4ca096653529a6e28a0d2c66c6882d39d8d31579cc763044bdc01cb690bc6b79969aeb676c0e8d0fee0c10265a6a75701375b8176d78f31964f37a18b1c91e8ce778038a125fac865d73a74e3e8419e7c3c3971a2356b65da0346e618a9d49c6f5c274b18f045514cfbce77896062a2f08fcdf65fd2bec59f9f3ed7a1e14401d33bc53f4a66f2df5839a266dc688b577b44366678091f263ddc2e5cfe2c32df2cd813947a43f8b2438ec5d3b"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x13}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000009c0)=0x8) 15:52:34 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000c7b6842040200073bd2a0000000109021b00010000000009040006017e1a45426492fc0ab209550000"], 0x0) r0 = syz_usb_connect$cdc_ecm(0x3, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x6, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "f932ccf9"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x7, 0x939, 0x81}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0xbe, 0x8, 0xacb2, 0x7}, @acm={0x4, 0x24, 0x2, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x1, 0xe1}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x80, 0x0, 0x2e, 0x40, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1030}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xcb, &(0x7f0000000340)=@string={0xcb, 0x3, "21314bb0159de6e712d23097d2218d36c84658910fb86b9705e2da4e022b5117db3ea5cbb85369886de29bf6404006b2eaa6856e3800e380dddd479cb5cd0ee1c85486d5ce50f105b59fb2f5cf982e726257f1023b89a83d5f3f4fd1d8b892cbcfd6100018646cdec3e58ac841aa27861823ae5b751c0c82dfc01e7223ac6c3da8e1f350c6422afbacb0d56d3ef2f7ede1ef505536723a367e73a4ef4095d10b64d008ee641238227fc6905e410c657bfba5c5c1e7883e040d0958783987224b27112ff2c9dedd092c"}}, {0x8, &(0x7f0000000240)=@string={0x8, 0x3, "4b91726d84ce"}}, {0xe0, &(0x7f0000000440)=@string={0xe0, 0x3, "dcea1099f0e59b10203734e7963e87f2079ea792d7faf35fab3197cccec1ed90cf2075bc7550aef11d8b87c09684dde368a0e90e2d6c090f1f1732163e6ed3b1e366158f3730f4faf1510ed86d0fcaf563afa43cb092df783f65338371f608af5b261cfca52a377d2aefe3e1344a0b6e9e1c495d6b5b02890c4b95751563eef1d09a4416a5ddf0505b2bb38e7f01d3338cb4987c50d4902c3dac5b679d5e9eaabc41ca02daadf59cd7b7dcfc0b422fadd76254daef213b9bec99eacc3d406ad34256b21f1f51c9c8a358f2c4d2d94f245e3bf542b818e26962cc636d0f35"}}, {0x12, &(0x7f0000000280)=@string={0x12, 0x3, "3a63d6ffc36dcd06903cae8c6a4f8bdc"}}, {0xfb, &(0x7f0000000540)=@string={0xfb, 0x3, "0b100c07266938e5381c026309332616ba368907d2179d921f67bd447fbd56447e6ac378688ec7f4c4058e1a976234dd3386d215ab84fa5569a954a2f89611e8bae0232b999ba3afc7b2e1a956a8d63ff4da16f9e121e6af7ac242c353dcfaeaddeeee35569b084330fbe2b9b4fef25f2f90ad10d43d96fae2b471f83ff6b9f1a0a73ce7cd4cd1a7641333a3d30a7d34d4bc61325bfc75c122686d65a3dca537a8ed3a6bf91706b50edab7c4cd68afced10965aed025cb8045b2810a088c979b2146efdce08c200df4731822e8d0e99022c2673bbd42f5098538264b4e91b420baa5947b6d10388e742f14aed484e7b87a62e5c7d9edf86ceb"}}]}) syz_usb_connect(0x6, 0x9c9, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x4e, 0x4d, 0x97, 0x40, 0xbc7, 0x8, 0xa0e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b7, 0x4, 0x1f, 0x3f, 0x90, 0x13, [{{0x9, 0x4, 0xce, 0x20, 0x1, 0x66, 0xf2, 0xc8, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x4}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x4, 0x6, [0x3, 0xa, 0x6, 0x8, 0x9, 0xa], 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x40, "1a5771"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x4, 0x3, [0x1, 0x9, 0xa], 0x9}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x9, "6a64b3"}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x9, 0xa, 0xa, 0x1, 0x5], 0x5}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x0, "c4420cab6582"}]}, @generic={0x2e, 0xc1cf572593ca4b2f, "257898b4adb5a693a35785c6d94ec64e65cc6d65b0dd9b9eabb476c5d9cb28148e9bf5583f6dc57a4524c0b7"}], [{{0x9, 0x5, 0x2, 0x0, 0x80, 0x0, 0x6, 0xe1, [@generic={0x90, 0x4, "0c2231c83424b3d06b4188009d026fa91c1bfed5794cca20ada187042a57d0dbf000336c85e5893e123bd2521670f2251ce785912463db0800cc17380f6ff96a7d5ad6a2b7a153016f0e5af8ec2af77709e61c0e776200b5c088de281b6afb4b819182b48577ed1c4483083d65476ccc66480d0f80e11561153bd3b7db195bed1cee32ab69c7ecf570f89360d25c"}]}}]}}, {{0x9, 0x4, 0xbc, 0x2e, 0x8, 0x64, 0x2, 0x20, 0xa2, [@hid_hid={0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0x530}}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}, @generic={0x5a, 0x3, "db25e453b16ee7d977b3cb03a3d88dbec7bf9460a14995e9cb226b982da2a33e14675ce56212240a73e5f2812a43a6f8f7c9a1303166e4e6480c2a44b3bf14d2aae766132780d853bb39ca20ca57745d0b72387ac0288693"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x210, 0xac, 0x6, 0x1}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x2, 0x7, 0xcd, [@generic={0xf7, 0xe, "ee0e4c00a3db05c5afd3d09a57a0a132dbaef4bdf281a8976b3586dc8bc3286d968e27b6c6898064fe42c32f54f237ee5a05b7612727ae216686bca129737d17a0401556f5ef2afd7ead34ed5191d64503a0aa4c7d6ec78b214fc0bea5928b4b4845df32e151ee0a91e79216538192d262aed0c65e8994781644b15b9d2c63b8518e34526b171a267b975b3830efd8fedd7f3edcbf1cd3ab3bdd4c1f0181e7d96ab16b723dee61e8a0c0b8241d9e583900ec653215df5a981b2fb231c670b709cf28d1087df10f4667d00c3ec90fd2756050087457e1e004b21203300e9f2d372d5e72362f085df9a42b9ce6a6a631aa76d084528e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x54}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0xf8, 0x9, 0x4d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x1, 0xff, 0x3, [@generic={0x3e, 0x22, "8df53e5e395338b900e17a5a74d1dcaec6790718c1c142d776e5725c7f499391bc16a7e0c84c048e25411f804fe371a60ac13345c20213b6ca3ad7a6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x47, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x20, 0x2}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x7, 0x7f, 0x65, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe3, 0x1}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x3, 0x7, 0x8}}]}}, {{0x9, 0x4, 0xf, 0x0, 0xe, 0xff, 0x3, 0x48, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x895, 0x3, 0x800, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0xa}, [@obex={0x5, 0x24, 0x15, 0xfff}, @obex={0x5, 0x24, 0x15, 0x8000}, @mdlm_detail={0xaa, 0x24, 0x13, 0x4, "ff7c00e50c1e74d0830ff92bc43bc51760279670a1103b5b5c13c5bbca4815b37ac5d0ea29bea77141b2239c6481f1c081a6c58134d645d39ca4886e68321393e9fccdda81f2fc3013df83bbf33a88c501d26fa84a034bd06d42c4c3d9bae97a06fe21a92d272715abe2a70d325044926081661ecae05ba7b6030ef03788cd1f82601bf4577b238ca3e77fd075dc876a0b6933214998922a3849da8496af9146692359dd247b"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0xfb, 0xfe, [@generic={0x3f, 0x0, "b2f90e0123a37723b510e1489b28e4a7a923bb6de016eed6ea8a532ed51c82373e49dd802ca66c153f915fc199f0e162d6476404367cb6b7944bf6373d"}, @generic={0x9a, 0x23, "068b77e54d6d391ec86000d9d9b9b1b098fb1548926890fc3aebaabcedaeef1a725dad8517a6ff546c3882385608b6997f1d384929f5710bcd0892915db820142e5dcfcd74be091ee2f5477242c5e24cc91d1bdffa97e64add859afcc0f1eb707d2977bbb8d2c18a87d57e54d2b8a1a0e66eae5202b2783753b2399b84e9bc37c17419c778ee0f1afbb4a8520e906ed3038bc718ca5e148f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x5, 0x1}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x0, 0x0, 0x1, [@generic={0x34, 0x24, "1c3ad3b7b0372bc2ef971a8a40ac7b84045993796115efa4116e7a94d312bbc4d25d3ff9d9385c17c2d3c71b42acf95e90da"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x7f, 0x8, 0x62, [@generic={0xb5, 0xb, "6bf65eee09c73fd6787e23d5bdb382eea63ae79f86c6cd8580b697b8b37049da5771ca0e363d6d53e000161d07d798850d22d86837030b29bb260caee3ccc53ddb84ebee2e0960155774c999a596a363c40ca8f2085c370a4d4bdad6ffd73b8c236b0a5bc7bf4d3cfa20359ee29d78f1f1af7059e1af13357a93e4d19af541200b8c289d7691cd5be8c916712c877611389005a6de221c735d9fcd2a733ebba3aee8e21011187922a071d2462966b96ab5f794"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x5}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x9, 0xff, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xca, 0x0, 0x6}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x20, 0x8, 0x3}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x8, 0x8, 0x8, [@generic={0x68, 0xf, "57005d0333c4fc152ca436259e8598fe650bc16d83db19b7f75b3748f89856dbfb605b2ca4e020c6840c4eefc64f299b3e67be041acdddaace24c166fa68d606812c8ae9056c1899fb4e8a822cef1efec76aed6b2b67dc05b78d526dd94774caf31194be650f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xfd}]}}, {{0x9, 0x5, 0x1, 0x55b0a1e21fa70078, 0x3df, 0x1, 0x1, 0x81, [@generic={0x9, 0x34, "fc0141cbbe9f42"}, @generic={0xd2, 0x30, "c61183f9564b430943e6e290df024a22ecd3570a9294755335147c8686eb369d24c9af407cf4b4e991a7fe3facb531c628d169bf1758717ab57ce98f8a1ba38db021df8b0e6b25f851aa4bbeebc6e0060e9bf08e5d541589ac5a5497dacd19eacae73f90c39be621fa2a61d75e3cc0bf39a0a79b664d9efb716daeddc1ec2b99fe8075f9deea648ef42f273fa6aa31574869cba2e9b599f6cc41bf50cf5133e8113c0b8073e619f0f56f5c9633b4225913e89f13e7f09bda407ea4886b949d7a0cd3003ec7d10b60c5b1ce48e989cb19"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x6, 0x2, 0xc0}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x6, 0x4}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x5f, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xffff}, @generic={0xd2, 0xf, "365a0c3fac3b690fcd010484d81fc5788fede9239c2b07814d10ecf31e0ea2ef9e99b0f1f5c557a8f3e666941bda20c74248f198b3cefe4580d1f5bc53c541a441841def26a3477ba4a4dba7f526116b2dedccf93ced9853f14454e3dcd0d0dce06831aeab221dd2e5f8b7ac06992c81671807e0ce12bed11536e0a382a4e8a93c83dd7ba6f4b5a81e2973ac2dfb98e2e2da816b51ba11cddd4aca97730bf809962f089bfeb22ed750c07b925d559246024d5d8b4115151a6d07496f0c763fccbbada410d6fc50c3222456ccf23ac953"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x7, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}]}}, {{0x9, 0x4, 0x59, 0x0, 0x6, 0x3b, 0x89, 0x60, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x123b872f59f22ffe, 0xff, 0x3f, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x81, 0x6, 0x5, [@generic={0x3e, 0x2, "7eaaed19ed120d009b7661a159c365332ef64b83d6334ab9fb381e353e429fb02f1ac4e3df6ccc6fc686c434ce77277cd384c5f16414c1f7dba2c7f0"}, @generic={0x96, 0x8, "dd8951d8ea2b19a2652356fcea5fd8c6f91957dcb86ccfe0af40f51df174c8ca5361d53919be34f57e6f96a190cdc64666cf5283c143a5310a8577043bfd91658a286bce9494abb13dce67aa90eb696d479c543763019c9fa6732ca8b460dbe82c10094fa071e19f458411f16fb697d98fb8bb0fd7cea95096b5073fbeb0e5be39b818c961adb24565fa68eb0ed81921586c1cba"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x7, 0x4, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x8a, 0x7, 0x3c}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x5d, 0x0, [@generic={0x3, 0x6, '\''}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xfc}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x1, 0x4, 0x40, 0x0, 0x9}, 0x8f, &(0x7f0000001100)={0x5, 0xf, 0x8f, 0x5, [@generic={0x47, 0x10, 0x3, "9206189b18e3bf6b04bd50aeca26258af465bcd937a90309881ebeb70113e27550084c4bfbb7acb7e79772ce326f7e0aec19852c0c3e6824454013921bdce7b080a6b268"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "425ef4797e723ac5dad632a0b20fa9eb"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x1, 0xf000, 0x2, [0x0, 0xf, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "cadfdba75ed0302a2098dd2bd16b7a4d"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x446}}, {0x95, &(0x7f0000001200)=@string={0x95, 0x3, "23833df628ef635b1d7ce0025bf42a97aad351b464c5b0240573a4918cabf9afc8efe03bd21288ca0689c6c2fd2b80624d350d51750c007f03609f967462ddee83b057e23a2f84e01ba7052f4271946bee62a1af6b08f3bf35c7fc5ad11e94a37f0d36d55a4a1372f97315c75b404aee44e209f84e4030b14df5c3fa5184e9e6d17133aea9216e5a7fc9886c4de89b5e1fe48f"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xb7, &(0x7f0000001300)=@string={0xb7, 0x3, "ab84ec3637afc929f56ca06c8f7d81129aa4ce98c164ca9b0097ad9147d3e7771f3c2c089d1e8104bd028cd20e0fe9a7e8ab84e34c44bed8aa27864146cad2081b97ae5acdab1c2d407ba018882ac9d3bf93b990b61204ec4c992b664fd84dbe7403e7e3330bf5cae701f4250e5ff297f3614ee8edf5fe3d0060c13eb0bd9abf1ae023fc5ff6028d2c83a10af1054dd8c7d672267df12a32f94171633c56516ef0b6f0085cb63958b1e69e11cf67a643c2fbf84be1"}}, {0xe3, &(0x7f00000013c0)=@string={0xe3, 0x3, "0722cbdb259bd9c80d72aba27cb0a09af400cde41fb1705c07e85b846cc13cdc41e0cd7957b1a54c0e003ab1b6f0ba3f78f93e0d36dae44242ca4c8b6c9023be84f6a02a20099508e3dddbce743e7e0d5fd02626591b1e221a31c4bb7cd55316fea6842a9664d205a88be9702ff1c08a8c134d200b917b28c44bc7541f95e73253951e590ba154a0921b551a772d57b514a0c772d6117040ddee6d60c7f815f1fc46cbf174d7ec50155fab6d5463e1c5179ea114b224f114b5f68c1ea7a0ea9d544739ccee164f3af02feb265d5839e958afa31a01d9902ff98e3edad892b1089d"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x3001}}, {0x6b, &(0x7f0000001540)=@string={0x6b, 0x3, "83d4337c3f5c313d412f4d3b2969dabebbb590576be67e354109eb271c3732e82427cf4f33839b5f260f682dd4a50d98915a8f1861384ce8232e97f48b436507a3cba4d814f2821c52afbdb670bda0178fb27013c868f299ac86baf0703f658a26e29bb574846a858d"}}]}) syz_usb_disconnect(r0) [ 2203.637055][T24845] usb 3-1: USB disconnect, device number 67 [ 2203.644750][T24845] pvrusb2: Device being rendered inoperable [ 2203.685168][T31704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2203.762385][T28110] usb 5-1: config 0 descriptor?? [ 2203.885937][T28110] usb 5-1: can't set config #0, error -71 [ 2203.897721][T31704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2203.970004][T28110] usb 5-1: USB disconnect, device number 37 [ 2204.004630][ T19] usb 1-1: new high-speed USB device number 75 using dummy_hcd 15:52:35 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x500, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xfffffff0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2204.256140][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 2204.376513][T31745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2204.417666][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.528671][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.549348][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2204.578333][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2204.596686][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.616573][ T19] usb 1-1: config 0 descriptor?? [ 2204.652036][T31746] bridge1680: port 1(syz_tun) entered disabled state 15:52:35 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x600, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0xf0ffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2204.860619][ T8655] usb 3-1: new high-speed USB device number 68 using dummy_hcd 15:52:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:36 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x700, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2204.988331][T31765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:52:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2205.155112][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 2205.166044][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 2205.180644][T31767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2205.265652][ T19] usb 1-1: USB disconnect, device number 75 [ 2205.616957][ T8655] usb 3-1: Using ep0 maxpacket: 32 [ 2205.626550][T28110] usb 5-1: new high-speed USB device number 38 using dummy_hcd 15:52:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x100000000000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) [ 2205.727168][T31793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2205.787880][ T8655] usb 3-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 2205.807980][ T8655] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2205.849851][T31793] bridge1695: port 1(syz_tun) entered blocking state [ 2205.851019][ T8655] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2205.884358][T31793] bridge1695: port 1(syz_tun) entered disabled state [ 2205.908127][ T8655] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=2a.bd [ 2205.936385][T28110] usb 5-1: Using ep0 maxpacket: 32 [ 2205.947024][ T8655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.955730][T31796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2206.009671][T28110] usb 5-1: no configurations [ 2206.019240][T28110] usb 5-1: can't read configurations, error -22 [ 2206.031160][ T8655] usb 3-1: config 0 descriptor?? [ 2206.227763][T28110] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2206.316557][T31730] udc-core: couldn't find an available UDC or it's busy [ 2206.337263][T31730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2206.524444][T28110] usb 5-1: Using ep0 maxpacket: 32 [ 2206.578818][T28110] usb 5-1: no configurations [ 2206.587760][T28110] usb 5-1: can't read configurations, error -22 [ 2206.608662][T28110] usb usb5-port1: attempt power cycle [ 2206.658669][ T8655] usb 3-1: string descriptor 0 read error: -71 [ 2206.672160][ T8655] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 2206.695490][ T8655] usb 3-1: selecting invalid altsetting 0 [ 2206.711456][ T4046] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 2206.735374][ T4046] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2206.752393][ T8655] usb 3-1: USB disconnect, device number 68 [ 2206.759906][ T4046] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2206.788882][ T4046] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 2206.807849][ T4046] pvrusb2: Failure uploading firmware1 [ 2206.826631][ T4046] pvrusb2: Device initialization was not successful. [ 2206.862523][ T4046] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2206.887680][ T8655] pvrusb2: Device being rendered inoperable 15:52:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x145042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) syz_open_dev$mouse(0x0, 0x9, 0x0) ioctl$CHAR_RAW_PBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000000c0)) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc7, 0xb6, 0x84, 0x20, 0x2040, 0x7300, 0x2abd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7e, 0x1a, 0xc5}}]}}]}}, 0x0) syz_usb_ep_write(r3, 0x0, 0xcf, &(0x7f0000000000)="2d1d78ad1be20818bcd2ffeb158ca90131bd6a5012d6a640ab5e087a96c563107daa88417df67c067cf3bfe381688c1c201fa10d194d2ac1dee6f3ba4b6b1380ac76dbd29948dece989fc80e66824b5d4685b65e4e333637f4d7bcc5fdca29917b0c4047fea975845466598e45bd558204fad02364bbdf7890660e0f4de049d6fb7b8eb0fc170489a653ff578338d67ba9dce6ceca294328c58324e13e9c2d8df75359b8cc658967431613ff35e14abc5b994acbb378edd2c70e5af50a6ef528e189fa327c6b3e3ade6171269673c9") 15:52:39 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc7, 0xb6, 0x84, 0x20, 0x2040, 0x7300, 0x2abd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7e, 0x1a, 0xc5, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x10d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x46, 0xd2, 0x47, 0x20, 0xbda, 0x8754, 0x2d87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x1, 0x1, 0x1, 0xc0, 0x3, [{{0x9, 0x4, 0xdf, 0x4, 0x1, 0xf3, 0x67, 0xc9, 0x80, [], [{{0x9, 0x5, 0x9, 0x2, 0x40, 0x2, 0x8b, 0x1f, [@generic={0xd9, 0x2d, "601e1d52150d2264a3766f62572374d6c2d31d3c74a9fe0780c02a9e7975221c713f89c7395a07180e512025f204868ee5d9df8ec2f548196bbc30c174d193a77f273f644937fa353d1d8fe91ead4d83b9bacf6b2b3f47ec87dd76e2a5bfe6ea2f577ffa55299d94b176b0fe9ede3357efd45ec9d94d609036fda6a25df439948f04fbdfd28b086f9d0fcf707f35f6330ec1b3d4957047d4a6776231654b7e747e82f616280af87701f3b4a24049a9b54ac5868cd572e0426c892d588cc692102d611821633b286ba01a07be5d44798a37b917e5836501"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x4}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x1, 0x7f, 0x6}, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xd8, 0x8, 0x1, 0x9, 0xfc}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c49dbda9e9ba92889881d5df8d19fca6"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0xde, &(0x7f0000000200)=@string={0xde, 0x3, "3deab16d3053a5c7845025a61ff25aa7992a76907179f1c0423d0e20c732d878ce8a250f8d61198df7f5dd8198630cd85f8658359ab1f819e11d259037cd1d0f8b46fdd0620bed97adaaba6c666c85d290d023309ea703af7d6ad121f2992940329671cd5742f22a53c46c3e5671d9b1fe837ea1d7e95b1969dea7c74465f77586e0e7bba1983ed400945ad5aa54295e76cac3233b03edfbd6cb09f8540ad75fd7b04324729155951d63551dc2927093d20df8fe09c53bfc77589b1c7ea13c86e4bbb092d11cefd362cc2eb1beb7d269975c371a75572cc7d1fc0004"}}]}) 15:52:39 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x824, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) 15:52:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) 15:52:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:52:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8100, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001900000425bd701d9fece8251d01010005000d0081000000c5ce1c59e013aefeb5cfccd0dff5001bbcedb80af4f51d35ec6cdeef29c2e076f82eb969aa3fb8b2f8e7922bd322d8b20c5e832d50787bed1478bb98bd90de0fb487cc2e0114ca9683e123e52c9d8b02fa4232bb7d49c6ebc18d35722b230f70"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4400005a) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00", @ANYRES32=r6], 0x28}}, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) 15:52:40 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000005300)={0x0, 0x900, &(0x7f00000052c0)={&(0x7f0000005140)={0x18, r0, 0xf01, 0x0, 0x0, {0x9}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 2209.288462][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2209.925107][ T19] usb 1-1: new high-speed USB device number 76 using dummy_hcd 15:52:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd55) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000000000ffff", @ANYRES32=r2, @ANYBLOB="005dc7ffff00000008000a00"], 0x28}}, 0x0) [ 2210.028013][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2210.179750][T31841] bridge1695: port 1(syz_tun) entered disabled state [ 2210.195500][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 2210.344625][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2210.394370][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2210.465363][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2210.527802][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2210.568238][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.629835][ T19] usb 1-1: config 0 descriptor?? [ 2211.184066][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 2211.239315][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 2211.299624][ T19] usb 1-1: USB disconnect, device number 76 15:52:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2312.239963][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2312.246632][ C0] rcu: 0-....: (1 GPs behind) idle=b62/1/0x4000000000000000 softirq=195733/195734 fqs=5200 [ 2312.258610][ C0] (t=10502 jiffies g=364825 q=5849) [ 2312.264120][ C0] NMI backtrace for cpu 0 [ 2312.268656][ C0] CPU: 0 PID: 31820 Comm: syz-executor.4 Not tainted 5.11.0-rc5-syzkaller #0 [ 2312.278453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.290561][ C0] Call Trace: [ 2312.293866][ C0] [ 2312.296733][ C0] dump_stack+0x107/0x163 [ 2312.301507][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 2312.306909][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 2312.312157][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 2312.318324][ C0] rcu_dump_cpu_stacks+0x1f4/0x230 [ 2312.323527][ C0] rcu_sched_clock_irq.cold+0x48e/0xedf [ 2312.329207][ C0] ? rcutree_dead_cpu+0x50/0x50 [ 2312.334062][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 2312.338981][ C0] ? __raise_softirq_irqoff+0x93/0x1e0 [ 2312.344829][ C0] update_process_times+0x16d/0x200 [ 2312.350093][ C0] tick_sched_handle+0x9b/0x180 [ 2312.355086][ C0] tick_sched_timer+0x1b0/0x2d0 [ 2312.359969][ C0] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 2312.365530][ C0] __hrtimer_run_queues+0x1c0/0xe40 [ 2312.370746][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 2312.376756][ C0] ? ktime_get_update_offsets_now+0x268/0x340 [ 2312.382881][ C0] hrtimer_interrupt+0x334/0x940 [ 2312.387947][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 2312.394081][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 2312.399899][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.406436][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 [ 2312.412869][ C0] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 6a 95 5c f8 48 89 ef e8 12 4a 5d f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 31 51 51 f8 65 8b 05 1a c9 05 77 85 c0 74 0a 5b [ 2312.432941][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000246 [ 2312.439133][ C0] RAX: 0000000001026d8e RBX: 0000000000000246 RCX: ffffffff81584047 [ 2312.448485][ C0] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 [ 2312.456507][ C0] RBP: ffff8880b9e24880 R08: 0000000000000001 R09: ffffffff8ed31877 [ 2312.464788][ C0] R10: fffffbfff1da630e R11: 0000000000000000 R12: 000000010003113e [ 2312.472934][ C0] R13: ffff8880b9e24880 R14: 0000000000000000 R15: 00000000ffffffff [ 2312.481241][ C0] ? mark_lock+0xf7/0x1720 [ 2312.485700][ C0] __mod_timer+0x837/0xe30 [ 2312.490255][ C0] ? run_timer_softirq+0x1d0/0x1d0 [ 2312.495401][ C0] ? mrp_attr_event+0x280/0x280 [ 2312.500447][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2312.509876][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2312.516149][ C0] ? prandom_u32+0x1fa/0x470 [ 2312.520741][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2312.526997][ C0] ? mrp_attr_event+0x280/0x280 [ 2312.531957][ C0] call_timer_fn+0x1a5/0x6b0 [ 2312.536561][ C0] ? add_timer_on+0x4a0/0x4a0 [ 2312.541897][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.550270][ C0] ? mrp_attr_event+0x280/0x280 [ 2312.555154][ C0] ? mrp_attr_event+0x280/0x280 [ 2312.560280][ C0] __run_timers.part.0+0x67c/0xa50 [ 2312.565414][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 2312.570194][ C0] run_timer_softirq+0xb3/0x1d0 [ 2312.575063][ C0] __do_softirq+0x2bc/0xa29 [ 2312.579588][ C0] asm_call_irq_on_stack+0xf/0x20 [ 2312.584634][ C0] [ 2312.587560][ C0] do_softirq_own_stack+0xaa/0xd0 [ 2312.592655][ C0] irq_exit_rcu+0x134/0x200 [ 2312.597183][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 2312.602912][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.608927][ C0] RIP: 0010:kmalloc_slab+0x5d/0xc0 [ 2312.614045][ C0] Code: 00 20 00 00 77 40 83 ef 01 bd ff ff ff ff 0f bd ef 83 c5 01 89 d8 83 e0 01 83 c0 01 83 e3 11 0f 45 d8 89 db 48 83 fb 02 77 33 <83> fd 0d 41 89 ec 77 1a 48 6b db 0e 4c 01 e3 48 8b 04 dd 20 ae e6 [ 2312.634118][ C0] RSP: 0018:ffffc90018a8f4c8 EFLAGS: 00000293 [ 2312.640188][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffc90011682000 [ 2312.648267][ C0] RDX: 0000000000040000 RSI: 0000000000000d40 RDI: 0000000000000004 [ 2312.656512][ C0] RBP: 0000000000000006 R08: 0000000000000017 R09: 0000000000000052 [ 2312.665634][ C0] R10: ffffffff83881d51 R11: 000000000000005d R12: 0000000000000d40 [ 2312.674152][ C0] R13: 0000000000000022 R14: 0000000000000017 R15: 0000000000000052 [ 2312.682243][ C0] ? tomoyo_encode2.part.0+0x71/0x3a0 [ 2312.687971][ C0] ? d_absolute_path+0x12e/0x180 [ 2312.693077][ C0] __kmalloc+0x36/0x3e0 [ 2312.697276][ C0] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2312.702700][ C0] tomoyo_encode+0x28/0x50 [ 2312.707241][ C0] tomoyo_realpath_from_path+0x186/0x620 [ 2312.712926][ C0] tomoyo_path_number_perm+0x1d5/0x590 [ 2312.718410][ C0] ? tomoyo_path_number_perm+0x18d/0x590 [ 2312.724084][ C0] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2312.730040][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 2312.735269][ C0] ? sched_clock+0x2a/0x40 [ 2312.739711][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 2312.744629][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 2312.749861][ C0] ? mark_held_locks+0x9f/0xe0 [ 2312.754655][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.760837][ C0] tomoyo_path_mknod+0x10d/0x190 [ 2312.765789][ C0] ? tomoyo_path_chown+0x1b0/0x1b0 [ 2312.770930][ C0] security_path_mknod+0xf9/0x170 [ 2312.776040][ C0] lookup_open.isra.0+0x431/0x1350 [ 2312.781347][ C0] ? nd_jump_root+0x570/0x570 [ 2312.786596][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2312.792880][ C0] path_openat+0x96d/0x2730 [ 2312.797413][ C0] ? path_lookupat+0x830/0x830 [ 2312.802198][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.808556][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 2312.816390][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.822584][ C0] do_filp_open+0x17e/0x3c0 [ 2312.827092][ C0] ? may_open_dev+0xf0/0xf0 [ 2312.831603][ C0] ? _find_next_bit.constprop.0+0xc7/0x200 [ 2312.837464][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2312.843719][ C0] ? _raw_spin_unlock+0x24/0x40 [ 2312.848601][ C0] ? alloc_fd+0x2bc/0x640 [ 2312.852945][ C0] do_sys_openat2+0x16d/0x420 [ 2312.857757][ C0] ? build_open_flags+0x680/0x680 [ 2312.862812][ C0] ? clockevents_program_event+0x12b/0x370 [ 2312.868658][ C0] ? tick_program_event+0xb4/0x140 [ 2312.874329][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2312.880696][ C0] ? hrtimer_interrupt+0x6f4/0x940 [ 2312.886085][ C0] __x64_sys_open+0x119/0x1c0 [ 2312.890779][ C0] ? do_sys_open+0x140/0x140 [ 2312.895382][ C0] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.901435][ C0] do_syscall_64+0x2d/0x70 [ 2312.905973][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2312.912158][ C0] RIP: 0033:0x45e219 [ 2312.916168][ C0] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2312.936763][ C0] RSP: 002b:00007fce9666bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2312.945826][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2312.953808][ C0] RDX: 0000000000000000 RSI: 0000000000145042 RDI: 0000000020000080 [ 2312.962743][ C0] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.970987][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2312.979416][ C0] R13: 00000000016afb5f R14: 00007fce9666c9c0 R15: 000000000119bf8c [ 2313.705887][T31841] bridge1697: port 1(syz_tun) entered blocking state [ 2313.840086][T31841] bridge1697: port 1(syz_tun) entered disabled state