[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 86.354969][ T30] audit: type=1800 audit(1571809039.405:25): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.377864][ T30] audit: type=1800 audit(1571809039.425:26): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.414539][ T30] audit: type=1800 audit(1571809039.455:27): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. 2019/10/23 05:37:34 fuzzer started 2019/10/23 05:37:39 dialing manager at 10.128.0.26:38203 2019/10/23 05:37:40 syscalls: 2415 2019/10/23 05:37:40 code coverage: enabled 2019/10/23 05:37:40 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/23 05:37:40 extra coverage: enabled 2019/10/23 05:37:40 setuid sandbox: enabled 2019/10/23 05:37:40 namespace sandbox: enabled 2019/10/23 05:37:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/23 05:37:40 fault injection: enabled 2019/10/23 05:37:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/23 05:37:40 net packet injection: enabled 2019/10/23 05:37:40 net device setup: enabled 2019/10/23 05:37:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 05:41:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r1, r0, 0x0, 0x80000000) syzkaller login: [ 331.940294][T12176] IPVS: ftp: loaded support on port[0] = 21 [ 332.087926][T12176] chnl_net:caif_netlink_parms(): no params data found [ 332.157079][T12176] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.164431][T12176] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.173305][T12176] device bridge_slave_0 entered promiscuous mode [ 332.184528][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.191737][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.200642][T12176] device bridge_slave_1 entered promiscuous mode [ 332.233999][T12176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.246888][T12176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.281504][T12176] team0: Port device team_slave_0 added [ 332.291029][T12176] team0: Port device team_slave_1 added [ 332.477192][T12176] device hsr_slave_0 entered promiscuous mode [ 332.722559][T12176] device hsr_slave_1 entered promiscuous mode [ 333.003980][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.011252][T12176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.019311][T12176] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.026594][T12176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.067533][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.077974][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.142086][T12176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.163790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.173211][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.188893][T12176] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.203407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.213311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.222528][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.229795][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.275554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.285152][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.294567][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.302147][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.310855][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.321041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.331562][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.346111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.356055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.365977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.375712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.385979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.395304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.404650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.418292][T12176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.427061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.477323][T12176] 8021q: adding VLAN 0 to HW filter on device batadv0 05:41:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f, 0x0, 0xffffffffffff8000}]}) [ 333.703790][T12187] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:41:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f, 0x0, 0xffffffffffff8000}]}) 05:41:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f, 0x0, 0xffffffffffff8000}]}) 05:41:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x38f, 0x0, 0xffffffffffff8000}]}) 05:41:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x100000000000028d) pread64(r0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1) 05:41:27 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdb, 0x51, 0x87, 0x10, 0xb48, 0x3006, 0xf1aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x70, 0x68, 0xe1}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 334.522519][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 334.762436][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 334.892747][ T17] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 334.901168][ T17] usb 1-1: config 0 has no interface number 0 [ 335.065191][ T17] usb 1-1: New USB device found, idVendor=0b48, idProduct=3006, bcdDevice=f1.aa [ 335.074804][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.083118][ T17] usb 1-1: Product: syz [ 335.087351][ T17] usb 1-1: Manufacturer: syz [ 335.092159][ T17] usb 1-1: SerialNumber: syz [ 335.100535][ T17] usb 1-1: config 0 descriptor?? [ 335.146865][ T17] dvb-usb: found a 'Technotrend TT-connect S-2400' in warm state. [ 335.155047][ T17] dvb-usb: bulk message failed: -22 (4/0) [ 335.160819][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 335.171483][ T17] dvb-usb: bulk message failed: -22 (5/-1) [ 335.177415][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 335.193271][ T17] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 335.224698][ T17] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400) [ 335.233176][ T17] usb 1-1: media controller created [ 335.283122][ T17] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.319148][ T17] ttusb2: set interface to alts=3 failed [ 335.325207][ T17] dvb-usb: bulk message failed: -22 (8/-1) [ 335.331246][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 4, was 0) [ 335.341582][ T17] ttusb2: i2c transfer failed. [ 335.346756][ T17] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400' 05:41:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(r2, r1, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="b0", 0x20000141, 0x0, 0x0, 0x0) [ 335.397829][ T17] dvb-usb: bulk message failed: -22 (4/0) [ 335.403785][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 335.414126][ T17] dvb-usb: bulk message failed: -22 (5/-1) [ 335.419982][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 335.430328][ T17] dvb-usb: Technotrend TT-connect S-2400 successfully initialized and connected. [ 335.568038][ T17] usb 1-1: USB disconnect, device number 2 [ 335.618928][ T17] dvb-usb: Technotrend TT-connect S-2400 successfully deinitialized and disconnected. [ 335.879428][T12210] IPVS: ftp: loaded support on port[0] = 21 [ 336.034142][T12210] chnl_net:caif_netlink_parms(): no params data found [ 336.104925][T12210] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.112295][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.121143][T12210] device bridge_slave_0 entered promiscuous mode [ 336.132730][T12210] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.140210][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.149508][T12210] device bridge_slave_1 entered promiscuous mode [ 336.186942][T12210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.202100][T12210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.239693][T12210] team0: Port device team_slave_0 added [ 336.250323][T12210] team0: Port device team_slave_1 added [ 336.342046][ T17] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 336.427573][T12210] device hsr_slave_0 entered promiscuous mode [ 336.592052][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 336.673837][T12210] device hsr_slave_1 entered promiscuous mode [ 336.712196][ T17] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 336.720742][ T17] usb 1-1: config 0 has no interface number 0 [ 336.883077][ T17] usb 1-1: New USB device found, idVendor=0b48, idProduct=3006, bcdDevice=f1.aa [ 336.893242][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.902245][ T17] usb 1-1: Product: syz [ 336.906461][ T17] usb 1-1: Manufacturer: syz [ 336.911182][ T17] usb 1-1: SerialNumber: syz [ 336.917013][T12210] debugfs: Directory 'hsr0' with parent '/' already present! [ 336.950003][T12210] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.957470][T12210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.965415][T12210] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.972973][T12210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.986070][ T17] usb 1-1: config 0 descriptor?? [ 337.037502][ T17] dvb-usb: found a 'Technotrend TT-connect S-2400' in warm state. [ 337.045710][ T17] dvb-usb: bulk message failed: -22 (4/0) [ 337.051488][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.061932][ T17] dvb-usb: bulk message failed: -22 (5/-1) [ 337.067796][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.084449][ T3913] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.097257][ T17] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.108544][ T3913] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.124641][ T17] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400) [ 337.134120][ T17] usb 1-1: media controller created [ 337.181352][ T17] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.223566][ T17] ttusb2: set interface to alts=3 failed [ 337.229509][ T17] dvb-usb: bulk message failed: -22 (8/-1) [ 337.235525][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 4, was 0) [ 337.245952][ T17] ttusb2: i2c transfer failed. [ 337.250860][ T17] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400' 05:41:30 executing program 0: syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) [ 337.308284][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.348566][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.357499][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.367298][ T17] dvb-usb: bulk message failed: -22 (4/0) [ 337.374233][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.384523][ T17] dvb-usb: bulk message failed: -22 (5/-1) [ 337.390360][ T17] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.400604][ T17] dvb-usb: Technotrend TT-connect S-2400 successfully initialized and connected. [ 337.425290][T12210] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.493226][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.503335][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.512395][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.519577][T12179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.528473][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.537979][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.547134][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.554527][T12179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.563782][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.573881][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.583947][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.594091][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.603812][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.613754][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.623514][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.632882][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.645375][ T17] usb 1-1: USB disconnect, device number 3 [ 337.648350][T12210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.663762][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.673198][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.682118][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.691504][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.730948][ T17] dvb-usb: Technotrend TT-connect S-2400 successfully deinitialized and disconnected. [ 337.786885][T12210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.960224][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 337.984293][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:41:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000040)=0x3f, 0x4) [ 338.110566][T12226] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 338.125914][T12226] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 338.136837][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 338.405713][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 338.562980][ T17] usb 1-1: config 0 has an invalid interface number: 210 but max is 0 [ 338.571297][ T17] usb 1-1: config 0 has no interface number 0 [ 338.577622][ T17] usb 1-1: config 0 interface 210 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 338.589432][ T17] usb 1-1: config 0 interface 210 altsetting 0 endpoint 0xF has invalid maxpacket 2023, setting to 1024 [ 338.600739][ T17] usb 1-1: config 0 interface 210 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 338.611079][ T17] usb 1-1: config 0 interface 210 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.624268][ T17] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=7c.aa [ 338.633408][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.649388][ T17] usb 1-1: config 0 descriptor?? [ 338.693599][ T17] hub 1-1:0.210: ignoring external hub [ 338.907854][T12227] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 338.922518][T12227] bridge2: the hash_elasticity option has been deprecated and is always 16 05:41:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000040)=0x3f, 0x4) [ 339.013175][ T17] usb 1-1: USB disconnect, device number 4 [ 339.113514][T12233] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 339.127880][T12233] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 339.682123][ T17] usb 1-1: new high-speed USB device number 5 using dummy_hcd 05:41:32 executing program 2: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x80000001) clock_nanosleep(0x7, 0x0, &(0x7f0000000000), &(0x7f0000000040)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x400, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x6, 0x2000) dup3(r1, r2, 0x40000) arch_prctl$ARCH_SET_GS(0x1001, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x12002, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) process_vm_writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/233, 0xe9}], 0x5, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/7, 0x7}], 0x4, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000700)) r4 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmdt(r4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000780)=0x5) r6 = syz_open_dev$media(&(0x7f00000007c0)='/dev/media#\x00', 0x6409, 0x40) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x100010, r7, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x22020104}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x358}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeab}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4021}, 0x4000000) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000980)='/dev/mixer\x00', 0x42c521, 0x0) write$UHID_INPUT2(r9, &(0x7f00000009c0)={0xc, 0xfe, "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"}, 0x104) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x1f) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x8001, 0x0) ioctl$VHOST_SET_VRING_CALL(r10, 0x4008af21, &(0x7f0000000b40)={0x3, r0}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000bc0)=@int=0x3ff, 0x4) 05:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000040)=0x3f, 0x4) [ 339.943255][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 340.004220][T12238] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 340.018602][T12238] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 340.073264][ T17] usb 1-1: config 0 has an invalid interface number: 210 but max is 0 [ 340.081631][ T17] usb 1-1: config 0 has no interface number 0 [ 340.088078][ T17] usb 1-1: config 0 interface 210 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 340.099024][ T17] usb 1-1: config 0 interface 210 altsetting 0 endpoint 0xF has invalid maxpacket 2023, setting to 1024 [ 340.110673][ T17] usb 1-1: config 0 interface 210 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 340.120964][ T17] usb 1-1: config 0 interface 210 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.134250][ T17] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=7c.aa [ 340.143423][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.242790][ T17] usb 1-1: config 0 descriptor?? [ 340.248670][T12240] IPVS: ftp: loaded support on port[0] = 21 [ 340.284828][ T17] hub 1-1:0.210: ignoring external hub [ 340.433256][T12240] chnl_net:caif_netlink_parms(): no params data found 05:41:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x61) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fanotify_mark(r1, 0x83de3e0a84c1aa36, 0x8000000, r4, &(0x7f0000000080)='./file0\x00') r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2f0000001c0005c5fffdfff10d0000000200001f13000000fc0002c9130001000500000050000000aa67dfe660d7b3", 0x2f}], 0x1}, 0x0) [ 340.509150][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.516597][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.525920][T12240] device bridge_slave_0 entered promiscuous mode [ 340.560549][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.567975][T12240] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.576960][T12240] device bridge_slave_1 entered promiscuous mode [ 340.614125][T12240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.624175][ T17] usb 1-1: USB disconnect, device number 5 [ 340.640201][T12240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:41:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x61) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fanotify_mark(r1, 0x83de3e0a84c1aa36, 0x8000000, r4, &(0x7f0000000080)='./file0\x00') r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2f0000001c0005c5fffdfff10d0000000200001f13000000fc0002c9130001000500000050000000aa67dfe660d7b3", 0x2f}], 0x1}, 0x0) [ 340.686963][T12240] team0: Port device team_slave_0 added [ 340.710039][T12240] team0: Port device team_slave_1 added 05:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000040)=0x3f, 0x4) [ 340.847298][T12240] device hsr_slave_0 entered promiscuous mode [ 340.883871][T12240] device hsr_slave_1 entered promiscuous mode [ 340.922111][T12240] debugfs: Directory 'hsr0' with parent '/' already present! [ 340.933452][T12255] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 340.948519][T12255] bridge5: the hash_elasticity option has been deprecated and is always 16 05:41:34 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="7421948f94960c7f6d6f23cc3401a5a7ab38186e0b0275cbb994e6b8e52dab8c3374d3431a6264cf3b01afd5370b50db1933fdeab53e872a231c8919687238ef2bf5b7368f38bce09b5d307c3c9a53e749a23bbc423166022f8549d6eb203286d68986d516d8c2f17ab90cba1459a796d58c0dfde8ec5ab8b73c2b5e8604c538ef289dbab677aa1a9fee7b", 0x8b) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f61050002f80200fe02000f00010800080012000a00ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000)=0x2, 0x4) [ 341.003518][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.010778][T12240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.018736][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.026062][T12240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.078360][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.269775][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.291512][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.305213][T12219] bridge0: port 1(bridge_slave_0) entered disabled state 05:41:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068dfa4084c05c30672bc000000010902240001000000000904ce00028382420009058f02000000001c090502120000000000"], 0x0) [ 341.317636][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.346813][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 341.390796][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.410577][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.421042][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.430290][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.437680][T12219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.507173][T12240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.517809][T12240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.535129][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.545881][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.555242][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.562526][T12219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.571054][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.581266][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.591605][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.601910][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.611854][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.622100][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.631959][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.641841][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.651689][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.661289][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.662925][ T17] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 341.675338][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.685956][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:41:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) [ 341.748808][T12240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.794649][T12269] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 341.809382][T12269] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 341.942927][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 342.073093][ T17] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 342.082087][ T17] usb 1-1: config 0 has no interface number 0 [ 342.088301][ T17] usb 1-1: config 0 interface 206 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 342.098431][ T17] usb 1-1: config 0 interface 206 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 342.108575][ T17] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=bc.72 [ 342.117943][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) pipe2(&(0x7f0000000240), 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000200)) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)="7c385580cc2e945f6541deae461757312bc385278c23a4740efaf8b2c1e17d93a8ac0793cbb10ade65be01df904c5ce843435859bc3dbae28ed8b0fe1fabe591335c60bc901698f3ce8bd234b797ee0819569bd61e76fd9471807b73fe6f7243a23ee940824a957dc584c65cc29cfba304cac35ceb4e3cc8a6a3a4effa2d52e29a0184a75c7a4a06c7894eb37f94738fa17d186a32fe0877bd61555765a9a52a634bbd1c66fb35d4e2d20ab606382e0c0817aa5aa82c") r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000380)="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", 0x136) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8040) [ 342.179520][ T17] usb 1-1: config 0 descriptor?? [ 342.234777][ T17] port100 1-1:0.206: NFC: The device does not support command type 1 [ 342.243463][ T17] port100: probe of 1-1:0.206 failed with error -90 05:41:35 executing program 2: r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xec, 0x48, 0x51, 0x10, 0x8086, 0x1405, 0x522c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f0000000040)={0x0, 0x0, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x7) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0xfffffffd, "43db9cf2e71be920fd7912068293a71c79352a36f04cd27f9824e05673ebb7b1", 0x1, 0x3}) socket$inet6(0xa, 0x2, 0xfb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffff23, 0x75, 0x2, {0x1, "750000000000000002f6c64f2772727f6d837bb8c484809eb379637399298836aff548bce76916d7aa7199b97a2063cc3f7fe3ebfd158f7f9590c87d20063ed72bd7765bca18d1e3a0d9ca85e655230601f1"}}, 0x5d) [ 342.436360][T12219] usb 1-1: USB disconnect, device number 6 05:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) 05:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) socket$inet6(0xa, 0x80002, 0x88) [ 342.671149][T12284] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 342.686004][T12284] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 342.700479][ T17] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 342.788097][T12287] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 342.802979][T12287] bridge8: the hash_elasticity option has been deprecated and is always 16 05:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) socket$inet6(0xa, 0x80002, 0x88) [ 342.913688][T12290] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 342.928410][T12290] bridge9: the hash_elasticity option has been deprecated and is always 16 05:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) [ 342.962267][ T17] usb 3-1: Using ep0 maxpacket: 16 [ 343.031649][T12293] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 343.047008][T12293] bridge10: the hash_elasticity option has been deprecated and is always 16 05:41:36 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) [ 343.102189][ T17] usb 3-1: config 0 has no interfaces? [ 343.107901][ T17] usb 3-1: New USB device found, idVendor=8086, idProduct=1405, bcdDevice=52.2c [ 343.117244][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.162733][ T17] usb 3-1: config 0 descriptor?? 05:41:36 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) [ 343.213370][T12219] usb 1-1: new high-speed USB device number 7 using dummy_hcd 05:41:36 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) 05:41:36 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) [ 343.452116][T12219] usb 1-1: Using ep0 maxpacket: 8 [ 343.572186][T12219] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 343.580959][T12219] usb 1-1: config 0 has no interface number 0 [ 343.587518][T12219] usb 1-1: config 0 interface 206 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 343.598109][T12219] usb 1-1: config 0 interface 206 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 343.608152][T12219] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=bc.72 [ 343.617339][T12219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.629187][T12219] usb 1-1: config 0 descriptor?? [ 343.674048][T12219] port100 1-1:0.206: NFC: The device does not support command type 1 [ 343.682553][T12219] port100: probe of 1-1:0.206 failed with error -90 [ 343.875074][T12219] usb 1-1: USB disconnect, device number 7 05:41:37 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) 05:41:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1cbc99335d82e66a) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup3(r13, r12, 0x0) r15 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x2, 0x2) dup2(0xffffffffffffffff, r15) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r16 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r17 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r17, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r17, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r16, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x277, &(0x7f0000000380)=ANY=[], 0x53a, 0x20004000}, 0x0) write$binfmt_script(r16, &(0x7f0000000600)=ANY=[], 0xfec8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0x38f, &(0x7f0000000200)={&(0x7f00000001c0)={0xffffffffffffff47, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc5f2e7a1fb664ef8}, 0x4890) recvmmsg(r16, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 05:41:37 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) 05:41:38 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x100000) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)=0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe4, 0xd7, 0x6d, 0x40, 0x61d, 0xc020, 0xcddd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0x49, 0x96, 0xfd}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001dc0)={0x84, &(0x7f0000000000)={0x20, 0x0, 0x3, "49ef87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 05:41:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000002700)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31e3a457806dac1bce2d625f42d3"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) ioctl(0xffffffffffffffff, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc026") socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000780)=""/174, &(0x7f0000000680)=0xae) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000640)='syz', 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a3", 0xb1, 0x0) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000001a80)='keyring\x00', &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000)='\x03\xda<\n\x8e.rd', &(0x7f00000025c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$read(0xb, r4, &(0x7f0000000080)=""/193, 0xc1) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000001300)="780b08ba046ed129978987e9accbeacb9a66754cf0730a59358a944ee1b7e317777381b3c2ab554b2252c235eaf9f915535e9b198ba1b68b8cd79ca1f015eed54445f0922e736a51afdb8d5d101b2dfac21e622c28b71ec25ec95956da50fac4b702b5f85dbdec0241b60c949acda9cd6f0ba48d839190616f27f8d0d5bb6af1fdd16da929028903e0250d808dd687250f5a0fe3491fea19fdbb1a839282add0b1ecda3cd770adcaa97f726088a6eb7eecfe6145f843aebc3b9c40dcc8accd7f1b766a653f2803de92dee91645488913d3d8d7316eb713d7176b61", 0xdb, r4) r6 = add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)="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", 0x1000, 0xfffffffffffffffa) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0xc0044d03, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11000000000000000000010000000000000007410000000b2098000000007564662837f9c7c22a1a243ea3d40d04c8703a73797a320000000013fe00f597e716b15262118bee6725a73079ea8110529a7c660aeb3bc09e4507b15c73a2a5dc3ce7b052320132bdaa0642cddcbd22ab843bdedb0af6ac175c89fdba5dfa1198861a997f29aab1366c162199c10ed190"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x89901800}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r9, 0xc09, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x64000040) keyctl$dh_compute(0x17, &(0x7f0000002440)={r5, r6, r1}, &(0x7f0000002480)=""/147, 0xffffffffffffffbe, &(0x7f0000002580)={&(0x7f0000002540)={'sha384-generic\x00'}}) r10 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x1138c1) write$UHID_INPUT(r10, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 05:41:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:41:38 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x344000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x6, 0x3, 0x1e, 0x5, 'syz1\x00', 0x40}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x3) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x273decea603c122, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000001c0)=0x902) write$binfmt_elf32(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x3, 0x0, 0x1, 0x2, 0x6, 0x80, 0x6d, 0x38, 0x6, 0x9, 0x2, 0x20, 0x2, 0x400, 0x5, 0x9}, [{0x6, 0x4, 0xe31c, 0x4, 0x41, 0x10000, 0xffff, 0x3}], "eabd28f32ec3791934f08b1f97ad551cdd10c229130bc0a2d97807f604a946869a59ccdabf9026a82fed1eedb7fcd9aca7466dc26a7f9ed6152a579b09766f91d8bff24179fde2ad13245910afa625fbc94f5bf2ed12723ce3fd3bca2716020acf9b339a1e9e5cd497fdd99859fae51ca8c6c18347b6a6e0a7b9978cb09e946628f98106bce0bbc731141e9f531357dda85c94a27e42f600d8371529389daca7f02dc80ff624fa6af56cd4fb26daa8182995577583534257c304c5d4f92599431de951f311e9fec48c5747ecd2b6d2dc8e824c9075736cc0706b77fc", [[], [], [], []]}, 0x534) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-monitor\x00', 0x20000, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x3, 0x3f, 0x72, 0x9}, {0x80, 0x9, 0x5, 0x9}, {0x0, 0x9, 0x0, 0x2}, {0x8001, 0x1, 0x7, 0x5}, {0x8, 0x80, 0x1}]}, 0x10) r5 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x400000) signalfd(r5, &(0x7f0000000840)={0x8}, 0x8) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000008c0)={0x0, 0xc0000, r4}) finit_module(0xffffffffffffffff, &(0x7f0000000900)='/dev/ashmem\x00', 0x3) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000980)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f00000009c0)=0x387a) r9 = syz_open_dev$midi(&(0x7f0000000a00)='/dev/midi#\x00', 0xc19, 0x6502) ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000000a40)=0x1) r10 = dup3(0xffffffffffffffff, r7, 0x80000) setsockopt$inet_group_source_req(r10, 0x0, 0xa5361e5622a679ed, &(0x7f0000000a80)={0x9e, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) socketpair(0x0, 0x80000, 0x3, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r11, 0x6, 0x24, &(0x7f0000000c00)=0xffff, 0x4) getpid() r12 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x0, 0x0, @local}, &(0x7f0000000c80)=0x1c, 0x366e5a5501349c36) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000cc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6, 0x1, 0x2, 0x10, 0x8}, 0x20) [ 345.422484][ T17] usb 3-1: USB disconnect, device number 2 [ 345.556444][ C0] sd 0:0:1:0: [sg0] tag#3243 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 345.566197][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB: Test Unit Ready [ 345.567762][ C1] hrtimer: interrupt took 31730 ns [ 345.572855][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.587677][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.597458][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.607236][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.617160][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.627053][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.636955][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.646895][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.656859][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.666719][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.676512][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.686294][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.696078][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05:41:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 345.705879][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.715658][ C0] sd 0:0:1:0: [sg0] tag#3243 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 05:41:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 345.799665][T12329] sg_write: process 36 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. 05:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:41:39 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x812, r0, 0x0) pipe(&(0x7f00000001c0)) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000000a000/0x1000)=nil) [ 345.992457][ T17] usb 3-1: new high-speed USB device number 3 using dummy_hcd 05:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:41:39 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xe040, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xa0200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x81) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000240)={0x9, 0x3, 0x7fff}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) bind(0xffffffffffffffff, &(0x7f00000004c0)=@ll={0x11, 0x2, r11, 0x1, 0x2, 0x6, @random="c5c5d56d619f"}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 346.337350][T12348] IPVS: ftp: loaded support on port[0] = 21 [ 346.352219][ T17] usb 3-1: config 0 has an invalid interface number: 139 but max is 0 [ 346.360646][ T17] usb 3-1: config 0 has no interface number 0 [ 346.367011][ T17] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 346.376260][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 346.482387][ T17] usb 3-1: config 0 descriptor?? [ 346.525598][ T17] ssu100 3-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected 05:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 346.688663][T12348] chnl_net:caif_netlink_parms(): no params data found [ 346.769433][T12348] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.776976][T12348] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.785909][T12348] device bridge_slave_0 entered promiscuous mode [ 346.799134][T12348] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.806940][T12348] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.816201][T12348] device bridge_slave_1 entered promiscuous mode [ 346.852097][T12348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.866212][T12348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.903439][T12348] team0: Port device team_slave_0 added [ 346.913472][T12348] team0: Port device team_slave_1 added [ 347.166940][T12348] device hsr_slave_0 entered promiscuous mode [ 347.212628][ T17] ssu100: probe of 3-1:0.139 failed with error -71 [ 347.235772][ T17] usb 3-1: USB disconnect, device number 3 [ 347.392904][T12348] device hsr_slave_1 entered promiscuous mode [ 347.561965][T12348] debugfs: Directory 'hsr0' with parent '/' already present! [ 347.687016][T12348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.711531][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.720400][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.747619][T12348] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.760962][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.770583][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.779928][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.787193][T12219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.845732][T12348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.856309][T12348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.870962][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.880061][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.889942][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.899130][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.906407][T12219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.915100][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.925436][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.935687][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.945628][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.955507][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.966803][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.976705][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.986019][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.995824][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.005187][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.020729][T12262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.028534][ T17] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 348.038119][T12262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.073925][T12348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.383769][ T17] usb 3-1: config 0 has an invalid interface number: 139 but max is 0 [ 348.392379][ T17] usb 3-1: config 0 has no interface number 0 [ 348.398684][ T17] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=cd.dd [ 348.408145][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.432220][ T17] usb 3-1: config 0 descriptor?? [ 348.476701][ T17] ssu100 3-1:0.139: Quatech SSU-100 USB to Serial Driver converter detected 05:41:41 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xe040, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xa0200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x81) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000240)={0x9, 0x3, 0x7fff}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r6 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) bind(0xffffffffffffffff, &(0x7f00000004c0)=@ll={0x11, 0x2, r11, 0x1, 0x2, 0x6, @random="c5c5d56d619f"}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 05:41:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 348.783021][ T17] ssu100: probe of 3-1:0.139 failed with error -71 [ 348.801585][ T17] usb 3-1: USB disconnect, device number 4 05:41:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x13}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x40820000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:41:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffff83, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x70bd2d}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x100, 0x2, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x6, 0x1, 0x0, 0x0, "d3ab215ae65fecbf"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x400100c0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)='[', 0x1}], 0x1}}], 0x4000305, 0x4000841) 05:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 348.935525][T12375] IPVS: ftp: loaded support on port[0] = 21 [ 348.970617][T12380] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 05:41:42 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0xc000, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000)) 05:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) 05:41:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x382}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x380}}}}}}}]}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000140)="f8db7a35188f0e1c34db2074dc36338a55b61aa0119f760a78f9b17477a057cc2ef5473c5d741310981d69d2fcc5830748968e18cbe408b3a71371879bd33ebef122e5c089ec3bf9d29432a4a80844a80023881cd23f336cf318ddc084b98c1d47ec6d7dd182adf21fa9a19cb7db314a6c14f0b8b57e58bfaeeef3cc36c29862704ef9467b82684b10228b7116e19c5b6b57d02becbfb1c141bfbb10a2401ce84aa1419a109b2bccb6f67d884b6b96ab48231db8518047c971448f1ed2921b95ed0111ed7d8675", &(0x7f0000000040)=""/113}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 05:41:42 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaa02aaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000600400000000003000064118bd88e31579317f614aa082c00090000000000000000e00000000000007f00000100"/106], 0x0) 05:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) [ 349.407771][T12397] IPVS: ftp: loaded support on port[0] = 21 05:41:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000001e000504ed0080648c6394f25f315c03100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000040)) 05:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_MCAST_QUERIER={0x8}]}}}]}, 0x44}}, 0x0) [ 349.595700][T12262] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 349.632112][T12408] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 05:41:42 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd0, 0x9d, 0x8c, 0x8, 0x91e, 0x3, 0xe5c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x2, 0x61, 0x9, 0xf5, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}, {{0x9, 0x5, 0x1, 0x1e, 0x8}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 349.640481][T12408] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 05:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) [ 349.697131][T12408] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 349.705492][T12408] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.863666][T12262] usb 3-1: Using ep0 maxpacket: 32 05:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) [ 350.002594][T12262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.013975][T12262] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.023875][T12262] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 896 05:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) [ 350.092770][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 350.212238][T12262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.221521][T12262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.229923][T12262] usb 3-1: Product: syz [ 350.234592][T12262] usb 3-1: Manufacturer: syz [ 350.239305][T12262] usb 3-1: SerialNumber: syz [ 350.353308][ T17] usb 4-1: Using ep0 maxpacket: 8 05:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 350.474468][ T17] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 350.479594][T12429] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 350.482911][ T17] usb 4-1: config 0 has no interface number 0 [ 350.483013][ T17] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 350.510884][ T17] usb 4-1: config 0 interface 109 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 350.521094][ T17] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=e5.c4 [ 350.530945][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 350.682611][ T17] usb 4-1: config 0 descriptor?? [ 350.728403][ T17] garmin_gps 4-1:0.109: Garmin GPS usb/tty converter detected [ 350.757655][ T17] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 05:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 350.940163][ T17] usb 4-1: USB disconnect, device number 2 [ 350.983067][ T17] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 350.993953][ T17] garmin_gps 4-1:0.109: device disconnected [ 351.422337][T12262] cdc_ncm 3-1:1.0: bind() failure [ 351.434027][T12262] cdc_ncm 3-1:1.1: bind() failure [ 351.625470][ T17] usb 3-1: USB disconnect, device number 5 [ 351.702019][ T3913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 351.942813][ T3913] usb 4-1: Using ep0 maxpacket: 8 [ 352.062196][ T3913] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 352.070503][ T3913] usb 4-1: config 0 has no interface number 0 [ 352.076861][ T3913] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 352.088054][ T3913] usb 4-1: config 0 interface 109 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 352.098103][ T3913] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=e5.c4 [ 352.107397][ T3913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.145505][ T3913] usb 4-1: config 0 descriptor?? [ 352.186981][ T3913] garmin_gps 4-1:0.109: Garmin GPS usb/tty converter detected [ 352.210994][ T3913] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 352.386611][ T3913] usb 4-1: USB disconnect, device number 3 [ 352.402441][T12262] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 352.404820][ T3913] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 352.421008][ T3913] garmin_gps 4-1:0.109: device disconnected [ 352.663349][T12262] usb 3-1: Using ep0 maxpacket: 32 [ 352.783560][T12262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.794691][T12262] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 352.804854][T12262] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 896 [ 352.972915][T12262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.982192][T12262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.990284][T12262] usb 3-1: Product: syz [ 352.994709][T12262] usb 3-1: Manufacturer: syz [ 352.999404][T12262] usb 3-1: SerialNumber: syz 05:41:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x0, 0x0, 0x432}}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 05:41:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x100, 0x20000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) bind$inet(r5, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r5, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r7, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f0000000300)={r8, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000440)={r8, &(0x7f0000000400)=""/14}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r9, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @local}, 0x1c, 0x0}, 0x0) r10 = dup3(r9, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r10, 0xc008ae05, &(0x7f0000000240)=""/186) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$CAPI_GET_MANUFACTURER(r10, 0xc0044306, &(0x7f0000000140)=0x1970) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000180)={[0x1cf4, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x2000000004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000700cb417bf1551f07000091bd161bb300000000eaffffffcd3c00009f0100000000000000000000000000000b40000007000000020000007c078f0001000000000000000700"/89]) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2002, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r11, 0x4008ae48, &(0x7f0000000300)=0x10002) ioctl$USBDEVFS_GET_CAPABILITIES(r11, 0x8004551a, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:41:46 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1a) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x5, 0x4) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x0) write$P9_RRENAME(r2, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1, 0x800}, {0xfff, 0x1000}, {0x1, 0x7ff}, {0x0, 0x2}, {0x200, 0x40}, {0x1ff, 0x2}]}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.cpu_exclusive\x00', 0x2, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) pread64(r5, &(0x7f0000000240)=""/4096, 0x1000, 0x0) r6 = socket(0x4, 0x6, 0x1f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000001240)=[@in6={0xa, 0xfffe, 0x3ff, @dev={0xfe, 0x80, [], 0xf}, 0xfff}, @in6={0xa, 0x4e20, 0x100, @mcast1, 0xfffffffd}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @multicast2}], 0x68) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x5000, 0xf10f, 0x0, 0x401, 0x0, [{0xff, 0x9, 0x5, [], 0x40}, {0x8c, 0xff, 0x1b, [], 0x4}, {0x3, 0xf, 0x1, [], 0x7}, {0x6, 0x0, 0x20, [], 0x1}, {0x8, 0x5, 0x1f, [], 0x4}, {0x0, 0x9, 0xff, [], 0x9}, {0x1, 0x0, 0x8, [], 0x2}, {0x1, 0x7, 0x66, [], 0x9}, {0xfd, 0x1, 0x1}, {0x1e, 0x80, 0x7f, [], 0xff}, {0x5, 0x2, 0x9, [], 0x9}, {0x1f, 0x2, 0x15, [], 0xd9}, {0x1, 0x2, 0x5, [], 0x1}, {0x71, 0x30, 0x3, [], 0x6}, {0x81, 0xb1, 0x20, [], 0xad}, {0x1, 0x80, 0x2, [], 0x9}, {0x8, 0x5, 0x6, [], 0xff}, {0x40, 0x5, 0xf9, [], 0x3}, {0x1, 0x7, 0x0, [], 0x7}, {0x8, 0xff, 0x98, [], 0x1}, {0x5, 0x0, 0xf2, [], 0x95}, {0x2, 0x4, 0x5, [], 0x1}, {0x2, 0x1f, 0x1}, {0x9, 0x81, 0x2, [], 0x9}]}}) syz_open_dev$sndpcmp(&(0x7f00000013c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0xa0400) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setpipe(r7, 0x407, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vsock\x00', 0x80, 0x0) mq_getsetattr(r8, &(0x7f0000001480)={0x401, 0x4c, 0xf7ac, 0x3, 0x2, 0xffffffff, 0xfffffffffffffff7}, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001680)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f00000016c0)={@loopback, 0x2b, r10}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/sequencer2\x00', 0x20800, 0x0) setsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000001800)=0x80000001, 0x4) r12 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001840)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$RTC_RD_TIME(r12, 0x80247009, &(0x7f0000001880)) r13 = syz_open_dev$mouse(&(0x7f00000018c0)='/dev/input/mouse#\x00', 0x5, 0xa4d3558231ca752e) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x9, 0x8010, r13, 0x8000000) 05:41:46 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x8000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x2, 0x24) r3 = userfaultfd(0xb33aec9f076ebb5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffffff8, 0xfff, 0x20, 0x8}) close(r2) get_thread_area(&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}) [ 353.204001][T12262] cdc_ncm 3-1:1.0: bind() failure [ 353.215780][T12262] cdc_ncm 3-1:1.1: bind() failure [ 353.326635][T12262] usb 3-1: USB disconnect, device number 6 05:41:46 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x408, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="68000000000000002900000039000000ff0102c1000000004027984eabd809dbbb5e43f45f8e102900000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffe0000002fe8000000000000000000000000000bbfff216b5b75c1837ca5023e4ad4b000000"], 0x68}}], 0x2, 0x0) 05:41:46 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x8000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x2, 0x24) r3 = userfaultfd(0xb33aec9f076ebb5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffffff8, 0xfff, 0x20, 0x8}) close(r2) get_thread_area(&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}) 05:41:46 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 353.633369][T12464] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 353.709942][T12469] FAULT_INJECTION: forcing a failure. [ 353.709942][T12469] name failslab, interval 1, probability 0, space 0, times 1 [ 353.723097][T12469] CPU: 1 PID: 12469 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 353.731070][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.741177][T12469] Call Trace: [ 353.744577][T12469] dump_stack+0x191/0x1f0 [ 353.748959][T12469] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 353.754912][T12469] should_fail+0xa3f/0xa50 [ 353.759393][T12469] __should_failslab+0x264/0x280 [ 353.764379][T12469] should_failslab+0x29/0x70 [ 353.769005][T12469] kmem_cache_alloc_node+0x103/0xe70 [ 353.774339][T12469] ? __alloc_skb+0x215/0xa10 [ 353.778994][T12469] __alloc_skb+0x215/0xa10 [ 353.783471][T12469] netlink_sendmsg+0x783/0x1330 [ 353.788395][T12469] ? netlink_getsockopt+0x1430/0x1430 [ 353.793802][T12469] ___sys_sendmsg+0x14ff/0x1590 [ 353.798700][T12469] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 353.804851][T12469] ? __fget_light+0x6b1/0x710 [ 353.809650][T12469] ? kmsan_internal_set_origin+0x6a/0xb0 [ 353.815721][T12469] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 353.821660][T12469] __se_sys_sendmsg+0x305/0x460 [ 353.826567][T12469] __x64_sys_sendmsg+0x4a/0x70 [ 353.831370][T12469] do_syscall_64+0xb6/0x160 [ 353.835914][T12469] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 353.841834][T12469] RIP: 0033:0x459ef9 [ 353.845767][T12469] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.865399][T12469] RSP: 002b:00007f8ddcab8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.873845][T12469] RAX: ffffffffffffffda RBX: 00007f8ddcab8c90 RCX: 0000000000459ef9 [ 353.881936][T12469] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 353.889931][T12469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.897934][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ddcab96d4 05:41:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) pread64(r3, &(0x7f0000000000), 0x0, 0x3b) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x4) [ 353.905928][T12469] R13: 00000000004c81fc R14: 00000000004de220 R15: 0000000000000004 05:41:47 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x8000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x2, 0x24) r3 = userfaultfd(0xb33aec9f076ebb5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffffff8, 0xfff, 0x20, 0x8}) close(r2) get_thread_area(&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}) 05:41:47 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6b, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f0000000240)={0x0, 0xc, [0x2, 0x6, 0x8006]}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x58, 0x29, 0x310, 0x70bd2c, 0x25dfdbfc, {0x0, r8, {0x1}, {0x5, 0xa}, {0x73378e0d429484d2, 0x9}}, [@TCA_RATE={0x8, 0x5, {0xd5, 0x6}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0xfffffffffffffda2, 0x2, [@TCA_CBQ_RATE={0xfffffffffffffc98, 0x5, {0x40, 0x1, 0x6, 0x5, 0x80, 0x10}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0x10}, 0x0, 0x8}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) write(r0, &(0x7f0000000280)="2400000018002551075c0165ff0ffc02802000030011000500e1000c08000f008000a000", 0x24) 05:41:47 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:41:47 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x8000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x2, 0x24) r3 = userfaultfd(0xb33aec9f076ebb5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffffff8, 0xfff, 0x20, 0x8}) close(r2) get_thread_area(&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}) [ 354.269964][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:41:47 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="1203ce", 0x3}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x76e0a9c4f564ab7b, 0x4) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 354.447932][T12488] IPVS: ftp: loaded support on port[0] = 21 05:41:47 executing program 3: clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r5 = dup3(r3, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xe1f7e20f083b6837) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000000)={0x3, 0x9, "ae9bb3423d5f8d0f00fc23b74ad7ddda3eb204d6e7edeb0a716dcaf759a9d2a2", 0x2, 0x10001, 0x277, 0x100, 0x48}) [ 354.651698][T12497] IPVS: ftp: loaded support on port[0] = 21 [ 354.793234][T12488] chnl_net:caif_netlink_parms(): no params data found [ 354.889677][T12502] IPVS: ftp: loaded support on port[0] = 21 [ 354.911607][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.919518][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.928482][T12488] device bridge_slave_0 entered promiscuous mode [ 354.938977][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.946762][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.956000][T12488] device bridge_slave_1 entered promiscuous mode [ 355.017040][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.036118][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.186067][T12488] team0: Port device team_slave_0 added [ 355.206064][T12488] team0: Port device team_slave_1 added [ 355.319035][T12488] device hsr_slave_0 entered promiscuous mode [ 355.572752][T12488] device hsr_slave_1 entered promiscuous mode [ 355.641957][T12488] debugfs: Directory 'hsr0' with parent '/' already present! [ 355.676893][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.684206][T12488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.692576][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.699796][T12488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.783820][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.795419][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.836046][T12488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.859295][T12262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.868845][T12262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.883992][T12488] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.898509][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.908566][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.917812][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.925059][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.973809][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.983827][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.992817][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.999959][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.009561][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.019823][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.030529][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.040672][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.050612][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.060950][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.070889][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.080363][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.095130][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.104742][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.114345][ T3913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.128540][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.182236][T12488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.395574][T12509] QAT: Invalid ioctl [ 356.425038][T12511] QAT: Invalid ioctl 05:41:49 executing program 4: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6ba0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/502], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) 05:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff0000000000000000fc783a63", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c004da803000000000000005f15db8b850100e272690f67253655c90d4760529f1b0d7254f722aaeea14194388fc52b9106395585d9d2f54005c2eb3b8d4add6e02469eb9f9c6d867705f44275af5f52fb932e57c595279be66c9058730625b8a87f55cefd38f9d365bed8902e14def59375448489667ef256361afabad2a64"], 0x3c}}, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40200a0}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=@allocspi={0x268, 0x16, 0x100, 0x70bd2a, 0x25dfdbff, {{{@in=@broadcast, @in=@empty, 0x4e21, 0x8, 0x4e22, 0x8, 0x2, 0x0, 0x80, 0x3b, r4, 0xee00}, {@in6=@ipv4={[], [], @remote}, 0x4d3, 0x4f49de3128360e85}, @in=@broadcast, {0xb94, 0x2ee, 0x4, 0x6, 0xffffffffc70875aa, 0x50, 0x7, 0x5}, {0x40, 0x7, 0xa4, 0x401}, {0x1, 0x8000, 0x2}, 0x70bd27, 0x3505, 0xa, 0x4, 0x9, 0xd8e94a226c3fe8b9}, 0x4, 0x3f}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x4d6}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x2, 0xfc, 0x7ff, 0x8, 0x7}]}, @algo_auth_trunc={0x80, 0x14, {{'sha384\x00'}, 0x198, 0xc0, "849066b07397fd4573c0a12b647daa6f13cfa1f481a1c684f16c80c5bd9aa78120d50f64e3ce5463887e6076f4927f6be892be"}}, @policy={0xac, 0x7, {{@in6=@local, @in6=@loopback, 0x4e21, 0x3ff, 0x4e21, 0x0, 0x2, 0xe0, 0x80, 0x6, r8, 0xee01}, {0x10001, 0x4, 0x80000000, 0x800, 0x3, 0x100000000, 0x6, 0x2}, {0x3, 0xfff, 0x6, 0x3}, 0x7, 0x6e6bb0, 0x0, 0x1, 0x1}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 05:41:49 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x64, 0xa8, 0x20, 0x6bb7, 0x5152, 0xa711, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x8, 0x3}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r2 = accept(r1, &(0x7f0000000040)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80) sendfile(r0, r2, &(0x7f0000000100), 0x81) 05:41:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(r0, 0xc0a, r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000002000/0x18000)=nil, 0x0, 0x22a, 0x0, 0x0, 0xfffffdb0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:41:49 executing program 0: delete_module(&(0x7f0000000000)='\x00', 0xa00) syz_usb_connect(0x0, 0xffffffffffffff94, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x73, 0x8, 0xb5, 0x20, 0xdf6, 0x39, 0x68cb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xed, 0xe9, 0x5c, 0x0, [@hid_hid={0x7, 0x21, 0x2, 0x80, 0x1, {0x22, 0x383}}]}}]}}]}}, 0x0) [ 356.557414][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.631415][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.812321][ T12] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 356.832088][ T3913] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 356.922148][T12219] usb 5-1: new high-speed USB device number 2 using dummy_hcd 05:41:50 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x78) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r9, 0x621, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x0, 0x2, 0xa}]}, 0x20}}, 0x0) r10 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r10, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_PEER_V4={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x17c690940a9a52bc}, 0x4004050) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 357.054687][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 357.087348][T12531] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 357.097305][ T3913] usb 1-1: Using ep0 maxpacket: 32 [ 357.141516][T12531] bridge16: the hash_elasticity option has been deprecated and is always 16 [ 357.162542][T12219] usb 5-1: Using ep0 maxpacket: 8 [ 357.175584][ T12] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 357.184145][ T12] usb 4-1: config 0 has no interface number 0 05:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000040)=0xe8) setreuid(r1, r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000009438b800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) [ 357.190497][ T12] usb 4-1: New USB device found, idVendor=6bb7, idProduct=5152, bcdDevice=a7.11 [ 357.199775][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.225008][T12219] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 357.251060][ T12] usb 4-1: config 0 descriptor?? [ 357.284123][ T3913] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 357.292489][ T3913] usb 1-1: can't read configurations, error -22 [ 357.295447][ T12] usb-storage 4-1:0.5: USB Mass Storage device detected 05:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2f, 0x4, 0x0, {0x6, 0x4, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 357.352633][T12219] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 357.360686][T12219] usb 5-1: can't read configurations, error -61 [ 357.472004][ T3913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 357.484530][T12545] netlink: 'syz-executor.1': attribute type 44 has an invalid length. 05:41:50 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd, 0x4f, 0xea, 0x8, 0x5ac, 0x8501, 0xc23, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x800, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x5) [ 357.533324][T12219] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 357.585550][T12262] usb 4-1: USB disconnect, device number 4 [ 357.668401][T12550] netlink: 'syz-executor.1': attribute type 44 has an invalid length. [ 357.712131][ T3913] usb 1-1: Using ep0 maxpacket: 32 [ 357.772387][T12219] usb 5-1: Using ep0 maxpacket: 8 [ 357.812967][T12219] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 357.875669][ T3913] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 357.884189][ T3913] usb 1-1: can't read configurations, error -22 [ 357.900502][ T3913] usb usb1-port1: attempt power cycle [ 357.942262][T12219] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 357.950069][T12219] usb 5-1: can't read configurations, error -61 [ 357.963019][ T17] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 357.966589][T12219] usb usb5-port1: attempt power cycle 05:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff00000000000000000000000046bae7f2", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) r1 = getpid() setpriority(0x1, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)='\xcesecurity\x00', 0xffffffffffffffff}, 0x30) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r4, r6) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r9, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) fstat(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0xa, 0x80005, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000000)={r14}, 0x8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r16, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8020006}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r16, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r16, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7fff, 0x2, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r17 = getuid() getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r17, r18, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r19 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r19, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r21 = socket$nl_generic(0x10, 0x3, 0x10) r22 = getuid() getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r22, r23, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r4}, {0x2, 0x0, r7}, {0x2, 0x1, r8}], {}, [{0x8, 0x5, r10}, {0x8, 0x5, r18}, {0x8, 0x0, r20}, {0x8, 0x2, r23}], {0x10, 0x1}, {0x20, 0x5}}, 0x5c, 0x1) [ 358.320035][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.333398][ T17] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 358.342112][ T17] usb 3-1: config 0 has no interface number 0 [ 358.348350][ T17] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice= c.23 [ 358.357688][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.363372][T12262] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 358.377105][ T17] usb 3-1: config 0 descriptor?? [ 358.405763][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.427050][ T17] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 358.434174][ T17] uvcvideo: No valid video chain found. [ 358.611964][T12262] usb 4-1: Using ep0 maxpacket: 32 [ 358.630337][ T12] usb 3-1: USB disconnect, device number 7 [ 358.664149][ T3913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 358.702205][T12219] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 358.732218][T12262] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 358.740507][T12262] usb 4-1: config 0 has no interface number 0 [ 358.747451][T12262] usb 4-1: New USB device found, idVendor=6bb7, idProduct=5152, bcdDevice=a7.11 [ 358.756772][T12262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2f, 0x4, 0x0, {0x6, 0x4, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 358.805970][T12262] usb 4-1: config 0 descriptor?? [ 358.856063][T12262] usb-storage 4-1:0.5: USB Mass Storage device detected [ 358.932001][ T3913] usb 1-1: Using ep0 maxpacket: 32 [ 358.984232][T12219] usb 5-1: Using ep0 maxpacket: 8 [ 359.024342][T12219] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 359.049166][ T17] usb 4-1: USB disconnect, device number 5 [ 359.122621][ T3913] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 359.130755][ T3913] usb 1-1: can't read configurations, error -22 [ 359.152515][T12219] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 359.160280][T12219] usb 5-1: can't read configurations, error -61 [ 359.312137][ T3913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 359.323976][T12219] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 359.412076][T12262] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 359.446405][T12565] IPVS: ftp: loaded support on port[0] = 21 05:41:52 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), 0x0, 0x0) [ 359.589058][T12219] usb 5-1: Using ep0 maxpacket: 8 [ 359.592180][ T3913] usb 1-1: Using ep0 maxpacket: 32 [ 359.640984][T12219] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 359.673055][ T3913] usb 1-1: device descriptor read/all, error -71 [ 359.687341][ T3913] usb usb1-port1: unable to enumerate USB device [ 359.738548][T12565] chnl_net:caif_netlink_parms(): no params data found 05:41:52 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140), 0x10) 05:41:52 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000840000000000000003"]) unshare(0x8000400) ppoll(&(0x7f0000000040)=[{}], 0x20000000000000f5, &(0x7f0000000200)={0x77359400}, &(0x7f00000001c0), 0x8) [ 359.802394][T12219] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 359.810123][T12219] usb 5-1: can't read configurations, error -71 [ 359.832641][T12262] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 359.840986][T12262] usb 3-1: config 0 has no interface number 0 [ 359.847425][T12262] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice= c.23 [ 359.856650][T12262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000300)={0x180000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 359.895031][T12219] usb usb5-port1: unable to enumerate USB device [ 359.992101][T12262] usb 3-1: config 0 descriptor?? [ 360.002534][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.010131][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.019363][T12565] device bridge_slave_0 entered promiscuous mode [ 360.037633][T12262] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 360.045276][T12262] uvcvideo: No valid video chain found. 05:41:53 executing program 3: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:53 executing program 4: setrlimit(0x7, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) [ 360.109321][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.117609][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.126899][T12565] device bridge_slave_1 entered promiscuous mode [ 360.158918][T12579] debugfs: Directory '12579-4' with parent 'kvm' already present! [ 360.238594][ T3913] usb 3-1: USB disconnect, device number 8 [ 360.333005][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 05:41:53 executing program 4: setrlimit(0x7, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) [ 360.433216][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:41:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000300)={0x180000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 360.596905][T12565] team0: Port device team_slave_0 added [ 360.637669][T12565] team0: Port device team_slave_1 added 05:41:53 executing program 4: setrlimit(0x7, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) 05:41:53 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) [ 360.816877][T12565] device hsr_slave_0 entered promiscuous mode [ 360.857244][T12565] device hsr_slave_1 entered promiscuous mode [ 360.892367][T12565] debugfs: Directory 'hsr0' with parent '/' already present! 05:41:54 executing program 4: setrlimit(0x7, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) [ 361.201298][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.246365][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.255086][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.280105][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.318446][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.328648][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.337846][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.345142][T12219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.358993][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.367938][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.377968][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.388639][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.395958][T12219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.446355][T12565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.457661][T12565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.474445][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.483950][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.493456][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.503747][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.513281][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.523007][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.532355][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.541386][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.551508][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.559797][T12219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.589703][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.683491][T12620] netlink: 'syz-executor.5': attribute type 44 has an invalid length. 05:41:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2f, 0x4, 0x0, {0x6, 0x4, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) 05:41:54 executing program 3: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:54 executing program 2: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000300)={0x180000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 05:41:54 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0xd938477b966072ac) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r5, 0x7b5}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x10000, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r14 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r14, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r14, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000004680)={'batadv0\x00', 0x0}) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup3(r17, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) accept$packet(r18, &(0x7f0000004740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004780)=0x14) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r24 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r25 = socket$inet6_tcp(0xa, 0x1, 0x0) r26 = dup3(r25, r24, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r26, 0x0, 0x11, &(0x7f00000047c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000048c0)=0xe8) r28 = socket$nl_route(0x10, 0x3, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r31}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r28, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r31}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r32, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$netlink(0x10, 0x3, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r37, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r39}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r36, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r39}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r40 = socket$nl_route(0x10, 0x3, 0x0) r41 = socket$netlink(0x10, 0x3, 0x0) r42 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r42, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r42, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r41, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r43}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r40, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r43}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r44 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r45 = socket$inet6_tcp(0xa, 0x1, 0x0) r46 = dup3(r45, r44, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r46, 0x8912, 0x400200) r47 = socket$nl_route(0x10, 0x3, 0x0) r48 = socket$netlink(0x10, 0x3, 0x0) r49 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r49, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r49, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r48, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r50}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r47, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r50}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r46, 0x8933, &(0x7f0000004900)={'vcan0\x00', r50}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004940)={0x0, @loopback, @empty}, &(0x7f0000004980)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2041100}, 0xc, &(0x7f0000004d80)={&(0x7f00000049c0)={0x384, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffff919}}}]}}, {{0x8, 0x1, r15}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x34}}}]}}, {{0x8, 0x1, r31}, {0x16c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xf48}}, {0x8, 0x6, r35}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r39}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r43}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r51}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r52}}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x2008084}, 0x400) r53 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r53, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 361.932139][T12624] bridge17: the hash_elasticity option has been deprecated and is always 16 [ 362.054497][T12637] netlink: 'syz-executor.5': attribute type 44 has an invalid length. 05:41:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000300)={0x180000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 05:41:55 executing program 2: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:55 executing program 3: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2f, 0x4, 0x0, {0x6, 0x4, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) 05:41:55 executing program 3: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:55 executing program 2: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) [ 362.709196][T12654] netlink: 'syz-executor.5': attribute type 44 has an invalid length. 05:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0x401, 0x1f]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0xc) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:41:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) 05:41:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 05:41:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', &(0x7f0000000780)=ANY=[@ANYBLOB='K\x00\x00\x00 ']}) [ 363.126912][T12667] bridge18: the hash_elasticity option has been deprecated and is always 16 [ 363.181351][T12669] netlink: 'syz-executor.5': attribute type 44 has an invalid length. 05:41:56 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 05:41:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getegid() sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:41:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff7, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0xab, {0xab, 0x0, "14074b9f062e0ecf3f49571176778fdfb2383d5cabdbf784fb31826cb8793b3b92d132650268df0d21829b4ade25ba2d7785b486f323b21bc20f46c43d2ab3897a9b7f1e76f7f2b4fb1b0153634000000005050c967bbc690a8e632d7a1be36f755c875a5e306f6ab28667998b26e8c22ba8003d77694d8074ea4f94bb89af5fb2482f49164617cbedbcf8d2faa88d8cfe1db888379dfb411a36b02589f9794596bf39a65111518cc0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:41:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 363.523177][T12687] bridge19: the hash_elasticity option has been deprecated and is always 16 [ 363.572254][T12219] usb 1-1: new high-speed USB device number 12 using dummy_hcd 05:41:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) [ 363.652221][T12695] bridge20: the hash_elasticity option has been deprecated and is always 16 05:41:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 363.933728][T12219] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 363.943540][T12219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:57 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000ec77b765d1ee086f08bde1481ec6351e087e8a5b8245389dab7c33785e118368334238f8fed0052ed534b94d52247076c1bf4b4465f3bd92d02006ac1686c5e405bb1e568f8100ac825de9e6ab7e2c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="f4200000f185720f977f359afe0b0000000000006c7789231eb9da3f3bcc0d6b9aa387294b3630f9d603bd7a2ba03ffed4ea4bc3ad8e59cc4e3ee8dd89a8890089f88c204c7386bb9e6d4f070b523df9d517d208683806b2f06203d06e925d112708c9864b6253d805a6dbd4028ec898f0c9b2cc086f9d00000000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000003c0)={0x0, &(0x7f0000000340)=""/97}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r0, 0x3, 0x836, 0x8000, 0xd9d6, 0x8761, 0x7, 0x7, {r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x6, 0x1, 0x5, 0x0, 0xffff}}, &(0x7f0000000240)=0xb0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000480)={'nat\x00'}, &(0x7f0000000100)=0x54) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0xfe6b, 0x10, 0x10, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:41:57 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 363.980550][T12219] usb 1-1: config 0 descriptor?? [ 363.992256][ T3913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 364.028766][T12219] pwc: Samsung MPC-C10 USB webcam detected. 05:41:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 05:41:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00bf7b0c00010062726964726500000c00020008001a0000000000"], 0x3c}}, 0x1) 05:41:57 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 364.251965][ T3913] usb 4-1: Using ep0 maxpacket: 16 [ 364.397026][ T3913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.408367][ T3913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.421446][ T3913] usb 4-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 364.430696][ T3913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:41:57 executing program 4: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() r3 = creat(0x0, 0x1) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168) sendfile(r1, r2, 0x0, 0x20000102000007) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@remote, 0x2c}) r5 = socket(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) [ 364.483812][ T3913] usb 4-1: config 0 descriptor?? [ 364.953407][ T3913] hid (null): invalid report_size 951246735 [ 364.959398][ T3913] hid (null): nested delimiters [ 364.964594][ T3913] hid (null): report_id 9203 is invalid [ 364.979378][ T3913] hid-generic 0003:1FF7:0013.0001: invalid report_size 951246735 [ 364.987465][ T3913] hid-generic 0003:1FF7:0013.0001: item 0 4 1 7 parsing failed [ 364.995666][ T3913] hid-generic: probe of 0003:1FF7:0013.0001 failed with error -22 [ 365.154940][T12262] usb 4-1: USB disconnect, device number 6 [ 365.332141][T12219] pwc: recv_control_msg error -71 req 04 val 1000 [ 365.352434][T12219] pwc: recv_control_msg error -71 req 04 val 1300 [ 365.372480][T12219] pwc: recv_control_msg error -71 req 04 val 1400 [ 365.392319][T12219] pwc: recv_control_msg error -71 req 02 val 2000 [ 365.412259][T12219] pwc: recv_control_msg error -71 req 02 val 2100 [ 365.432180][T12219] pwc: recv_control_msg error -71 req 02 val 2200 [ 365.452227][T12219] pwc: recv_control_msg error -71 req 06 val 0600 [ 365.472092][T12219] pwc: recv_control_msg error -71 req 04 val 1500 [ 365.492063][T12219] pwc: recv_control_msg error -71 req 02 val 2500 [ 365.512242][T12219] pwc: recv_control_msg error -71 req 02 val 2400 [ 365.532352][T12219] pwc: recv_control_msg error -71 req 02 val 2600 [ 365.552337][T12219] pwc: recv_control_msg error -71 req 02 val 2900 [ 365.572145][T12219] pwc: recv_control_msg error -71 req 02 val 2800 [ 365.592180][T12219] pwc: recv_control_msg error -71 req 04 val 1100 [ 365.612429][T12219] pwc: recv_control_msg error -71 req 04 val 1200 [ 365.620717][T12219] pwc: Registered as video39. [ 365.627046][T12219] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 365.646851][T12219] usb 1-1: USB disconnect, device number 12 [ 365.921945][T12262] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 366.161985][T12262] usb 4-1: Using ep0 maxpacket: 16 [ 366.202029][T12219] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.282059][T12262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.293545][T12262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.306721][T12262] usb 4-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 366.316672][T12262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.327466][T12262] usb 4-1: config 0 descriptor?? [ 366.562225][T12219] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 366.571420][T12219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.581847][T12219] usb 1-1: config 0 descriptor?? [ 366.627339][T12219] pwc: Samsung MPC-C10 USB webcam detected. [ 366.752691][T12262] usbhid 4-1:0.0: can't add hid device: -71 [ 366.758934][T12262] usbhid: probe of 4-1:0.0 failed with error -71 [ 366.768068][T12262] usb 4-1: USB disconnect, device number 7 05:41:59 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:41:59 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x66c840, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:41:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 05:41:59 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) 05:41:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xe, 0x0, "e74a3b00080520be003f00"}) 05:41:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 366.832390][T12219] pwc: send_video_command error -71 [ 366.837739][T12219] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 366.845601][T12219] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 366.888157][T12219] usb 1-1: USB disconnect, device number 13 05:42:00 executing program 5: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) 05:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040), &(0x7f0000000100)=0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000cade6d4f1ffb5a61fff000000000000f20000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:00 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:42:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xa4, 0x57, 0x20, 0xc72, 0x13, 0x69f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x77, 0x82, 0xcb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0xac, &(0x7f0000000040)={0x0, 0x0, 0xa, "fa38ffc2af017a6e7c4e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:42:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe33e0c495f) [ 367.430491][T12219] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 367.552063][T12262] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 367.792300][T12219] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 367.801616][T12219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.810783][T12262] usb 4-1: Using ep0 maxpacket: 32 [ 367.816982][T12219] usb 1-1: config 0 descriptor?? [ 367.867013][T12219] pwc: Samsung MPC-C10 USB webcam detected. [ 367.932507][T12262] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 367.940899][T12262] usb 4-1: config 0 has no interface number 0 [ 367.947302][T12262] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 367.956951][T12262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.966876][T12262] usb 4-1: config 0 descriptor?? [ 368.232194][T12262] peak_usb 4-1:0.237: PEAK-System PCAN-Chip USB v124 fw v78.0.0 (1 channels) [ 368.452231][T12262] peak_usb 4-1:0.237 can0: unable to request usb[type=2 value=5] err=-71 [ 368.460842][T12262] peak_usb 4-1:0.237: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 368.502608][T12262] peak_usb: probe of 4-1:0.237 failed with error -71 [ 368.526401][T12262] usb 4-1: USB disconnect, device number 8 [ 369.172273][T12219] pwc: recv_control_msg error -71 req 04 val 1000 [ 369.192434][T12219] pwc: recv_control_msg error -71 req 04 val 1300 [ 369.212154][ T3913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 369.213983][T12219] pwc: recv_control_msg error -71 req 04 val 1400 [ 369.242015][T12219] pwc: recv_control_msg error -71 req 02 val 2000 [ 369.262079][T12219] pwc: recv_control_msg error -71 req 02 val 2100 [ 369.282399][T12219] pwc: recv_control_msg error -71 req 02 val 2200 [ 369.303072][T12219] pwc: recv_control_msg error -71 req 06 val 0600 [ 369.321985][T12219] pwc: recv_control_msg error -71 req 04 val 1500 [ 369.342244][T12219] pwc: recv_control_msg error -71 req 02 val 2500 [ 369.362195][T12219] pwc: recv_control_msg error -71 req 02 val 2400 [ 369.382739][T12219] pwc: recv_control_msg error -71 req 02 val 2600 [ 369.402182][T12219] pwc: recv_control_msg error -71 req 02 val 2900 [ 369.422249][T12219] pwc: recv_control_msg error -71 req 02 val 2800 [ 369.442010][T12219] pwc: recv_control_msg error -71 req 04 val 1100 [ 369.451948][ T3913] usb 4-1: Using ep0 maxpacket: 32 [ 369.462550][T12219] pwc: recv_control_msg error -71 req 04 val 1200 [ 369.470125][T12219] pwc: Registered as video39. [ 369.477081][T12219] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 369.495770][T12219] usb 1-1: USB disconnect, device number 14 [ 369.582333][ T3913] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 369.590668][ T3913] usb 4-1: config 0 has no interface number 0 [ 369.596955][ T3913] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 369.606179][ T3913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.617010][ T3913] usb 4-1: config 0 descriptor?? 05:42:02 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x33e}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001200)='attr/current\x00') preadv(r0, &(0x7f00000017c0), 0x3cc, 0x0) 05:42:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x640, 0x100) r7 = dup3(r6, r5, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) r9 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r9, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r10 = accept4$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xdc, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @local, 0x9}, @in6={0xa, 0x4e22, 0xffff5dc1, @remote, 0x80}, @in6={0xa, 0x4e24, 0x3f, @empty, 0x7ea7}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0x20}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xa48}, @in={0x2, 0x4e24, @remote}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000005c0)={r11, @in={{0x2, 0x4e20, @loopback}}, [0x2, 0x1, 0x0, 0x4, 0x4, 0xff, 0x1, 0xfffffffffffff800, 0x7, 0xfffffffffffffffa, 0xa6df, 0x3, 0x7, 0xfff, 0x9]}, &(0x7f0000000400)=0x100) bind$inet6(r8, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r8, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000440)={0x0, 0x0}) ptrace$poke(0x5, r12, &(0x7f0000000480), 0x1000) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x109000, 0x0) ioctl$KVM_GET_CPUID2(r13, 0xc008ae91, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0x1d002, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0xfffffffffffffd9c, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010001fff0000000000000000000000006a3c02c33445893569609b4eb7f94396af69821a312514bfb94eb6bda3a87390bc72c221798371b490acfc492f6a9290fe524992abfb310c53ce1b23e5da1dc45a3a17ddcdb01bf1fa434d4c7ded3ecd89eb8da9ed4d0e670a15f8e30cd1aa18b6c7bd10a923e24c7eb346f5bf1e216aced81c72fa8979596b4140222f7f21450899eb62260eab82cf9eb9f0f74f55fd44c4bfac97b03897", @ANYRES32=0x0, @ANYBLOB="c81d532934d9a327"], 0x20}}, 0x0) 05:42:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:42:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000050000010000800ca5b4335c0d51382efa"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0010141]}) 05:42:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 369.882584][ T3913] peak_usb 4-1:0.237 can0: unable to request usb[type=0 value=1] err=-71 [ 369.891560][ T3913] peak_usb 4-1:0.237: unable to read PCAN-Chip USB firmware info (err -71) 05:42:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000007c0)) 05:42:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000006980)="80dac450f45f7e24f002", 0xa}, {&(0x7f0000004900)="81708b096d00d3ffaa34656a24e1696f9e06953ac1498faf00e73f5384372f5d2c2d75f156bd632f5a917e8606101c031ca62642ddf9", 0x36}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 370.034727][ T3913] peak_usb: probe of 4-1:0.237 failed with error -71 05:42:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 370.079856][ T3913] usb 4-1: USB disconnect, device number 9 [ 370.135411][ T17] usb 1-1: new high-speed USB device number 15 using dummy_hcd 05:42:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x8ec0) 05:42:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xa4, 0x57, 0x20, 0xc72, 0x13, 0x69f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x77, 0x82, 0xcb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0xac, &(0x7f0000000040)={0x0, 0x0, 0xa, "fa38ffc2af017a6e7c4e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 370.545528][ T17] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 370.554986][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.615754][ T17] usb 1-1: config 0 descriptor?? [ 370.667505][ T17] pwc: Samsung MPC-C10 USB webcam detected. [ 370.762029][T12219] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 371.002114][T12219] usb 4-1: Using ep0 maxpacket: 32 [ 371.122340][T12219] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 371.130610][T12219] usb 4-1: config 0 has no interface number 0 [ 371.137030][T12219] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 371.146601][T12219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.156228][T12219] usb 4-1: config 0 descriptor?? [ 371.412209][T12219] peak_usb 4-1:0.237: PEAK-System PCAN-Chip USB v124 fw v78.0.0 (1 channels) [ 371.642141][T12219] peak_usb 4-1:0.237 can0: unable to request usb[type=2 value=5] err=-71 [ 371.651258][T12219] peak_usb 4-1:0.237: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 371.705969][T12219] peak_usb: probe of 4-1:0.237 failed with error -71 [ 371.724258][T12219] usb 4-1: USB disconnect, device number 10 [ 371.952333][ T17] pwc: recv_control_msg error -71 req 04 val 1000 [ 371.972168][ T17] pwc: recv_control_msg error -71 req 04 val 1300 [ 372.002147][ T17] pwc: recv_control_msg error -71 req 04 val 1400 [ 372.022332][ T17] pwc: recv_control_msg error -71 req 02 val 2000 [ 372.042176][ T17] pwc: recv_control_msg error -71 req 02 val 2100 [ 372.062047][ T17] pwc: recv_control_msg error -71 req 02 val 2200 [ 372.082176][ T17] pwc: recv_control_msg error -71 req 06 val 0600 [ 372.102286][ T17] pwc: recv_control_msg error -71 req 04 val 1500 [ 372.122029][ T17] pwc: recv_control_msg error -71 req 02 val 2500 [ 372.142124][ T17] pwc: recv_control_msg error -71 req 02 val 2400 [ 372.167610][ T17] pwc: recv_control_msg error -71 req 02 val 2600 [ 372.194381][ T17] pwc: recv_control_msg error -71 req 02 val 2900 [ 372.214279][ T17] pwc: recv_control_msg error -71 req 02 val 2800 [ 372.232335][ T17] pwc: recv_control_msg error -71 req 04 val 1100 [ 372.253258][ T17] pwc: recv_control_msg error -71 req 04 val 1200 [ 372.260678][ T17] pwc: Registered as video39. [ 372.267357][ T17] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 372.306629][ T17] usb 1-1: USB disconnect, device number 15 05:42:05 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xa4, 0x57, 0x20, 0xc72, 0x13, 0x69f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x77, 0x82, 0xcb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0xac, &(0x7f0000000040)={0x0, 0x0, 0xa, "fa38ffc2af017a6e7c4e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:05 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000}}}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 05:42:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x51}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 05:42:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:42:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_type(r2, &(0x7f0000000280)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000002c0)="581963232f421959b6313ee74f090a1614a6cab34cb3725c7ee1a847887527cc3141d18dfd0621730076e1040575a953e3820a093d9dfc53428211d997f82930fcaad3a9dc69d3f551e664990464ec53392ae15bf54161cbe13f757bd0148550887db8a3463eb95b54d6e9a25a6cf4f04c6bb04c7ea7ba68af9588954aa188b82fd615a4f3ac1dc7bfa42bffea5c100b2d76ed0297f9c9ecf1e25897cf311d2e1a1f911a855f4bf90bfc15843ace8bd28802e7fcdfdc4b13f48e56c0ed60392f9b3749f293c64e29997a22ccace51d9522ac248eb5ecf87c152f3d235ad9fcfcde73ac420e17c823bb182d821292f5143bea2f04641ac3e89a26b30cb8e69dc2") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000100)={0x6, 0x1ff, 0x1000, 0x200}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000109ee18837001fff000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0b12000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:42:05 executing program 2: add_key$keyring(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 05:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100627269646765000000"], 0x3c}}, 0x0) 05:42:05 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000}}}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 05:42:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 372.790166][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.812721][T12219] usb 4-1: new high-speed USB device number 11 using dummy_hcd 05:42:05 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#!'], 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000001500)='fd\x00') fchdir(r1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 372.934109][ T17] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 373.052248][T12219] usb 4-1: Using ep0 maxpacket: 32 [ 373.172316][T12219] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 373.180809][T12219] usb 4-1: config 0 has no interface number 0 [ 373.187218][T12219] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 373.196462][T12219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.205794][T12219] usb 4-1: config 0 descriptor?? [ 373.372058][ T17] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 373.381278][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.392374][ T17] usb 1-1: config 0 descriptor?? [ 373.446942][ T17] pwc: Samsung MPC-C10 USB webcam detected. [ 373.469733][T12219] peak_usb 4-1:0.237: PEAK-System PCAN-Chip USB v124 fw v78.0.0 (1 channels) [ 373.672431][T12219] peak_usb 4-1:0.237 can0: unable to request usb[type=2 value=5] err=-71 [ 373.681428][T12219] peak_usb 4-1:0.237: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 373.744733][T12219] peak_usb: probe of 4-1:0.237 failed with error -71 [ 373.766876][T12219] usb 4-1: USB disconnect, device number 11 [ 374.722575][ T17] pwc: recv_control_msg error -71 req 04 val 1000 [ 374.752098][ T17] pwc: recv_control_msg error -71 req 04 val 1300 [ 374.772163][ T17] pwc: recv_control_msg error -71 req 04 val 1400 [ 374.792157][ T17] pwc: recv_control_msg error -71 req 02 val 2000 [ 374.812187][ T17] pwc: recv_control_msg error -71 req 02 val 2100 [ 374.832177][ T17] pwc: recv_control_msg error -71 req 02 val 2200 [ 374.852408][ T17] pwc: recv_control_msg error -71 req 06 val 0600 [ 374.872303][ T17] pwc: recv_control_msg error -71 req 04 val 1500 [ 374.892086][ T17] pwc: recv_control_msg error -71 req 02 val 2500 [ 374.912095][ T17] pwc: recv_control_msg error -71 req 02 val 2400 [ 374.932243][ T17] pwc: recv_control_msg error -71 req 02 val 2600 [ 374.952042][ T17] pwc: recv_control_msg error -71 req 02 val 2900 [ 374.972013][ T17] pwc: recv_control_msg error -71 req 02 val 2800 [ 374.992001][ T17] pwc: recv_control_msg error -71 req 04 val 1100 [ 375.012053][ T17] pwc: recv_control_msg error -71 req 04 val 1200 [ 375.019591][ T17] pwc: Registered as video39. [ 375.025981][ T17] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 375.040994][ T17] usb 1-1: USB disconnect, device number 16 05:42:08 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000}}}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 05:42:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:42:08 executing program 2: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 05:42:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xa4, 0x57, 0x20, 0xc72, 0x13, 0x69f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x77, 0x82, 0xcb}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0xac, &(0x7f0000000040)={0x0, 0x0, 0xa, "fa38ffc2af017a6e7c4e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac050e02f646aef80001090224000101000000090400000903010200092100000001220000090581030700000000"], 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000001b80)='/dev/input/event#\x00', 0xea, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000001c0)) syz_usb_disconnect(r1) syz_usb_disconnect(r0) [ 375.324084][T12933] bridge22: the hash_elasticity option has been deprecated and is always 16 05:42:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 375.430039][T12942] bridge23: the hash_elasticity option has been deprecated and is always 16 05:42:08 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000}}}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 05:42:08 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6_vti0\x00\x00\x00\x00\xff\xff\xfd\xfd'}}) 05:42:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r2, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r3, 0x1000, 0xfff, 0x6, 0x8, 0x6}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:42:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) [ 375.652073][ T17] usb 4-1: new high-speed USB device number 12 using dummy_hcd 05:42:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x20000000000001, 0x9}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="83", 0x1, 0x41, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="7ea44b4f1f3793928648e79be6ae147f"}, 0x1c) close(r0) [ 375.742012][T12219] usb 3-1: new high-speed USB device number 9 using dummy_hcd 05:42:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8, 0x2c, 0x6}]}}}]}, 0x3c}}, 0x0) 05:42:08 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 376.035028][ T17] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 376.043549][ T17] usb 4-1: config 0 has no interface number 0 [ 376.049883][ T17] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 376.059746][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.070237][T12972] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 376.078695][T12972] netlink: 'syz-executor.1': attribute type 31 has an invalid length. [ 376.105503][T12219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.116600][T12219] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.120849][ T17] usb 4-1: config 0 descriptor?? [ 376.252509][T12219] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=46.f6 [ 376.261710][T12219] usb 3-1: New USB device strings: Mfr=174, Product=248, SerialNumber=0 [ 376.270734][T12219] usb 3-1: Product: syz [ 376.275151][T12219] usb 3-1: Manufacturer: syz [ 376.368381][T12219] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 376.386339][ T17] peak_usb 4-1:0.237: PEAK-System PCAN-Chip USB v124 fw v78.0.0 (1 channels) [ 376.595924][ T17] peak_usb 4-1:0.237 can0: unable to request usb[type=2 value=5] err=-71 [ 376.604705][ T17] peak_usb 4-1:0.237: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 376.662868][ T17] peak_usb: probe of 4-1:0.237 failed with error -71 [ 376.696496][ T17] usb 4-1: USB disconnect, device number 12 [ 377.070604][ T17] usb 3-1: USB disconnect, device number 9 05:42:10 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000140)={0x3, 0x0, 0xfff, 0x7}, 0x10) fcntl$lock(0xffffffffffffffff, 0x21, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x400, r5}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24, 0x30030}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 05:42:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001f40)={0x18, 0x4, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 05:42:13 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0xd, &(0x7f0000001580), 0x272) 05:42:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:42:16 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/238}, 0xbe, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000240)={0x0, ""/119}, 0x7f, 0xf761e495eebdc8d8, 0x0) 05:42:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000200)=0xbe03ae76d67da431) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0x9b, &(0x7f0000000100)=""/155}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00014ab80062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x46) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2) 05:42:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:42:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf5bb34219fe38a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4142, 0x0) [ 383.354558][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.469971][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.482819][ T17] usb 3-1: new high-speed USB device number 12 using dummy_hcd 05:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x46) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2) 05:42:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 383.892201][ T17] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.903861][ T17] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.032446][ T17] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=46.f6 [ 384.042499][ T17] usb 3-1: New USB device strings: Mfr=174, Product=248, SerialNumber=0 [ 384.050880][ T17] usb 3-1: Product: syz [ 384.055306][ T17] usb 3-1: Manufacturer: syz [ 384.096330][ T17] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 384.794632][T12219] usb 3-1: USB disconnect, device number 12 [ 385.532881][T12219] appletouch 3-1:1.0: input: appletouch disconnected 05:42:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac050e02f646aef80001090224000101000000090400000903010200092100000001220000090581030700000000"], 0x0) r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000001b80)='/dev/input/event#\x00', 0xea, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000001c0)) syz_usb_disconnect(r1) syz_usb_disconnect(r0) 05:42:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x754}, {&(0x7f0000000340)=""/22, 0x16}], 0x55, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 05:42:19 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x0, &(0x7f0000000100)={0x1, 0x0, 0xffff, 0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r8, r10) r11 = getpid() setpriority(0x1, r11, 0x0) r12 = getpgid(r11) r13 = getpid() setpriority(0x1, r13, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) r15 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r15, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r15, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000001440)={0x2a6c, 0x5, 0xb, 0x120, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@nested={0x21c, 0x65, [@generic="bfe6d15875602b2f7114c48af4dc3608eea80c497f3c7dd962f1cace531aca8a6632ceb146e361636cc337508c5846a13ff633c771c8fefc6267ad21", @generic="21b492461708eddbea1b22385c1ed3cb67cb", @typed={0x8, 0x2, @u32=0x6}, @generic="71b412d0bdd284dee0fb1d2fabca60a85a9c874dfe9865d0744f92b26d32ec45277a9ae0066c9a9343a8fb42fa70c2a7d11cff7c6979a2aa6e9f1efa696b4f1262beab560d0383f2db40df974e43a49bfb69f856082bb7cf454e3a00969ebe14cda1f990e17a6e5d951efc152a6d74ca5d78e22120ed6b59069d74cf7bbf13898aea28f46ff57dbfd34b38cb85d1b03873468a5d869bd93df8972220467d216633767fead9cbeac66bf5d8844a585c088241c4a91e26aa6537e6017eb9f1354d82d78b63e8ca70", @typed={0x2c, 0x53, @binary="0e85e4925a525e686239f81f545dcdc8af7794f3ca83285da7aa9810a01e3904261809f19ce576d8"}, @typed={0x8, 0xe, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @generic="d27da0949236bfa942ad4155639f15d2c37a691bb16c87b2cf204bbb2d70c5ae4ef578336f4ef30285e8cef0686d1ffe63125a9245fe261da2529dedd949117df950c939955f64e7702dc2366313693be3a1f5342356f5ff8215fa1e483e863a9d5a40f9de916638e454cfd8b0a3fa0dc210ed2384c0cc31206456af13d8e2ebb3bf27f50969ac5e2452133e13d6322c26b3b33527c8c259b5f5c08598ee23f14482bf0f1243bff425574e82ebd68a7cf3de309a4322163785684489889d1a65f33844ba7c"]}, @nested={0xe8, 0x2a, [@generic="d567798d5d2abac0d0f8541de495b11a94a18eab", @typed={0xc, 0x2b, @u64=0x6}, @generic="2dcd7b90c1ace06a11aa2dd94ed6f64bed343577cd1146cdf7a12ee778f3992b6c79feceaeaa4154c9f641dbe4af68ea197c4244003f927941940c80214a380e24be44edc333d5eb2d755f28bc71c39f9c99a92bfe2df262ddc1c27d4c651d376c4f0dbd5393bf349b8bfc92bb70558d65528949b0faacb826e382ba93bf97d2d3789878d3f29e6acf69e20923002a46d3cbd2f6ce0d414d", @generic="e5a06076afe2162e531daa2476d1c2af1c2e7dd0ed11843a0fc09985c1af594f6108", @typed={0x8, 0x5, @u32}]}, @nested={0x11bc, 0x63, [@generic="787cc22fe271054b0cd144ff75ea3f1abf04a35a60c500283767b257f2189b9b06fce491148c6776ecf63d74d6a40df1c299edaada27825942920562914066d29f5f2d0564b2bfc1bbf8622dddbcb969ccc55d6c0f86797dbec7cb5c3611e339731e540ea49327fcdde3006ba1a7ea2b8ae2b2458448634100c1a4bbc53f9d73cf8786b845a56d2c06c04cf1e865f3c5df7e5555b40b0f5fe4aea5715d686683ae05a7aefe422324aeb00eb6ba75a9faad9e16f20987c11dbba26800e5f2f0027c29fb27084a1dcc9871b8ac40df8b3b9e0300b8440548e7dca4", @generic="87e60718c6f6d273247d53030ba2834d46d3221cef532ef26edb098e315b9d10790ec308dee1c06a4a966368f98d82b9e143cd9a9f72cc988ecf299d1f1057d6a71765ce733aca22231fb51ef7ed4b46160ae01dc50bf7d4d4818dce3b78294a602001d0f33430", @generic="08c2861c8d00aba5590be419aa9bba40d2326f3581e726ca8599e19ac4e69de4a3377e97c4b154f679eb8eb3f69d4f9557ce5ce11f2e3b0e7b95f3f931aab8e0900f7c516667a6a9ae1efd61d58f3bf05a613c3819022f33eb670e65cd49", @typed={0x4, 0x57}, @typed={0x1004, 0x7d, @binary="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"}, @typed={0x8, 0x31, @u32=0x1f}, @typed={0x8, 0x2d, @uid=0xffffffffffffffff}]}, @typed={0x8, 0x90, @uid=r8}, @typed={0x8, 0xa, @u32=0x5e7f}, @nested={0x198, 0x41, [@typed={0x8, 0x6f, @pid=r12}, @generic="500c4d84df5d6b26a05adef4392f1768a0de2de4e91ffadf8a9657364f6e695d045888de05b218f5e3c76ae28c8f3190583fe546d9b88b81d71c33d72561a79c0eea952d8d888686f61c2bc828f45d37586eeab0ca680eb7889a3e1d9f718745dabe6ab4f8ff3a9a8f2b78a8848b6c8859949ae779b590c94927e9ca", @typed={0x4, 0x46}, @typed={0x8, 0x39, @ipv4=@empty}, @generic="72c305727deb5b2ff7bae219dc803dd806bfd0bfc91cfd11afc6112f378d6f920083613c26c74d55f45e5d71c26c485e187a666a1fe39ed333da7327e2c1f6b075c85c51177bdeb16fff3c0072be03175b407c9ff3d20287998e380a6ce60bf5a0a2ba40ae5d3563f077ff0db8eede0d5ed32637a908eb7ba7ed", @typed={0x4, 0x47}, @generic="7c42452383601c7f61918325e6fa6a42363df691d746681e81d6881a508f1593ac32014aad4563d581da8082ef644e7ee668c52f8f4ed4fdd3e7f71fc99702dbe067706c3a27c7e861317228a6c72a839d8bc2b71ba59eb62e0476735a978587791798079289ccd2410cfa2af06fe62570b3efe9edaeef7ce07853b856ab0e59624f5f"]}, @nested={0x2dc, 0xa, [@typed={0xc, 0x10, @u64=0x8}, @typed={0x8, 0x4b, @pid=r13}, @typed={0x8, 0x6d, @pid=r2}, @generic="82220cf5028e120704b3830ed15ec97dd9e9601de4afb6aa75665de9d2af1d54ef51fe7a5ad105e799668bf94f67c26165b316a47848ba88b7ceb7c29dac873f6788f8958cefc026f248b70879b9f5039e3d7931394a49b82fc45482d186e5777e8ecf65e6092dd2b9fa26bc9e90ca165c6a4274826cb8e64d7a59dc1a9cc22a3e396e77d785b0232e7608522ef823b6c866af51c4ffb0e3ec17da828ea87106f99a5543e0d24c9c47947d1e2b3d4df1050f8b1c974ab45f278cff5c13a1f30507be1966a77bf65c309ed695274a31fb17b9601224760ef93a748483789b3d47c6134448ab8e791b7ec926997534fd2f", @generic="a59fd6e2137d6de779578ab6e1c7faf5fabec2e40f5d5dddaf65435e40ec8e2eec0af1974bc566a3c8153d7e8a4e6671ed408ff14604cf07d7e4", @generic="003498576a40a45381a6dfaf57c079d4785bbd58e5e9273f0ce76c7c07b3dcb0ff35f373183ec5dbcc1264719b41835bbfe591808ae526dd5770745e1ae9d9fd108244a531deca55afe27f0618143f34eaa6e08a2e65129138c64f38134afbc8c4ea43e5adbc7893e9ee7c5788dbbbd41bf5074b908c221d97971fa1572db9a14319537b59a20f1049045398ddb40fde471b8fa74a1b29f26b0b07202399b4aae271da6220fa8516f4949bbbd05b2a3c25df236f653ae82d1378f5670f07ac9fb20be9621d246e85ebc87f2b0c8ed5e4fabc51f339f906cec0684527a87ec934a5455f82869cdef64ae7", @typed={0x8, 0x61, @pid=r14}, @generic="234025493ad7c12b53066b720848b9b5d736a384f85f15b0d992d2ecd15fc6d71c4adc11b641c3f834dc72a35ed30b2af6012b46c98f4f2135d064be5c452002753040909c44b45a460e383dc84e0ffd9f7737c563bc3bdccf6edb76a4e7004a58d3e9eeca60ef89ede49a896250bc7fd0d46de36bdca1f7f5117ddf5a1294274195d94552e1eb19f0273ca4372f137e398487", @generic="70c1f129a7ca6b498a8f"]}, @nested={0x1114, 0x32, [@generic="e351e8b1e7d01eb48dfce7cab4f411f2a3d431e76e161dd545eefb830f800da539084fca356ac1b61a68e6aa695a7fdbf385d8e83dee592d5bc0c459c89b84d0f3bfac07fd7cf80f95217cf8c5f98999cad6edc1da2cd4413fed07495eebf17280ff133eb1ba40c803fe5ba187049a32cf835e55ad19b60266478e086449b3b3cb55c195de2fec6f131f735d783ab390ed01f834e799760b2f321736734fef0dc3b60d43052187956c4c8b3e5615233efde76668df1c8a460a9bea3390e7b0eeffa5592f41fa28fbb1cd6c91a0c04b8897442f980f9a49af7d4013923794d99e3fa415b127bcb79dc2554a34da0139b5ba74b9", @generic="dc24ac8a76da0668dbb4112a14be7826943b3dbcfcfb6cb7ae88dd2736966d606308a20a546fa56fc82ce8aa1fc1749133b46d649052b0c82251be8c83a96c457a0bba6d01c35e7839c7f6832d230467e0c53962e0e8f27c466742cd21cc028293eca431dc4c53f035ae78ee4553fbc35ae8b9345417500a8aa47e6a61306320402b90832a682f5de894ee2176974fb4e8776bac6e36872d7e59f82bd74731bd263756e59a3cebfa4b296b8a651610ee64df9000f4c5e020bca9d856d94e684e5c5e5798a092aac81e6bf8b3bf9d0b6414ea5cbb757c057cb80fb5d7c1a40c53b06abfa9014803441f1e94c23a31c35563d8ff9e76e3f6f5f11ebf411a45f2b759fc521d9b586c18c988c4b71330e7ddb2985f885ae4b57d0dc3b55c82e7a766f0f52bc7a9e196f619fe445df70b0350cb40aa9a0065ed85c9dbc110ecb59bb9e314a08755b78f550052643cc60830e10e857b7c5f2a6b29e483518695412607de4c8921849dceb67029b82b7e099c203621e98bfb904065e2d982a9d5b46919999fd7b5b864985eafc4accd34979b24d75a93762d93c2af38db1ac70ab485a9e143382f0536d20bfe7118a532d4c42acdbb58d2dd5f35749416ff594b4042e52fa4cc984a52b1d1923ca9ec958b09a817605db239289644fbeeef56086db7c2677b32eac3d9c6b9308365766ca0d3f9c2c48933077a83b6d40c208cf621ca3a61920b16d4ea32e603b4d4cc841f67794cc648dd5bf26e8f57c7702a1ff34c7224bc344abceacc656b0d690f8bc4e2d062a1c297584aa2e17fb14374f506a54d004881bd2c37fac723087fd6c113725357a66aebbb30b8c90abac61eecde560d05bb10f256669247ddf6ad65440d67bb421c09861df0557d3f4d51efc1ec690029d92b3dfba0000991cb83a26b4a469dcd06046708692dbaaf6d512f76a1dc153092c8943a8c0cfb762f5f47eb0e1c666e1ba61818f8b31872403e3a713457571771ec351e314f6b220c0445ac47039ccee8d921b09b5c3c7511a60b1df8ac49d3a7e3871a68857ed9e90f66ee5821a03ad227a0204a07441328af3cbd9e5ef93019a9236ff274cedf409686a2070f2f19f19300dcb50aee90dc0aae1bed6ec3d8a35ee87005ba8dfb4f7a2fc82b58615c8077a9c7c267847521e42bb39818923a214bc4df5c8fc10013737da5b95c0825ffe7f8a1232cebe6e24a991bb4cacc4fa9c3054427498251ce72da4fd4bb09a565446ad70be39f0b9352304dec7457b06de3b368b3e76f7c83ab48fac53d3540d3732ba3e926c9e453db705806032ab16d8d5a1f97be2d0c13aa1737a782eb9bab0e27bfa6b5f07ec7b5f4881216fab3f73d2ab6e7af23422b6cbd430e558d7900fce7c55e973244a5b6dafa16609c3ca59e918548f90c0022dfdaa2b81d83a4671e101bdd18be5af3b1191b740103e472022cd7f25605b52ccee11182c82bb588eb8782a56709e5df99e2c6e5ec3ed4e68add528e879d2b39c8a0392495852336569811074ab57ceba6839c80edbfdc8f6a3b828d7b9708da9750cb8691db57c455533e621264ce20a06a9f70f4bd9b3015bce2d309309fbaafcfb8822e179297871ff8b2b7a14ac1f992cd9c46e0c6daaf0054a3714fad74a3def52fbcd7f973043cfd0a956620bff8a14fa0123d7ec190a0629db049d263299d83ca595ad01b59488bd860c9e8d33296f58eb488a6ab9e658d51ed93e62c2df902f0ce5816bc7e5a1b0b65ee71931a2eaaad0e7e67a43ef788c56728fdc848222440b32ea3410ca6fbb202a8795151557b7ece4d156cfc599d27d98eedba3b9c2837da6f1e8a8a1b258b0ac946f4663f1569dadf9ca1bd09b9d1108a15ea254629ca81ba27ad073a78afcafcaed144e698e56d692c07bd71009786239f8b5194dbbd20289204308b8689d18fc0b71755ee2980c1f400e7c445b331f2a464a64371afa00eaf2e30f271ecc29a0caa69cbbc264607bbf080f725b240b3f0c5f1c2bd26fda3603e8376c3bb27e670919f56760ec2f7f94537e4988ccc957a933d9d5baba9383c65b931c38f89962c1dfd45524d96a90494219d70d55bb2985aad816bb1985aedeb15757070f1f827395c7ae577477ec6fa6fe60e027ae1721ddc15f3e7e34f51dad0e1e0ae8f4c7cd938a028286a649c309c2b3db9e00fbc236989fdfe6969f92493bbff52175856a2afc4ae3e328d675cb54102d4af4cf4b2b1aa4d6af653e0988983685004552fccc51f5c8a67be5fc53f8c8271bbca1e8dabe69eb66912d14a18d84e1955e01750a56d08ddc0049a9430077ddd8f87bb8e9828d7b7543549df886a69adbc17d23e476d285dee74f43a0b8380f989edd3d54ba2ef52ac6a3d118991fe6f68bc9e96498d42abe5da32cb7a06033f5330c108e26bdd07e919bb4e987646abf09ab51afedd0e5069446952229b05cdbf2851dcecb6c7806528408bb31a4f2876a57492ed7b1db1915e349dec6a18e1bf9e6cca1752aaa24f40f2cb376cf1a3689ba16abe2cb506256111e27a337f91f862b0a576bc6a82833b80f57927049e83c8e2eeba5f18b18710159789200dede5fe84839cb1b47c974949e6b7d04d68c220e00fe05c575ce95ef81f901249cf79011e77eeea5f0fb80aff6c6c3a3f841a351c70e327656c037f7ecea4b50027a7439a53edcea4e34ddf8f25af559388a6d57b21cdae91b197f0d707e9413b7a37d201f7847038aa181621fc7484334bf637bf18bbe4885dbcd871fb828a2885920847f02b254b63d377de62560090d5ce13e7d85dd0945ec8de19a312de2a789e95fe5c5d6f8cae5e19739a459488c867ccd3baa7a9dd0e882119c183d9cd8fdb666b6554aaa11b54f29db713af2640c82f300c208d606c9a48862aafd0f9bd38e22fde081ad75e3e62c7ca143ec30828257fadeac909012c88d0a292e9fc5f501c2390702510b10b75fc2a0cfa91ffe50d37e1fd8229fcfb5e44b9ccc5d2c849343ebc24d3433aab3a39c80171c1d81bf5db57181713ca74543b9b98a9f41f94d65985fae026cfd6fda31189a307187ffde649179b0dd771b53b4466b22a42d59b872dcc1b1988057889618a519240d0679ec716e0fb9f6878dc6188f7f6ef1514c56bff599af26f8d2389d4d1a37e65aa59ed5d34020c686d0c0f6ad4de1f5c89a180013588e99312bea20d7c8be68f71d345ca86cd7b2353537f1ec68d11b63ba11e5d96fb8978c533a2538148354c79fdb4f3975687f686bd17be17ee797089371277fe95498556971ea0f67cea57eefd2dbc166a41a3a8b4e966190b823179026b63b2496f2a6d1384bce2117204c5ae100b8dd6a20f4012e89525dc519d52d74f33a725793dee297b26be693b63ea9ffce8dada689cbc1cb4fc8102ba3bcc9a5213829a9706f54ab4c39c4877e876c513e41392ade0eb942d329790ed16048182fbcc18a420bb9bf314b31aec63b5aa6789237802e7fd971a74d3210b42efdf8db176f0b4aa68e5489bc87c10243285a99365c69e71ed5bc73fd4f94ac100fd46bb01174febf892bb65fd5c84f4d8ab6f2f93e71fda6b1aa7e349f7c2b9916858b60230e591444fc7035111834975535c02e6f4b762eac1b52c7c06db3e946928d93efb2afed4e914184eecbd8c576195e30c5c5d289ff9aafcca6e1b80564b5b9c49c5c85a1642f97eeee2734f0534a91541c0d290432e965d8972ecd9702a03bbada92b95adf82697bb65a481ce5ff8dc9314bfc1c318d84c1f7ba21e93c9a716c03819ca638731f2bf892adfba79851b1d84c61fd697dc9ec0fb98930b073539f5c49e22dc16a027c39676fa4ee57e0525c81402657468b8e77b6421a172cf3bcd5e243d20c6998b35ac3d001d46f7a4c4416409e5047df190e710e77db7808ab9349c9b15ffe56b47ec7848a84a15e1c9d98904273cf96e8f4032207b06778a481cec9864cda4f97589c82958587f38b2a2995e6da6d8bffa4126980fe052b69dd8634586739587d0fa6c859781c65cdc4a64980ae453e8f66d49462ed863ca6bf6f070e641062687b1fe8c549c15e16ac4e81bae9560c00b0098aef124914010ca3998c3e68218a5bfbe66d7241d9b12349fb253c4b63d8635d62db9e0d6f671dc991659e1b8cec80ad2901bc085bd8002dcc17f4dee4bfe42bba4e126dd38658dae33325a54beaf33005e421c13c31098d3de35c4abc5031534c8d29d18262a9f05022be09a262223df4fc19d5ba91636fae05ad4c21a8eefe8099b6f5a7a3f5b47595399c71a3908cf87ac919c931c6614872f42317cfb34037cca2a46e1fa6dfa44a01a51ad897ca3e7cbe3909b034b03ea2f7e41781b81cbb709e50af528664c0143b542a03b0a65581eb873b77c3b4a50a14db36a801bbc6d83dd3dc8742c365c2bc64951457b6222f29d07f6b28bd05b8a8e254f1e4a6b90f4ac5217124f562d6b7699b2d18f4a0e014e267834c82c23597913fe1f80fe52d0fffe5c963c33739b67dc042a43c22e8f4ec3e353cf04390f03dd833de38b29dc765dcf83495df20379ccdd2d7191c0d88b3b1ef8371df262c9b7de309c0c718845d7c06c3b2d81d65b5c672ba7960227ca7aab3aea61c81b042dbaa1c441721868b41ce22f015e688bc782a3b9cfa383218b77fe057b1df12f388716d29cdb8ee2cb9257ba89f19dd069f512712f5162492f6ca90f705fb808d33929ed9e445a9a1f5dfa278823b0c90a76255981e8fe008ace378d6f3205c0a7d2884bf2e3109e422dec19d65f5086b9fa56f96364b898bf06a1fd315d992435d992779bde286a2850129e2334282f889bd9e674c3e873e505baabaec3d3433593f3f72759ef5404c450980eb297ef01e3f98c0695d4965cdba6fbd53e58ef50d3727489f006f2192fd94340eb7a162a65353c6fdfc5f158c8936b650b886439d8ddc61f82e46acb4ce832cfe1d9e4e15d9eef03e396a6e0eaf50bed80458d99e29c01d54fe2fec1eb88d400baa9d3d2f5c574555c339e26351ebef181ac56d6c5c45f5db0ca6059f005ac38ad7845eee7ba1730def7a1a5db2a2b99beb549966d0a463a01ee7a6f5a0bae129c40532ff55c083c5fe2b5433594f408e3f873e398660d621d58587ac92a7ee6c3cccddbe0da58d29f75ad315f9401a106a18103b52e59762e8fff79b9749c41d178ead1be56355f66c1b8052b9b168853b36aa7a31ca49d7da9f2690e6b06adf17915e4709d59504511630c81ff9ae9af004a5981feb6f98972125fd007dd570005a241964ed4967c8d0de9cbbaa99fca799f6648afa0cc648b18096b17e998d08121160a6727d521d00be300151555295bece300dd9c41d3e394037727297f89e82292c3255f2f659da6e114bb8d0d10bd875710d9509d31d3916da97e7bb1f5fa78340336561f363b067f5228239e9a762f241f84c788b924cf62111757ac6f1a11b0c115a04962cc6826aa446c772da06d0dd1ba9d7b55c896d226649553706ebff5875135b0e63ee3d079cea59cd7f20455f1b376336181403f88191df23fd60b7715265eabd877bf6b22c9e5fbfada4c23faabf47aba00e016ff52243a391cbde0cdfc9e8d9c7d33c1a09bdb38b3b220e76dbb903c61e45490f89bd6fa3936b944b07a621bb222311801ce383bf0243a7bd30eeab2bfe6b55dfb6adddec8fa013b3f2e2364b4d8701dc316c6ad6c14b6b409028e81c475d5cf339823c8ec185cd0dc8ce43115693f70aa72fc68d77838f50438af4f3557b7d5ba58fb788826e7ec8c4c492f62232c590114e3863959", @generic="ca56d804a107526884f704777f588cc30e88", @typed={0x8, 0x40, @fd=r15}]}]}, 0x2a6c}, 0x1, 0x0, 0x0, 0x80040}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff000000005e00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x46) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2) 05:42:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:19 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x201410c2, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) read(r1, &(0x7f0000001280)=""/236, 0xec) sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe) [ 386.166545][T13103] netlink: 'syz-executor.5': attribute type 44 has an invalid length. 05:42:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x46) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x2) 05:42:19 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x201410c2, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) read(r1, &(0x7f0000001280)=""/236, 0xec) sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe) 05:42:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b3}]}) 05:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd001}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 386.471977][T12219] usb 3-1: new high-speed USB device number 13 using dummy_hcd 05:42:19 executing program 5: r0 = socket$inet6(0xa, 0x1200000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e30, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000140)=0x48, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}, 0x2202) 05:42:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'veth1_to_bond:\x00'}) [ 386.837592][T12219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.848997][T12219] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.983478][T12219] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=46.f6 [ 386.992976][T12219] usb 3-1: New USB device strings: Mfr=174, Product=248, SerialNumber=0 [ 387.001423][T12219] usb 3-1: Product: syz [ 387.005773][T12219] usb 3-1: Manufacturer: syz [ 387.056337][T12219] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input15 [ 387.758919][ T17] usb 3-1: USB disconnect, device number 13 [ 388.483096][ T17] appletouch 3-1:1.0: input: appletouch disconnected 05:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_PIE_ON(r1, 0x7005) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="295c79422b3fbadb5dc15571b744e7c2", 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:22 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x201410c2, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) read(r1, &(0x7f0000001280)=""/236, 0xec) sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe) 05:42:22 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, 0x0) 05:42:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) 05:42:22 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x88, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x8}}}}}}}, 0x0) 05:42:22 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x2a0) [ 389.075864][T13150] bridge24: the hash_elasticity option has been deprecated and is always 16 05:42:22 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x88, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x8}}}}}}}, 0x0) [ 389.163030][T13164] bridge25: the hash_elasticity option has been deprecated and is always 16 05:42:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) 05:42:22 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, 0x0) 05:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @rand_addr="00000000000000000000000000000001"}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r4, 0xd, "a441da", "3786c1792555cff6454a9221d0aeb8fd1accdd040604c76470f98320681cb0f26b57755749e6d2317edecd07e9db5aa509f9d5548c123045fc0f80eec75d21e09d91de8851324802b19434a4382a9ca04546f5d47d43c79d5ea5aaa832a94e191e9412cba9aa267cc38084f1db2004630dc3a42363af1831381b149e783b523ccfd208b2a983a140a9ac15ad8936bd9facd887830a0e864d9e6420b095b863c3351a910a618d484388438c3207264d28942878b4dd95fa45407e1f4c86165c59b507a0fa13efd5a3a8303e1e53e98ce8a0951e90b5773d49757336ceeb45ae824ecbf4e017806a2a7b018e65fade915eddb2ee9d561c3bbc4fd1417e9ec25fee"}}, 0x110) dup(r1) 05:42:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) 05:42:22 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000280), 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x201410c2, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) read(r1, &(0x7f0000001280)=""/236, 0xec) sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe) 05:42:22 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x88, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x8}}}}}}}, 0x0) 05:42:22 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, 0x0) [ 389.504499][T13179] bridge26: the hash_elasticity option has been deprecated and is always 16 05:42:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) 05:42:22 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, 0x0) [ 389.679924][T13179] bridge27: the hash_elasticity option has been deprecated and is always 16 05:42:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) 05:42:22 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x88, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x8}}}}}}}, 0x0) 05:42:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000001100), 0x11e5) 05:42:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) 05:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000040)=0x80) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0xb0, 0x30, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{0x9c, 0x1, @m_bpf={0x98, 0xe, {{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x78, 0x6, "54195a8b8552121606f54eb0d9bb7e7c4bc4bb6e05de3580302b67b654258302b2f623dafe38d11ac40f38b5837cdad62dc70f5a555170cf74428e16ce728d8b45006164ac6148f356208a1d72581839f0ec4a4cafaa03cb90cba1952a249c73588da833c7719527d3b09439edfd93ff216c73"}}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 05:42:23 executing program 0: syz_usb_connect$hid(0x0, 0xf0, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x5ac, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 05:42:23 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000090a000/0x4000)=nil, 0x4000}}) 05:42:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)='g', 0x1}], 0x1}}], 0x2, 0x0) [ 390.151524][T13221] bridge28: the hash_elasticity option has been deprecated and is always 16 05:42:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000001c00070cab0925000900f00007ab08000800000003000000210001c000000000000000000c00000000039815fa2c1ec28656aaa79bb94b46fe0000000a0002", 0x43) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a61c) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 390.260449][T13221] bridge29: the hash_elasticity option has been deprecated and is always 16 05:42:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) [ 390.351959][T12219] usb 1-1: new high-speed USB device number 19 using dummy_hcd 05:42:23 executing program 3: socket$isdn(0x22, 0x3, 0x22) 05:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000800000000000100000000000000000000000000f846ffff00000000090000000000000001010000432aeb1204000000000000000700000000000000010000000000000021d710a030290a40b81ffae2d78917db51ec704758f6483c3c4156943b4ab2b9aee5"]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) [ 390.500068][T13240] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 05:42:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 05:42:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 390.601996][T12219] usb 1-1: Using ep0 maxpacket: 8 [ 390.642318][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.674630][T13245] bridge30: the hash_elasticity option has been deprecated and is always 16 [ 390.692524][T13246] team0: Port device veth3 added 05:42:23 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:42:23 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @dev}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 390.733338][T13245] bridge31: the hash_elasticity option has been deprecated and is always 16 [ 390.743633][T12219] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 390.757099][T12219] usb 1-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 390.766304][T12219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.819885][T12219] usb 1-1: config 0 descriptor?? 05:42:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1000, r2}) dup2(r2, r1) [ 390.870762][T12219] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 391.068741][ T17] usb 1-1: USB disconnect, device number 19 [ 391.842015][T12219] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 392.081947][T12219] usb 1-1: Using ep0 maxpacket: 8 [ 392.202147][T12219] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 392.215441][T12219] usb 1-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 392.224700][T12219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.234752][T12219] usb 1-1: config 0 descriptor?? [ 392.277554][T12219] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 392.483722][T12219] usb 1-1: USB disconnect, device number 20 05:42:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@flushpolicy={0x5c, 0x1d, 0x413, 0x0, 0x0, "", [@algo_auth_trunc={0x4c, 0x14, {{'rmd320\x00'}}}]}, 0x5c}}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002ec0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e80)={0x14, 0x4000000001a, 0x105}, 0x14}}, 0x0) 05:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00000000000000000000000026fc38d47c8596ff118a95ccfb8a343f4ef88f0d2505775106f133bbe620a327242a7deaf9272e9e3e0ab20bfd3fdc9d7971ebc5aef31fe8ea30cfb69b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c000200cc001a0002000000"], 0x379}, 0x1, 0x0, 0x0, 0x2000002c}, 0x414df8da3a7e8ce6) 05:42:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x38, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) 05:42:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 05:42:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1000, r2}) dup2(r2, r1) 05:42:26 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) read$usbmon(r0, &(0x7f0000000000)=""/99, 0x63) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 393.063655][T13285] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x0) read$char_usb(r0, 0x0, 0x0) 05:42:26 executing program 0: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001200)=0x0) sched_rr_get_interval(r0, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x997, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000004, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x400) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r3) sched_rr_get_interval(r2, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x1) mkdir(&(0x7f0000001640)='./file0\x00', 0x118) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_dump={0x3e}}) r8 = accept4(r7, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80, 0xcf0766b3744be226) openat$rtc(0xffffffffffffff9c, &(0x7f0000001500)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x1, 0x1200000000000407) connect$packet(r6, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @random="a038badc52e5"}, 0xfcb1) fcntl$lock(r4, 0x7, &(0x7f0000001580)={0x3, 0x2, 0x70, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xad86}) ioctl$RTC_VL_CLR(r8, 0x7014) chroot(&(0x7f00000000c0)='./file0\x00') getdents64(r6, &(0x7f00000027c0)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x80800) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) fchmod(r5, 0x800000100000024) 05:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 393.247726][T13287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:42:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1000, r2}) dup2(r2, r1) [ 393.560817][T13303] bridge32: the hash_elasticity option has been deprecated and is always 16 05:42:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 05:42:26 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) bind$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) rmdir(0x0) dup2(r3, r4) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x400000008044, 0x0) sync_file_range(r6, 0x0, 0x0, 0x5) r7 = gettid() tkill(r7, 0x16) sendto$packet(r1, &(0x7f0000000080)="d9f3119b3d5829e45fbba07c426e741f19978a0f819700ceb9925a0402a258e86f268e2f6776253dc864811b6cbbb7dba5d147e850563e05", 0x38, 0x3ffffff, 0x0, 0x0) 05:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x39a, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4}}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0xa08, 0x70bd25, 0x25dfdbfb, {0xa, 0x1f, 0xc, 0xfd, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0xfff, 0x9, 0xd5b}}]}, 0x40}}, 0x0) 05:42:26 executing program 0: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001200)=0x0) sched_rr_get_interval(r0, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x997, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000004, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x400) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r3) sched_rr_get_interval(r2, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x1) mkdir(&(0x7f0000001640)='./file0\x00', 0x118) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_dump={0x3e}}) r8 = accept4(r7, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80, 0xcf0766b3744be226) openat$rtc(0xffffffffffffff9c, &(0x7f0000001500)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x1, 0x1200000000000407) connect$packet(r6, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @random="a038badc52e5"}, 0xfcb1) fcntl$lock(r4, 0x7, &(0x7f0000001580)={0x3, 0x2, 0x70, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xad86}) ioctl$RTC_VL_CLR(r8, 0x7014) chroot(&(0x7f00000000c0)='./file0\x00') getdents64(r6, &(0x7f00000027c0)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x80800) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) fchmod(r5, 0x800000100000024) 05:42:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1000, r2}) dup2(r2, r1) 05:42:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f300005a871b0f233a"], 0x0, 0xa}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 394.000815][T13319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.271271][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000300010081726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 05:42:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x8c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 05:42:27 executing program 0: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001200)=0x0) sched_rr_get_interval(r0, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x997, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000004, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x400) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r3) sched_rr_get_interval(r2, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x1) mkdir(&(0x7f0000001640)='./file0\x00', 0x118) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_dump={0x3e}}) r8 = accept4(r7, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80, 0xcf0766b3744be226) openat$rtc(0xffffffffffffff9c, &(0x7f0000001500)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x1, 0x1200000000000407) connect$packet(r6, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @random="a038badc52e5"}, 0xfcb1) fcntl$lock(r4, 0x7, &(0x7f0000001580)={0x3, 0x2, 0x70, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xad86}) ioctl$RTC_VL_CLR(r8, 0x7014) chroot(&(0x7f00000000c0)='./file0\x00') getdents64(r6, &(0x7f00000027c0)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x80800) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) fchmod(r5, 0x800000100000024) [ 394.668408][T13353] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 394.676983][T13353] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 394.686709][T13353] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 394.695414][T13353] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 394.896310][T13356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:42:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x8c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) [ 395.175350][T13368] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 395.184092][T13368] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 395.192520][T13368] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 395.200776][T13368] netlink: 'syz-executor.2': attribute type 17 has an invalid length. 05:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x10, 0x0, [0x9, 0x100, 0x2, 0xa21, 0x8, 0x2d962b25, 0x1, 0x9, 0x4, 0x2, 0x101, 0x81, 0x9, 0x9, 0x9, 0xfff]}, {0x2, 0x0, [0x9, 0xfff, 0x9, 0x4, 0x6, 0x5e96c1dc, 0xfffffffe, 0x3, 0x5, 0x9, 0x6000000, 0xffff, 0x5, 0x46dc53fe, 0x7ff, 0x8]}, {0x2, 0x0, [0x5, 0x9, 0x800, 0x1, 0x4, 0x3, 0x3, 0x4, 0x3, 0x40, 0x1f, 0x9, 0xffff, 0xa50, 0x9, 0x91f]}, {0x40, 0x0, [0x2033, 0xfffff000, 0x37, 0x1000, 0x8, 0x7, 0x1000, 0x9, 0x726, 0x7, 0x1ff, 0x9, 0xffffff80, 0x1, 0xffffffff]}, {0x10, 0x0, [0x2bf, 0x80, 0x20, 0x101, 0x1, 0x5, 0xecd9, 0xb2800000, 0x8, 0x401, 0x3, 0x7, 0x6, 0xc1, 0x2, 0x9bb9]}, {0x8, 0x0, [0x4, 0x0, 0x35, 0x9, 0x0, 0x8, 0x401, 0x1, 0x8, 0x81, 0xe, 0x7f, 0x2, 0xffffffff, 0x8, 0x20]}, {0x1, 0x0, [0x7, 0x8001, 0x78, 0x6, 0x1, 0x9, 0x4, 0x1ff, 0x401, 0x1, 0x20, 0x9, 0x1, 0x3, 0x3, 0x3f]}, {0x30, 0x0, [0x3, 0x2, 0x10001, 0x9, 0x0, 0x8, 0x84b, 0x8, 0xbabb, 0xfff, 0x3174, 0x5, 0x0, 0x100, 0x800, 0xb6e3]}, {0x0, 0x0, [0x3ff, 0x2, 0x6, 0x1, 0x4, 0x0, 0x1, 0xff38, 0x933c, 0x1000, 0x7d7, 0x8, 0x6, 0x6e, 0x7, 0x6]}], r8, 0x1, 0x1, 0x288}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r10, 0x5, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r10, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15c4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb65}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2}, 0x4c0d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:28 executing program 0: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001200)=0x0) sched_rr_get_interval(r0, &(0x7f0000001480)) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x997, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000004, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x8000002, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x400) r5 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r3) sched_rr_get_interval(r2, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000140)='&ppp0\x00', 0x1) mkdir(&(0x7f0000001640)='./file0\x00', 0x118) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_dump={0x3e}}) r8 = accept4(r7, &(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80, 0xcf0766b3744be226) openat$rtc(0xffffffffffffff9c, &(0x7f0000001500)='/dev/rtc0\x00', 0x400000, 0x0) socket$inet6(0xa, 0x1, 0x1200000000000407) connect$packet(r6, &(0x7f0000001440)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @random="a038badc52e5"}, 0xfcb1) fcntl$lock(r4, 0x7, &(0x7f0000001580)={0x3, 0x2, 0x70, 0x3, r0}) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0xad86}) ioctl$RTC_VL_CLR(r8, 0x7014) chroot(&(0x7f00000000c0)='./file0\x00') getdents64(r6, &(0x7f00000027c0)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x2000, 0x0) inotify_init1(0x80800) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) fchmod(r5, 0x800000100000024) 05:42:29 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, 0x0) 05:42:29 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, 0x0) unshare(0x40000000) prctl$PR_SET_SECUREBITS(0x1c, 0x10) syz_genetlink_get_family_id$tipc2(0x0) r1 = semget$private(0x0, 0x200, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/122) semctl$GETNCNT(r1, 0x1, 0xe, &(0x7f0000000140)=""/154) 05:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) exit(0xef4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x8c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 05:42:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 05:42:29 executing program 0: mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mbind(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000b19000/0x4000)=nil, 0x4000) [ 396.919231][T13389] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 396.927968][T13389] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 396.975018][T13401] bridge33: the hash_elasticity option has been deprecated and is always 16 [ 397.026724][T13398] IPVS: ftp: loaded support on port[0] = 21 05:42:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000180)=@newlink={0x8c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x50, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x8, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x801a}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_IKEY={0x8, 0x4, 0x790}, @IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}]]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) [ 397.172781][T13395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:42:30 executing program 0: mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mbind(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000b19000/0x4000)=nil, 0x4000) [ 397.721334][T13420] bridge34: the hash_elasticity option has been deprecated and is always 16 05:42:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001840)={{0x80}, 'port0\x00', 0xffffffffffdfff6d, 0x9b0f0d62a55bdc77}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 05:42:30 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='\x02\x00\x00\x00\x01\x00\x00\x00\x00\x00\xf4\xff\x01\x00\x00\x00\x00\x00\x00\x00', 0x14, 0x0) 05:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ca7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72e}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x8044) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000340)={0x10000, 0x0, 0x1, 0x9c06}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300), 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x14081, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000003c0)={0xffffffff, 0x0, 0x3, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000400)={0x2, r5, 0x1}) 05:42:30 executing program 0: mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mbind(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000b19000/0x4000)=nil, 0x4000) [ 397.902598][T13427] IPVS: ftp: loaded support on port[0] = 21 05:42:31 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x23085, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x2) [ 398.006049][T13431] bridge35: the hash_elasticity option has been deprecated and is always 16 [ 398.179248][T13431] bridge36: the hash_elasticity option has been deprecated and is always 16 05:42:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0x1d4) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f00000000c0)=@vsock, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/75}], 0x0, &(0x7f0000000280)=""/237}}, {{&(0x7f0000000380)=@isdn, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/139}, {&(0x7f00000004c0)=""/7}, {&(0x7f0000000500)=""/206}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/51}, {&(0x7f0000000680)=""/5, 0x9a}], 0x2e5}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/201}, {&(0x7f0000000b00)=""/157}, {&(0x7f0000000900)=""/195}], 0x0, &(0x7f00000021c0)=""/4096}}], 0x400000000000590, 0x0, 0x0) 05:42:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x0) read$eventfd(r0, 0x0, 0x0) 05:42:31 executing program 0: mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mbind(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000b19000/0x4000)=nil, 0x4000) 05:42:31 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 05:42:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcrea\xff\x7f\x00') 05:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x16e, 0x1c00) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x2, 0x1000, 0x7, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x0) 05:42:31 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 05:42:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', @ifru_ivalue=0x718000}) 05:42:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x402, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x56a, 0xcc, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 05:42:31 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x98) 05:42:31 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 05:42:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', @ifru_ivalue=0x718000}) 05:42:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 398.932024][ T3913] usb 3-1: new high-speed USB device number 14 using dummy_hcd 05:42:32 executing program 3: r0 = getpgid(0x0) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) pidfd_open(r0, 0x0) 05:42:32 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, @tid=r0}, 0x0) 05:42:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', @ifru_ivalue=0x718000}) 05:42:32 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x81000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="3f7bab45ae", 0xfa4}], 0x1) 05:42:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r2, r3, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r6, r7, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r9, r10, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = getuid() getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r12, r13, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) getgroups(0x4, &(0x7f0000000140)=[0x0, r7, r10, r13]) r15 = getpid() setpriority(0x1, r15, 0x0) r16 = clone3(&(0x7f0000000340)={0x20000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0, &(0x7f0000000240)=""/68, 0x44, &(0x7f00000002c0)=""/100}, 0x40) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x7, 0x0, r3, r4, r14, 0x44, 0x5}, 0x101, 0x1, 0xffffffffffff8001, 0x7, r15, r16, 0x12}) [ 399.247038][T13498] bridge37: the hash_elasticity option has been deprecated and is always 16 05:42:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0x0, 0x3}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000380), 0x1000) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 05:42:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', @ifru_ivalue=0x718000}) [ 399.324195][ T3913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.335303][ T3913] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.40 [ 399.344614][ T3913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.426504][T13498] bridge38: the hash_elasticity option has been deprecated and is always 16 [ 399.464740][ T3913] usb 3-1: config 0 descriptor?? [ 399.956089][ T3913] wacom 0003:056A:00CC.0002: unknown main item tag 0x0 [ 399.968126][ T3913] wacom 0003:056A:00CC.0002: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.2-1/input0 [ 400.155010][ T3913] usb 3-1: USB disconnect, device number 14 [ 400.921921][ T3913] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 401.342055][ T3913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.353351][ T3913] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.40 [ 401.362621][ T3913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.372016][ T3913] usb 3-1: config 0 descriptor?? 05:42:34 executing program 2: bpf$MAP_GET_NEXT_KEY(0x20000044, 0x0, 0x0) 05:42:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x1, &(0x7f0000000040)='t'}) 05:42:34 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) 05:42:34 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6076605100b83afffe80034300050dff00000000000000ffff020000000000000000000000000001860090780007080060c5961e0001000003040000000000001803000005000001ff014000000000000000000000000001000c0000000000000738000000060c94000201000100000000000300000000000000050000000000000000000000010000002000000000000000090000000000000005028000c910fe8000000000000000000000000000bbc204000000000401"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80802, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) write$sndseq(r2, &(0x7f00000002c0)=[{0x81, 0x6, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x30) 05:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x75, 0x0, &(0x7f0000000040)=0x3d9) 05:42:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="b600000000000063d7b5ad5c3be6e476ad2b034b001c8303e54cd642b615d616110012b78000020008001a000000e7000000"], 0x3c}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000100)={0x5, 0x163d, 0x9, 0x9, 0x100000000}) [ 401.772457][ T3913] usbhid 3-1:0.0: can't add hid device: -71 [ 401.778705][ T3913] usbhid: probe of 3-1:0.0 failed with error -71 [ 401.788354][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:34 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) 05:42:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) [ 401.824569][ T3913] usb 3-1: USB disconnect, device number 15 05:42:34 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}, @mdlm={0x15}]}}}]}}]}}, 0x0) 05:42:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000100)=0x14) 05:42:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x803}) read(r0, 0x0, 0x0) [ 402.022591][T12179] usb 5-1: new high-speed USB device number 6 using dummy_hcd 05:42:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000003140)={0x1, 0x0, [], {0x0, @reserved}}) 05:42:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000100)=0x14) 05:42:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x46d, 0xc29c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 402.384292][T12179] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 402.392808][T12179] usb 5-1: config 0 has no interface number 0 [ 402.399095][T12179] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 402.408630][T12179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.422363][ T3913] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 402.447464][T12179] usb 5-1: config 0 descriptor?? [ 402.497374][T12179] em28xx 5-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 402.507125][T12179] em28xx 5-1:0.219: Video interface 219 found: [ 402.529948][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.632010][T12219] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.772411][T12179] em28xx 5-1:0.219: unknown em28xx chip ID (0) [ 402.812452][ T3913] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 402.932264][T12179] em28xx 5-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 402.940522][T12179] em28xx 5-1:0.219: board has no eeprom [ 402.992153][T12219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.003585][T12219] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.012128][ T3913] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.016602][T12219] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 403.025821][ T3913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.034934][T12219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.043007][ T3913] usb 3-1: Product: syz [ 403.053650][T12219] usb 6-1: config 0 descriptor?? [ 403.055246][ T3913] usb 3-1: Manufacturer: syz [ 403.064876][ T3913] usb 3-1: SerialNumber: syz [ 403.070387][T12179] em28xx 5-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 403.078607][T12179] em28xx 5-1:0.219: analog set to bulk mode. [ 403.085240][ T17] em28xx 5-1:0.219: Registering V4L2 extension [ 403.114745][T12179] usb 5-1: USB disconnect, device number 6 [ 403.121457][T12179] em28xx 5-1:0.219: Disconnecting em28xx [ 403.139920][ T17] em28xx 5-1:0.219: Config register raw data: 0xffffffed [ 403.147817][ T17] em28xx 5-1:0.219: AC97 chip type couldn't be determined [ 403.155242][ T17] em28xx 5-1:0.219: No AC97 audio processor [ 403.163219][ T17] usb 5-1: Decoder not found [ 403.167996][ T17] em28xx 5-1:0.219: failed to create media graph [ 403.174972][ T17] em28xx 5-1:0.219: V4L2 device video39 deregistered [ 403.184279][ T3913] usb 3-1: bad CDC descriptors [ 403.203665][ T17] em28xx 5-1:0.219: Remote control support is not available for this card. [ 403.212791][T12179] em28xx 5-1:0.219: Closing input extension [ 403.226363][T12179] em28xx 5-1:0.219: Freeing device [ 403.378379][ T17] usb 3-1: USB disconnect, device number 16 [ 403.534743][T12219] logitech 0003:046D:C29C.0003: unknown main item tag 0x0 [ 403.545667][T12219] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 403.642058][T12179] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 403.962584][T12219] logitech 0003:046D:C29C.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 403.973258][T12219] logitech: probe of 0003:046D:C29C.0003 failed with error -1 [ 403.983905][T12219] usb 6-1: USB disconnect, device number 2 [ 404.022553][T12179] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 404.031134][T12179] usb 5-1: config 0 has no interface number 0 [ 404.037502][T12179] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 404.046649][T12179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.057193][T12179] usb 5-1: config 0 descriptor?? [ 404.117110][T12179] em28xx 5-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 404.126517][T12179] em28xx 5-1:0.219: Video interface 219 found: [ 404.152185][T12262] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 404.372322][T12179] em28xx 5-1:0.219: unknown em28xx chip ID (0) [ 404.502494][T12179] em28xx 5-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 404.514040][T12179] em28xx 5-1:0.219: board has no eeprom [ 404.522936][T12262] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 404.621976][T12179] em28xx 5-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 404.630176][T12179] em28xx 5-1:0.219: analog set to bulk mode. [ 404.637138][ T17] em28xx 5-1:0.219: Registering V4L2 extension [ 404.651740][T12179] usb 5-1: USB disconnect, device number 7 [ 404.658462][T12179] em28xx 5-1:0.219: Disconnecting em28xx [ 404.675860][ T17] em28xx 5-1:0.219: Config register raw data: 0xffffffed [ 404.683326][ T17] em28xx 5-1:0.219: AC97 chip type couldn't be determined [ 404.690887][ T17] em28xx 5-1:0.219: No AC97 audio processor [ 404.698522][ T17] usb 5-1: Decoder not found [ 404.702273][T12262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.703279][ T17] em28xx 5-1:0.219: failed to create media graph [ 404.712419][T12262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.718681][ T17] em28xx 5-1:0.219: V4L2 device video39 deregistered [ 404.726824][T12262] usb 3-1: Product: syz [ 404.737917][T12262] usb 3-1: Manufacturer: syz [ 404.742744][T12262] usb 3-1: SerialNumber: syz [ 404.747987][T12219] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 404.757502][ T17] em28xx 5-1:0.219: Remote control support is not available for this card. 05:42:37 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) 05:42:37 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x0) 05:42:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000100)=0x14) 05:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000140)={0x5, 0x6, 0x2}) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x1, 0x0, 0x7f, 0x35, 0x3f, 0x2}, 0x2}, 0xa) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 404.779862][T12179] em28xx 5-1:0.219: Closing input extension [ 404.802946][T12179] em28xx 5-1:0.219: Freeing device [ 404.823345][T12262] usb 3-1: bad CDC descriptors [ 404.869578][T13592] bridge39: the hash_elasticity option has been deprecated and is always 16 05:42:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1f, 0x1, 0x0, "616052eabc0300000000000000de243bbf3da07800"}) 05:42:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c) shutdown(r1, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000100)=0x14) 05:42:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x5, 0x17, 0x5, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x20) [ 405.085199][ T17] usb 3-1: USB disconnect, device number 17 05:42:38 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0cf100", @ANYRES32=0x0, @ANYBLOB="00000800000000001c0052000c00010662726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x1) 05:42:38 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) [ 405.172492][T12219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.183831][T12219] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.197236][T12219] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 405.206485][T12219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:42:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/233, 0x25e}, {&(0x7f0000001ac0)=""/21, 0x15}, {&(0x7f0000000000)=""/61, 0xfffffde5}], 0x3) [ 405.248729][T12219] usb 6-1: config 0 descriptor?? [ 405.313841][T12179] usb 5-1: new high-speed USB device number 8 using dummy_hcd 05:42:38 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) [ 405.380312][T13621] mmap: syz-executor.0 (13621) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 05:42:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 405.612425][T12219] usbhid 6-1:0.0: can't add hid device: -71 [ 405.618662][T12219] usbhid: probe of 6-1:0.0 failed with error -71 [ 405.651417][T12219] usb 6-1: USB disconnect, device number 3 [ 405.672556][T12179] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 405.683891][T12179] usb 5-1: config 0 has no interface number 0 [ 405.690125][T12179] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 405.699580][T12179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.712822][ T12] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 405.715247][T12179] usb 5-1: config 0 descriptor?? [ 405.768221][T12179] em28xx 5-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 405.777702][T12179] em28xx 5-1:0.219: Video interface 219 found: [ 405.972178][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 406.022398][T12179] em28xx 5-1:0.219: unknown em28xx chip ID (0) [ 406.092158][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 81, changing to 10 [ 406.103552][ T12] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 406.112882][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.123725][ T12] usb 3-1: config 0 descriptor?? [ 406.152385][T12179] em28xx 5-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 406.160655][T12179] em28xx 5-1:0.219: board has no eeprom [ 406.291992][T12179] em28xx 5-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 406.300574][T12179] em28xx 5-1:0.219: analog set to bulk mode. [ 406.308371][ T17] em28xx 5-1:0.219: Registering V4L2 extension [ 406.329773][T12179] usb 5-1: USB disconnect, device number 8 [ 406.336944][T12179] em28xx 5-1:0.219: Disconnecting em28xx [ 406.343518][ T17] em28xx 5-1:0.219: Config register raw data: 0xffffffed [ 406.350761][ T17] em28xx 5-1:0.219: AC97 chip type couldn't be determined [ 406.360088][ T17] em28xx 5-1:0.219: No AC97 audio processor [ 406.368183][ T17] usb 5-1: Decoder not found [ 406.373126][ T17] em28xx 5-1:0.219: failed to create media graph [ 406.379532][ T17] em28xx 5-1:0.219: V4L2 device video39 deregistered [ 406.388488][T12219] usb 3-1: USB disconnect, device number 18 [ 406.392824][ T17] em28xx 5-1:0.219: Remote control support is not available for this card. [ 406.420247][T12179] em28xx 5-1:0.219: Closing input extension [ 406.432600][T12179] em28xx 5-1:0.219: Freeing device 05:42:39 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) 05:42:39 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 05:42:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, 0x0) 05:42:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x1, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20020}) 05:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x1b, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_GROUP={0x0, 0x1b, 0x3}]}, 0xfffffffffffffccf}}, 0x0) r1 = socket(0x5, 0x1, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x0, 0x3], 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x40000010}) 05:42:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 05:42:39 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 05:42:39 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:40 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') sendfile(r0, r1, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 407.172415][T12179] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 407.366048][T12219] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 407.612176][T12219] usb 3-1: Using ep0 maxpacket: 8 [ 407.622115][T12179] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 407.630431][T12179] usb 5-1: config 0 has no interface number 0 [ 407.636930][T12179] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 407.646157][T12179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.657144][T12179] usb 5-1: config 0 descriptor?? [ 407.710939][T12179] em28xx 5-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 407.720611][T12179] em28xx 5-1:0.219: Video interface 219 found: [ 407.732172][T12219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 81, changing to 10 [ 407.743769][T12219] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 407.753395][T12219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.768000][T12219] usb 3-1: config 0 descriptor?? [ 407.962451][T12179] em28xx 5-1:0.219: unknown em28xx chip ID (0) [ 408.024456][T12219] usb 3-1: USB disconnect, device number 19 [ 408.112668][T12179] em28xx 5-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 408.121108][T12179] em28xx 5-1:0.219: board has no eeprom [ 408.231939][T12179] em28xx 5-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 408.239913][T12179] em28xx 5-1:0.219: analog set to bulk mode. [ 408.246916][ T17] em28xx 5-1:0.219: Registering V4L2 extension [ 408.257131][T12179] usb 5-1: USB disconnect, device number 9 [ 408.263853][T12179] em28xx 5-1:0.219: Disconnecting em28xx [ 408.275848][ T17] em28xx 5-1:0.219: Config register raw data: 0xffffffed [ 408.283216][ T17] em28xx 5-1:0.219: AC97 chip type couldn't be determined [ 408.290402][ T17] em28xx 5-1:0.219: No AC97 audio processor [ 408.298103][ T17] usb 5-1: Decoder not found [ 408.303063][ T17] em28xx 5-1:0.219: failed to create media graph [ 408.309534][ T17] em28xx 5-1:0.219: V4L2 device video39 deregistered [ 408.318115][ T17] em28xx 5-1:0.219: Remote control support is not available for this card. [ 408.327878][T12179] em28xx 5-1:0.219: Closing input extension [ 408.339531][T12179] em28xx 5-1:0.219: Freeing device 05:42:41 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000021eeaa08b5192100dc400000000109021b00010000000009040000019352a50009058ae7009c51180fff2c60ccaa777f0b8d7bd32100000600950fb624e7e920bbce2a4f4b32364db4ea121e44150c207107b26a1fcf4dc3db75868b95ea05cea31cbc3dc9a5f7adf3700860e99188030a217bd1639a981991ff15c27f30991df7a1e69b7419eb4bef780a8e2a516e1604a86ab62bb4f1d6e5b854706bee0fb55aa0c79fb35c1d7e6606461c0e3a00e0eaf6f81f18acb366d4d45a46a8d79104148f5f41407b09c2093212a067aff9b72c01461023e243b7efcec97c054e391a26a7d49a946fc3d440667e696333d3b889668d2419b475000644e4"], 0x0) 05:42:41 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101700, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x8013, r0, 0x10000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000ffffffe3000000000000f8c5fc98f047491d", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:41 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) 05:42:41 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:41 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:41 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x5a, 0x94, 0x40, 0xeb1a, 0x5006, 0xed9a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x5a, 0x96, 0x3c, 0x0, [], [{{0x9, 0x5, 0x98b8e65cdf98082}}]}}]}}]}}, 0x0) [ 408.544881][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x440000, 0x22) r5 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r5, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x36c83173da8c56ab, &(0x7f0000000000), &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010001fff00"/20, @ANYRES32=r1, @ANYBLOB="00001d000600000020ff743b2fb164ea26353552ac53b65701b437ec6bfbd51fd3ee4ccee426890241fb8fa0d433ad88ada00ea6372827fb380cf852da84eddba59b0d33e2c950b90cfa0c25d2d09cc09aa81a90b924f95da786ae22fada8014615c949ae373af121b4defaaf0ed2953478724d2358b51865482bf8ca05e7cd4952fce4dc6"], 0x20}}, 0x4000) 05:42:41 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:41 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/197, 0xc5) 05:42:42 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 409.154272][T12179] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 409.169413][T12219] usb 3-1: new high-speed USB device number 20 using dummy_hcd 05:42:42 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 409.596969][T12219] usb 3-1: Using ep0 maxpacket: 8 [ 409.632508][T12179] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 409.641005][T12179] usb 5-1: config 0 has no interface number 0 [ 409.647618][T12179] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 409.656910][T12179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.706829][T12179] usb 5-1: config 0 descriptor?? [ 409.752491][T12219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 81, changing to 10 [ 409.757108][T12179] em28xx 5-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 409.763966][T12219] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 409.773204][T12179] em28xx 5-1:0.219: Video interface 219 found: [ 409.782361][T12219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.801903][T12219] usb 3-1: config 0 descriptor?? [ 410.022543][T12179] em28xx 5-1:0.219: unknown em28xx chip ID (0) [ 410.064354][ T17] usb 3-1: USB disconnect, device number 20 [ 410.152065][T12179] em28xx 5-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 410.161322][T12179] em28xx 5-1:0.219: board has no eeprom [ 410.271915][T12179] em28xx 5-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 410.279901][T12179] em28xx 5-1:0.219: analog set to bulk mode. [ 410.286939][ T3913] em28xx 5-1:0.219: Registering V4L2 extension [ 410.313304][T12179] usb 5-1: USB disconnect, device number 10 [ 410.319832][T12179] em28xx 5-1:0.219: Disconnecting em28xx [ 410.325915][ T3913] em28xx 5-1:0.219: reading from i2c device at 0x4a failed (error=-5) [ 410.335753][ T3913] em28xx 5-1:0.219: Config register raw data: 0xffffffed [ 410.343096][ T3913] em28xx 5-1:0.219: AC97 chip type couldn't be determined [ 410.350445][ T3913] em28xx 5-1:0.219: No AC97 audio processor [ 410.357737][ T3913] usb 5-1: Decoder not found [ 410.362633][ T3913] em28xx 5-1:0.219: failed to create media graph [ 410.369229][ T3913] em28xx 5-1:0.219: V4L2 device video39 deregistered [ 410.378584][ T3913] em28xx 5-1:0.219: Remote control support is not available for this card. [ 410.387524][T12179] em28xx 5-1:0.219: Closing input extension [ 410.401355][T12179] em28xx 5-1:0.219: Freeing device 05:42:43 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 05:42:43 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20108, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:43 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:43 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:42:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1}) [ 410.671035][T13748] bridge40: the hash_elasticity option has been deprecated and is always 16 05:42:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:42:43 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 410.922482][T12179] usb 3-1: new high-speed USB device number 21 using dummy_hcd 05:42:44 executing program 3: unshare(0x2000400) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x200400, 0x0) inotify_add_watch(r0, 0x0, 0x80000000) 05:42:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0305602, &(0x7f0000000140)={0x9a0000, 0x0, 0x0, [], 0x0}) 05:42:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="d3511f29a14636f02062e9e14952c8a0ba2045d0ef38ebfa88b15216376a8ef3a81287c593b84d5caeb10878d12cb85ef26804af10265cebb5ccc5015cb03e1e1de2837e984df492446a71cdae2868ce7a9fa530ce1f97ac2c2096d05842a8a6b31084f57e963bd2c0ff004f38afdef0bf2327276a9f0abfa903f641be86c48919c5c8c2a84f9c11a7fdeaedd9b1803aaef5ff7d91e3d83b3afa0e726eeda8c1f0c84f2e46d91f8a326c4cf322be09039c8883c2d1a136feaa08b62a166b57eb705843913da25d9de48c8bfe159517d13185bc0eb7e541de0e92de06080c43b16fc18ef6009fd39bd38b831750d85f1d30923ebe", 0xf4, 0x20000000, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000180)=""/96, 0xfffffffffffffe9b) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=""/87, 0x8000, 0x800, 0x7}, 0xfffffffffffffed7) 05:42:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x500}) [ 411.162147][T12179] usb 3-1: Using ep0 maxpacket: 8 [ 411.235936][T13774] bridge42: the hash_elasticity option has been deprecated and is always 16 [ 411.283254][T12179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 81, changing to 10 [ 411.295081][T12179] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 411.304532][T12179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.328423][T13774] bridge43: the hash_elasticity option has been deprecated and is always 16 [ 411.339334][T12179] usb 3-1: config 0 descriptor?? [ 411.589950][T12179] usb 3-1: USB disconnect, device number 21 05:42:45 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000021eeaa08b5192100dc400000000109021b00010000000009040000019352a50009058ae7009c51180fff2c60ccaa777f0b8d7bd32100000600950fb624e7e920bbce2a4f4b32364db4ea121e44150c207107b26a1fcf4dc3db75868b95ea05cea31cbc3dc9a5f7adf3700860e99188030a217bd1639a981991ff15c27f30991df7a1e69b7419eb4bef780a8e2a516e1604a86ab62bb4f1d6e5b854706bee0fb55aa0c79fb35c1d7e6606461c0e3a00e0eaf6f81f18acb366d4d45a46a8d79104148f5f41407b09c2093212a067aff9b72c01461023e243b7efcec97c054e391a26a7d49a946fc3d440667e696333d3b889668d2419b475000644e4"], 0x0) 05:42:45 executing program 4: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x190, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}, 0x208) 05:42:45 executing program 5: r0 = socket(0x1000000010, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000200)="1f0000000104fffff13b54c007110009f30501000b00034000002023020060", 0x1f) 05:42:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x3, 0x87) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0)=""/4096, 0x1000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 05:42:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = syz_open_procfs(0x0, &(0x7f0000001300)='attr\x00') fchdir(r1) quotactl(0x2080000202, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)='-') 05:42:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 412.161592][T13793] bridge44: the hash_elasticity option has been deprecated and is always 16 [ 412.186485][T13797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 412.226049][T13797] validate_nla: 6 callbacks suppressed [ 412.226134][T13797] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 412.259133][T13797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 05:42:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x56}}, &(0x7f0000000040)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\x8d+\xf7\xa60\xbb\xca\x06\xc4\xd3B\xf1\xd1\x14H\xbeTo\xbb\xfb\xc0\xebV\xff\xbb\xbe\xa2\x90J|s\xc2\xc7\xe5;\xdax\xb9o|\x8ck', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 05:42:45 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xeb, 0xdc, 0x10, 0x20, 0x83a, 0x3503, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x41, 0x2b}}]}}]}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 05:42:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000002, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000005c0)="ea", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 412.262865][T13804] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 05:42:45 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) 05:42:45 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x100a}}) [ 412.492198][T12219] usb 3-1: new high-speed USB device number 22 using dummy_hcd 05:42:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syslog(0xa, 0x0, 0x0) [ 412.715665][ T12] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 412.732241][T12219] usb 3-1: Using ep0 maxpacket: 8 [ 412.852472][T12219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 81, changing to 10 [ 412.863844][T12219] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 412.873195][T12219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.883685][T12219] usb 3-1: config 0 descriptor?? [ 412.957489][T13803] bridge45: the hash_elasticity option has been deprecated and is always 16 [ 412.962091][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 413.102218][ T12] usb 4-1: New USB device found, idVendor=083a, idProduct=3503, bcdDevice=e1.dd [ 413.111473][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.121533][ T12] usb 4-1: config 0 descriptor?? [ 413.134859][T12179] usb 3-1: USB disconnect, device number 22 [ 413.170842][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 413.219700][ T12] usb 4-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 413.228877][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 413.241443][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 413.294626][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): Fatal, failed to submit RX URB, result=-2 [ 413.306057][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): hfa384x_drvr_start() failed,result=-2 [ 413.368064][ T12] usb 4-1: USB disconnect, device number 13 05:42:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0, 0x39}, 0x80) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380), 0x2}}, {{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x2b5, &(0x7f0000000480)}}], 0x2, 0xe000) 05:42:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, 'vboxnet1-ppp1mime_type)GPL+'}], 0xa, "679028210c958d284a9de1c159d7d6f251c36267e1f5c0935aaa5401f42a08f77f3080605da039fedddd4e8a1de10927847ba7b5580524d0e9f88f59f0578a139a5185136211bddb6c33345a2c685f7e5ddddae753b603d7a5c29f5d4c98701219d236301cbf556e2c6b6d9a73f90bca2427406fa31652a96d413f63025d01ff4730acca5b49cc818899e2adef85e5fe73793ab6bf236b1396b787e6e9eca93a98168842d9a8eede127f0aac3e0dce55e0d9d5d4da245ead41955726d1ec257d0de40f06a154c718bfbff532382e2e66bedd563af370535415e9ac15e17b2b5598d413024edca1c8cf462ae270372a8422213849aeba69e0a364b9b0da6b987187defe0fa11ce8fe777f8b953141af483472d13d904585637b156ed4f36ebd9d477442b0fa6c994c508d76d5af1600bf88a7030dcbf7ec30214ab7e3707af19e731e62801f067e54d9dd4f10f220568d76e81dc3116b9c590593d48e1844512a57ff4a53aba83485af31ed2bf7f86bff275e4d88a5778d24f5d9ddb0edf05a1922092a0167c311773d8878bca54e4da8ef95e0ac6c7ca74f0823e273d8959c7b8a4b49a48eba2f2d755bae3b7ad618f88a2f75165a2ad4d875128161c0072d8d3b0e619433c9020b7df770270d047fa9d109d87e2e8edfdfc236bbd7c6729f45856bdea9f5096bd48e213ebd5c9ec232c6fc22ce18f3e1d1bb97f10dabc68b2482b1d54b85ad361873a1730039796e76c09aa63e8c6c9881cd9b56dd1cb2e067245f9c8ab0e1ec68bb6328cc21a15cebefa37fc968bdce13f41b14fbdfdd986fd3d9a4a75ee0ed6a3c36feecbf9505f78fbc4a3972da79ae4222fcc3efb132bd1d9f0a2a589f93e6f7e7552e66ef37a2eeba662b486b3b8e300333e15500f0ea2fa7bfaa28df766b014363fb92f717de95c9bf83068b94fb6fcde168142f61e8f974a942be2a5713833c7e0edb3714fa5964329c5a9191d4ef15b8fad4eae831cac05f92d5b0990144e3acf55bccd251b57c7e05ab86726f4cbc5a73850f03c6da7ed333c7fb106779a5e4aa5cab7112bfbf219dcc601c018b160827a906d95b484f3ffb7707d1f351c643301b791c6bfd5886b070e35b77aecbc744ec5ef77c5ad0a1479253855741c2cd8f0b4b199e457a9a90fa04360251677809474cf6f4c003a5cda60a859e5a1efe84330961bb910b225361c7c190cff5e6d95757068cd68dcbec555ad9f12eceb72d049ef9672fefdc9b6fdd030ffb65bc489c238c7e17306a6198e2b88b1ba6d8e2f756bf789232b58aa1141098b5b826d37584968bfcf84adf8985e06ed8bfddd3896abcd8d11738baad5a835da757cb97532d626bf9a3b8de448e164006dc40b0f33fe90f901748050a63d48eda21949ae5b5e6f45bdf7de5c9bcfdb0f7c579ffc1d2b7f35cba2b40af6f4b188b5b18bc40f927fc5e0963b057fc8d915d395182fec2fe638abe669a264be04705d22704384806577a5eedba7972efd96e1ff2d4486b08c885334ed0d57233478efd9a9401ab919e0a23238f9965d8c5248f25d5a80a7ebcf1e2d1bdc187db41354c2ba94bbe2de46c6757a70197e0343243f61f53c6cdc7277ccb5858eddca68c84abd4e0e4061dc6cc798d7d5c45be722432dde9f90f7b2196f9d21e66f5aca730a2b7c090c6935237da136a8f7f4cceb4a5e5697a7c25474731bcba03342291d582cc84bc28da77db41915a41417a45fd8531868ad0502560cf0149801d474439bd96b0e42919b74fc270e581ced6d23d1c2691fd947cbe1b6284715db76d7dd92d8d2f23bbb16805fce96a0782ce550a6af4f454f3806191a5bd41e8d17da71534266ce6f3c923ea503b4abf4c242ab2c782d00a9abcd3f8649840ece23b95c99278e44c32e247596615cbe5d9aced72a7f63f73bd505d2cc0f0efb56763db2cb7cfdb8166c60c30de48c5937a2c07797c4623672a2a3df217c78b5d0e8efff987e27e4a432897c9c45eabdd451d685913b71ffa834c97605c7491b35f9626eb2e7a29e0edd07ec6649fdda40550caa5b4d5c0214b579e748a3bdb2b204f42b48efc3d700752b21334861793f462f04902866b7e2357c95477b16e5d503de0014522551309e7808fc267e3010c39ed1d1cb5ed705cbc4b6dd96485f519848ff91191ab2888917408faeb0951cc902c5aacb7f7ebfb8dc9a0c0aa44ed652a2620a1bd2156c0ec24196fea4c5829d75ae7c6286556f683e06bef5b9f1f4d2746be4dac38b7fff69b51dd2d543d9cd9000fc9544a9c3f8e9c7299168416fe6508062fe8ef666f1c59c1dc18ec7d47c49d2daeb591dae5f08572cb0494a5db80fe2e7db48f2abfa4892aac903a7a367daef2ced04e8613c95be59999d0de25d31a02ed1562b0988d70baf0f5da6a7983264bc0d685a89ddfb250842626b8e63a9cf54f0094ee06b8bef61c8cd3bc5f529238d4e1c30b372fcf7e6b8d74f43980e79c1de36b729bea2443e2f40eb41cc36112df2f1b648e2a7e7a62e1ced9adb36990d4dd46b303aef3268144f30542e73934df7b0c274dd0d9a6c5b4ee3d745d65af2631731fc673690b311beb8667ab27ab522847f2a7e54df31ab86b699f6e11187e760c8f6faed3a3dcd5dc6ef6206462e5dfa9cc33bd11fdd54f8b0cab19b32e9df877064da894995b031e07e4536f72fa243ce2e7d1adff7f1e00bdfbeedad1531b9c85a309dbd5ae15c3e1c90533c6b14ebf29e6939deec2ed7c1cb6cc46406ab21c80685b22c2fb657fa98b1346c2f92d892001f6ba31abdfab41cd54b0de1b9c58eb6fa910919949baa1e5edb4183c7267be1843abd6bea7e9e24b5e4c1a1b532c0633cef893dc176bba11a2dafb533dddefbe334b80b873a86e4b42ae908c090f09340df1e31a3f85d32978591e6595ff920aa2237e615c701355859cc7311ceb147a00e40d2ddc47e3a065a7683692b097778fc7e0bda0783cc347ac6dcea83b51d928750f5afdba77a28d8b2ece6be7694bbb1bad0762caf6f2851976f49007325ea8c60be9dea0589cd8745fe694e4739316495543a0f184320b74112f1c7bfccf0cea1ceacb762a9556d6a0f9b97192098474cb314d3511080fc48073e905be2081e47b1b172b19f6b7db1094b54f5c0f05cdbcd8807b7d0e931976abe994f93c5bb79649975df2066a825e93ac763edcf41bdb952def9522e41c31cdcb9c2763a26d5866f821205ff9511aea69d940cf8eb4922dacf6918e2ca5c711b5ee767d2fee3b7692de21f1718e6f6611b1ace8e75d760941f86c0ec56da81ef983054ac9993f0a3519cf66e7be71a9f4272243497e4f9aa1d181638701c44ba1044b829cd3a9d4cb5494ff255a8c9ce90cca7b58a2d8f029d6682a0b1d5f0b141feb183ee19cf1fb680ddd2bbaf9f100b85402374e8cc0d81c15b502879b915ab4aae6fc227a702f26582f5ab6c739770e22e21dff04d555351698a76e54170648e040dc2751a00dbb2b316d72aa5f1db6387c327fb9caa723d632a9e578080cbb9c05a49e29c0f78860d07e06139ae7cc7bcae95b37b44a5459e1e03cd5792f321a47b7cacaf1580fb99b55aace7f8cf582ba00903045e315d7eca639bbcd07ea429bf250b0f7ac5682a4d4ef9ff49ad6f06c3760991b22d4ab76a150a90cbffd2055f978f7c0c3e2de5ac2deaa1a86b89c49f69f57e6f317642eb202d9c4d5fb5bf13cdd5a67065ce2243d8354022991c37ece1c8b1d7c39a0d7aeb5e795acf341d86d3bbd1876fc00e0832a83f50aa62a8d3bbc43f8620fbd927af3eb16dc153254e6457b6907bbbc7a5d6bbe2d41f12c3aaedcdf1be96ceaa0dcc7856f75c8e84b582c5a0290cdd8a423d53dc0fe6f949c5b892fb46a03aeb14be3663b664f15e1433e68986bffc0afa609cb0dec7f4eb34ef9e2c9b17bbb6b458f363016e49b88b40646022b74eaafb780368eebc23b9ebc82fb17266917c960d51eb8854b16049f7cab4870fc0c8fc8b6ce701c64f94869af2930732a6515bd4b9b888894124b24cdaa307815da16f800e35683fdd91571d40e24af5904c276f4ab75b7ad1b3eb74e06500814775e7fcdec429e16cbe9a6ce0a065d97ea0fc905940af19f0ef26c09931dfb9e2b12651e1cf94658dc2936e345fe10e20ac54e2c487d7810f1f3277bc778123175a550ec9ce03dff587cd336df1d3a891f447b22b760328d74c80d57b1aa707e6b0ffb68646e7b404440ee301d84d9f8f7e4c283e151dfe987d37df77b2a1c78e1da6b44d567f3bb524c2fcffe40b580b5c337419b25c297654ad5c96a12f00aaa15220cc9ad3e39c7b988b9dc9c38410d911e0c983cd7cb0317c50d2209d3529b843b0a343b6fbdc748835947536c472fb57440bfda2bb9699ee6926f20b9d4fbe31cd1e68354045efca75b82f485d2f6bb53cd7a13889d4491df3bc6673368f45a6d4573386b3a681ccee793ea66e0001e983b9bf42de1b1be3a56c6b75ddf3bbfff68fa2ee0e10b45530625b5f2a714cd620e2bdbf667aed5a22da309e0ef3ccda4f847ce361459e7937e61bb90776028a72ab072db99f195592d9ee6791cad5cc7d024e0f1f50c42e599752ee410551ac5e2fd1062bd18b27cab489480d9d97b0e4578ecf80977c290c0f0de3ad90a5ccd575ab27c25103991ab3806fb71fa122ef56fdd17eed11327b5e4537edaab87dda77b3f7627841fe5e3bb6c6910e531675bcd96ab6b675ea1f4c28d0c8103e768a2459b8a849e0b86ebf2b2522cf6d6bf404eab597a6db797c95c209c744040735201fc67f08c1303ed5ead697081ad3c895c65d5c33b0013db53ecd14b31542f8bfdf883813e07997a2f04e6726fc8d566abb85826291a6d638739e1c2f5f80a9af182c2f32d3013fd369ecacdbe0cce4664aed8d07d20aab0525262e5b1b3c14f6efe7c515310359acf6acf08d5e0f6946d4f88a68297646434fc7d632c77625bdb157fffe8794c78b771cc1023ba39e1dc44693ee74e95c1a959768b9f27a756c3f1fce9fd9e3e5739030fb07e5b48693798b1d5a1e37071c8728f1ab57634e655a16b8cb6df6bd86054d2e9eaa6ef4216f77fbb67724f0367956560f4a7b448adad80333fe5561d1fde05ee5b6f2b3d093957dcd1ceda842ca73308f02e175a661043bfc4438002db4d2b478a624c3dff40352fa914ccdf8997ef77019fbad4c53331d8da000e36e4273f6cd06c5f64c66cb64bc9c260e0cd9b4b1528e4099441d771c1c410addc84400edca511caf01d458721f0d48c96f2bc70c18811da4859ec4b1d615d5c701785bb573f1ff83587d938e46e21f8c984354bcf266d1c91889a303a65bcee2a1c92dcb8232ce05c8abcf78b453b7f712ea918e0dd85c964bdd2ac1814897b39cb8a48b3594320ee25f90655d0911da013ca7a70d82685f8dc1231a36afb110e58428f3d777c4759c6479777cf9c78e00644652704b089ed5378b4976de41d9897e86e3fdc02ed2d35a5b6f8f6cfa647fb59b7104a29c686ef855e6716637a128a27182e1a1f2387377eff15d2ecf864555927d6ce680ac87c7667b94e8ff8884cf2a7d5a868fb876b719f99377cf5d0c4f0a84353380ea40051f055564fad529320c842ebe72557409a51df785cd909fd20b54e1d1963cbed85361434f3c2ea435c2cf16ec49a37ae2fb0871d7538b05de8d1ecac6fabf62e0b5b77eb079b28cd6aa7bb98fbd4c749e0c05954d2207564fd54d1b12dc7d1de4db024bc5939b60ff976d6edaccb2d1395a32938be3acd8c2e70fa671a938eeda14b5966062b"}, 0x1028) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:46 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) unshare(0x20400) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) 05:42:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x20400) shutdown(r0, 0x0) [ 413.805020][T13857] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 413.825549][T13851] bridge46: the hash_elasticity option has been deprecated and is always 16 05:42:46 executing program 2: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x101) creat(&(0x7f0000fdeff8)='./file1\x00', 0x0) 05:42:46 executing program 4: ptrace$setsig(0x4203, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16, @ANYBLOB="02002cbd700000dcdf25150000000000070000000100480000000000f7ff000002"], 0x3}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:42:47 executing program 5: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000001f64)) [ 413.964318][T13860] bridge47: the hash_elasticity option has been deprecated and is always 16 [ 414.233620][ T12] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 414.492004][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 414.614543][ T12] usb 4-1: New USB device found, idVendor=083a, idProduct=3503, bcdDevice=e1.dd [ 414.623841][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.637781][ T12] usb 4-1: config 0 descriptor?? [ 414.693699][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 414.706014][ T12] usb 4-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 414.714516][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 414.726786][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 414.794712][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): Fatal, failed to submit RX URB, result=-2 [ 414.806596][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): hfa384x_drvr_start() failed,result=-2 [ 414.888251][ T12] usb 4-1: USB disconnect, device number 14 05:42:48 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xeb, 0xdc, 0x10, 0x20, 0x83a, 0x3503, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x41, 0x2b}}]}}]}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 05:42:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) 05:42:48 executing program 5: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000001f64)) 05:42:48 executing program 2: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00\x00\x00\x00\x00P\xe0\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 05:42:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc0a000000000000613200000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x21) [ 415.505652][T13903] bridge48: the hash_elasticity option has been deprecated and is always 16 05:42:48 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xb}}) 05:42:48 executing program 5: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000001f64)) 05:42:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc0585611, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "35643d88"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 415.604402][T13906] bridge49: the hash_elasticity option has been deprecated and is always 16 05:42:48 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000380), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "af73cc9b83525149"}}, 0x48}}, 0x0) close(r0) 05:42:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff100000000000060000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:42:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x1, 0x0, [], &(0x7f0000000080)={0xf0f043, 0x0, [], @p_u8=0x0}}) [ 415.841962][T12179] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 415.878286][T13923] bridge50: the hash_elasticity option has been deprecated and is always 16 [ 416.082226][T12179] usb 4-1: Using ep0 maxpacket: 32 [ 416.202443][T12179] usb 4-1: New USB device found, idVendor=083a, idProduct=3503, bcdDevice=e1.dd [ 416.211988][T12179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.221539][T12179] usb 4-1: config 0 descriptor?? [ 416.270290][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 416.282768][T12179] usb 4-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 416.291174][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 416.303372][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 416.352455][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): Fatal, failed to submit RX URB, result=-2 [ 416.363793][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): hfa384x_drvr_start() failed,result=-2 [ 416.478603][ T12] usb 4-1: USB disconnect, device number 15 05:42:50 executing program 5: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000001f64)) 05:42:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x5eb, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x2af}]) 05:42:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x3, r3) 05:42:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000004000200"], 0x34}}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x100000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', r5}) 05:42:50 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xeb, 0xdc, 0x10, 0x20, 0x83a, 0x3503, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x41, 0x2b}}]}}]}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 05:42:50 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) setgroups(0x0, 0x0) [ 417.043441][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000640), 0x340) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd4, 0x0, 0x0) 05:42:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0x3b8680000, &(0x7f0000000080)) [ 417.116433][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:50 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x5c) r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e) write$sndseq(r0, &(0x7f0000000080), 0x67e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800) 05:42:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe}, 0x34}}, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000080)) 05:42:50 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 05:42:50 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4000000}, 0x8) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) exit(0x0) timer_delete(0x0) [ 417.331446][T13973] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f0000000000)) unshare(0x24020400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 417.392438][ T12] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 417.420711][T13973] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0x3b8680000, &(0x7f0000000080)) 05:42:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80, 0x2000) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000100)={0x66, "ffbf000042ffffffff16a8ba91e7392b9a2181cf0433a3c0327824a818b09322", 0x1, 0x6, 0x3, 0x400, 0x2}) close(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) [ 417.632000][ T12] usb 4-1: Using ep0 maxpacket: 32 [ 417.716956][T13993] bridge51: the hash_elasticity option has been deprecated and is always 16 [ 417.749379][T13996] bridge52: the hash_elasticity option has been deprecated and is always 16 05:42:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0x3b8680000, &(0x7f0000000080)) [ 417.759424][ T12] usb 4-1: New USB device found, idVendor=083a, idProduct=3503, bcdDevice=e1.dd [ 417.768938][ T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.836005][ T12] usb 4-1: config 0 descriptor?? [ 417.881613][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 417.894029][ T12] usb 4-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 417.902696][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 417.914861][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 418.004601][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): Fatal, failed to submit RX URB, result=-2 [ 418.016155][ T12] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): hfa384x_drvr_start() failed,result=-2 [ 418.092574][T12179] usb 4-1: USB disconnect, device number 16 05:42:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x404c8c9}, 0x240908c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001006362710018040200140406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500"/1068], 0x444}}, 0x0) r2 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 05:42:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0x3b8680000, &(0x7f0000000080)) 05:42:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) 05:42:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x81, 0x1, [0x0]}, 0xa) 05:42:51 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xeb, 0xdc, 0x10, 0x20, 0x83a, 0x3503, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x41, 0x2b}}]}}]}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) [ 418.705149][T14030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.721670][T14023] bridge53: the hash_elasticity option has been deprecated and is always 16 05:42:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x2}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:42:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/166, 0x2e6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x1000000000000012}, &(0x7f00000002c0)) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r0) tkill(r3, 0x15) 05:42:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x3011, r0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000fc0)={'security\x00'}, &(0x7f0000000040)=0x54) 05:42:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x1c, 0x52, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000024}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:42:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 419.012088][T12179] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 419.023881][T14046] input: syz1 as /devices/virtual/input/input21 05:42:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x0) [ 419.145339][T14057] input: syz1 as /devices/virtual/input/input24 05:42:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000003b1c0012ff7f00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x8002, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat2(r2, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mq_getsetattr(r9, &(0x7f0000000040)={0x6, 0xc6c6, 0x2, 0x0, 0xe0bf, 0x1, 0x3, 0x2}, &(0x7f0000000100)) r10 = dup3(r6, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r10, 0x80dc5521, &(0x7f0000000040)) 05:42:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="390000001300090468fe0700000000400000ff3f01000000000000070000001419001b000400020007000a007356f30500a338acd178550e69", 0x39}], 0x1) 05:42:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x78, &(0x7f0000000000), 0x4) [ 419.272392][T12179] usb 4-1: Using ep0 maxpacket: 32 [ 419.386003][T14069] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 419.396124][T12179] usb 4-1: New USB device found, idVendor=083a, idProduct=3503, bcdDevice=e1.dd [ 419.405690][T12179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:42:52 executing program 5: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) keyctl$setperm(0x5, r2, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x1, 0x2e}, 0x0, 0x0) [ 419.449220][T12179] usb 4-1: config 0 descriptor?? [ 419.510613][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 419.522851][T12179] usb 4-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 419.531459][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 419.543795][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. 05:42:52 executing program 5: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x1f, 0xd8, 0x0) [ 419.847049][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): Cannot get bulk out endpoint status. [ 419.858151][T12179] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): hfa384x_drvr_start() failed,result=-5 [ 419.926590][T12179] usb 4-1: USB disconnect, device number 17 05:42:53 executing program 4: capset(&(0x7f00000001c0)={0x20080522}, &(0x7f00000002c0)) pivot_root(0x0, 0x0) 05:42:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x10c002, 0x4) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 05:42:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x4b564d01]}) 05:42:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 05:42:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x0) [ 420.370290][T14102] bridge54: the hash_elasticity option has been deprecated and is always 16 05:42:53 executing program 4: r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='cgroup\x00', &(0x7f00000000c0)=':\x00', 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000180)=""/61, 0x3d}], 0x2) [ 420.546714][T14102] bridge55: the hash_elasticity option has been deprecated and is always 16 05:42:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 05:42:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0x80000001) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') sendfile(r3, r4, 0x0, 0x6052b11e) 05:42:53 executing program 0: unshare(0x8000400) unshare(0x40000) 05:42:53 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_gettime(0x0, &(0x7f0000000280)) 05:42:53 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x29, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000fd737cf4e65be4d3ebb629daf637d1700001000050700"/36, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@ll={0x11, 0x0, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1d0620f8c1ce67f5}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="255d845c6d46f48889ae5efee47960e879018b1ec8b9b52af5c66bf982b1f83dd71ca0e3078d91bcb72f98253ef968", 0x2f}, {&(0x7f0000000180)="e23b4bf70dd6be1aa19107121c31b551c6bc74fcba9e09c4c62fa5ad05ab4b858491d1b63d78affbe52478c62f07264607359aa5b9a2d4c4c527644f89943578772c5d41bdd551dc69a966b01bf41b21e8759f5790c2173959a0e14202164e328e598239cfd195ce8a28ccc04266f6686a46a12c55c66972ad5a923efa4aacb6c0396789e8faffb51530afb300b69c32d057693eca54897c6e00d7f74597a19632", 0xa1}], 0x2, &(0x7f0000000280)=[{0x18, 0x110, 0x200, "91ecb20406428a9b"}, {0x100, 0x1, 0x5, "217a0e1ab558a12fb93ba4e172111a8289454426b438acd773c4605e1fa8e8915a48848832252948c6d54fd5580f6c6fc105150d6b4d8eeec15ae9340062668d3203b1ced54c456d9c72531a4af257fb5b488c37a49696d979145bc7e03f5c1053f8b603bd5b85968f1dcee5e0f2e8643aa77a6fa4deb51d5527e6319dd85b0f1da7c5e8c2990f167a33c0f3cdd9f90562218bf8233a4496b3548c0b2de4ff17775939959bd4e7dc62710b19177b755f1eb9b43cf714272db253a329da3262acd5e6a55670744d3294c1433c254c9a39962ef8e12935ad81e0e011e917dbf25370f08a590f54df9cf8d7"}, {0x88, 0x10b, 0x3, "fb87f522a57a4b2ee1154fb9ad1c76e346732a79b0ced7b1f79b05b2cd6eba07da050b94f90c148d577056454c32a6a75b22fac398392e290dc73972081cfe2fa74086005c7fec6c6e1f2a1147d34214950b60d3ac1088571bafd692a37602ecab07224cc81ffb4f5135facdc80b238590"}], 0x1a0}, 0x84) iopl(0x4) 05:42:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000000c0), 0x3deb4254893f4e, 0x0) 05:42:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 05:42:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) dup3(r1, r0, 0x0) 05:42:54 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) close(r0) 05:42:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x0) [ 421.302536][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 421.309010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 421.316688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 421.323234][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 421.329885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 421.336660][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:42:54 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x4, 0x9, 0x4, 0x4000, {0x77359400}, {0x3, 0x2, 0x3, 0x32, 0x29, 0x7, "79b59d79"}, 0x6, 0x3, @fd, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) lookup_dcookie(0x5, &(0x7f0000000180)=""/192, 0xc0) 05:42:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000000c0), 0x3deb4254893f4e, 0x0) 05:42:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 05:42:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) [ 421.598929][T14160] bridge56: the hash_elasticity option has been deprecated and is always 16 05:42:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, &(0x7f0000000300)=""/242, 0x4, &(0x7f0000000100)=""/4}) [ 421.752003][T14160] bridge57: the hash_elasticity option has been deprecated and is always 16 05:42:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000000c0), 0x3deb4254893f4e, 0x0) 05:42:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000006400050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="1f6b718babfca7d6d30a00000000a8"], 0x48}}, 0x0) 05:42:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0xffffffffffffff28, 0x12, @bridge={{0xc, 0x1, 'br)dge\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40884}, 0x0) [ 422.112919][T14181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:42:55 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) socketpair$unix(0x1, 0x2000000000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt(r0, 0x114, 0x271a, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xc08) 05:42:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000000c0), 0x3deb4254893f4e, 0x0) 05:42:55 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x0) 05:42:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_mreqn(r11, 0x0, 0x0, &(0x7f0000000440)={@broadcast, @multicast1, 0x0}, &(0x7f0000000480)=0xc) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x200000, 0x0) r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup3(r18, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) r22 = dup3(r21, r20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) accept$packet(r22, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) r24 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700)='/dev/mixer\x00', 0x441980, 0x0) r25 = syz_open_dev$sndpcmc(&(0x7f00000007c0)='/dev/snd/pcmC#D#c\x00', 0x2d68b527, 0x18040) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r27, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r26, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r30 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) r32 = dup3(r31, r30, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r32, 0x8912, 0x400200) r33 = syz_open_dev$midi(&(0x7f0000000a40)='/dev/midi#\x00', 0xfffffffffffffffb, 0x80800) r34 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r35 = socket$inet6_tcp(0xa, 0x1, 0x0) r36 = dup3(r35, r34, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r36, 0x8912, 0x400200) r37 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) r39 = dup3(r38, r37, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) getsockname$packet(r39, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x14) sendmsg$nl_route(r3, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000cc0)=@bridge_getlink={0x2e0, 0x12, 0x6c5a23049692f51d, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x21008, 0x2}, [@IFLA_PORT_SELF={0x38, 0x19, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4ea8f32b4d2a039c5ae944b8b9180041"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "baead8585345d012d9b02e27ee899958"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xd0}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "f9cc2a1a2f44183af392da41d5b64ccf61"}, @IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_MAP={0x24, 0xe, {0x9b6e, 0x66b8, 0x5c, 0xf7e, 0x9, 0x8}}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller1\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_XDP={0x204, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x74, 0x1, {0x13, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x2, 0x64cab401382e4066, 0xfffffffffffffffc}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0xe5, &(0x7f0000000280)=""/229, 0x41100, 0x0, [], r12, 0x6, r15, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x9, 0xa6, 0x7}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0xc, 0x9, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@exit, @call={0x85, 0x0, 0x0, 0x69}, @map_val={0x18, 0x8, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r19}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0x30, &(0x7f0000000640)=""/48, 0x41100, 0x1, [], r23, 0x28, r24, 0x8, &(0x7f0000000740)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xe, 0x0, 0xfff}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xe}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xe}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x74, 0x1, {0x15, 0xe, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff2, 0x0, 0x0, 0x0, 0x7fff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @exit, @ldst={0x0, 0x1, 0x0, 0xa, 0x6, 0x18, 0xfffffffffffffff0}, @exit, @ldst={0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff4}, @alu={0x4, 0x1, 0xd, 0x9, 0xb, 0x30}, @jmp={0x5, 0x1, 0x9, 0x7, 0xb}, @exit, @map={0x18, 0x1, 0x1, 0x0, r25}]}, &(0x7f0000000880)='syzkaller\x00', 0x5, 0xec, &(0x7f00000008c0)=""/236, 0x83d00, 0x4, [], r29, 0xe, r32, 0x8, &(0x7f00000009c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0xd, 0x8000, 0x80000000}, 0x10}}, @IFLA_XDP_FD={0x74, 0x1, {0x4, 0xe, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x21f5, 0x0, 0x0, 0x0, 0x9}, [@map={0x18, 0xe56df3f3d8d9fe63, 0x1, 0x0, r33}, @ldst={0x0, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffc0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe1c1}, @map={0x18, 0x1, 0x1, 0x0, r36}, @exit, @jmp={0x5, 0x0, 0x5, 0xece7d9408a15ca15, 0xb32625c1fca2596e, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000b00)='GPL\x00', 0x6, 0x58, &(0x7f0000000b40)=""/88, 0x41000, 0x1, [], r40, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0xf, 0x4, 0x1f}, 0x10}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x2000}, 0x40001) 05:42:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 422.429797][T14197] bridge58: the hash_elasticity option has been deprecated and is always 16 05:42:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150081f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) 05:42:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "9645e89650196a1a", "45b6e022dbf1fb07ff029bb594c2dcd09a59ebdbe2da06595dfd2797fa4d91bc", "b2d2c111", "b2134e61152bd8a8"}, 0x38) sendto$inet6(r0, &(0x7f0000000280)="db", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="c66e3563c5aed6ea565263730c97dccc7866", 0x12, 0x8000, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080), 0x3fff) 05:43:04 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 05:43:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffff1e, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 05:43:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 05:43:04 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@cswp={0x58, 0x114, 0x3, {{}, 0x0, 0x0}}], 0x58}, 0x40) 05:43:04 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) 05:43:04 executing program 2: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x2201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f0000000000)='./file0\x00') 05:43:04 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000400000fbfadbdf250f000000080002000400040008000600040002001c000200080001000000000004000400080002000000000004000400700004000c00070008000300000000003c00070008000400040000000000010000000000080001"], 0x1}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:05 executing program 1: socket$netlink(0x10, 0x3, 0xa) 05:43:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {0x0, 0x10}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}}, 0x0) 05:43:05 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 05:43:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:43:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc001102c, 0x0, 0xc0000101], [0xc1]}) 05:43:05 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 432.510474][T14254] bridge59: the hash_elasticity option has been deprecated and is always 16 [ 432.525556][T14257] kvm [14256]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 05:43:05 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) [ 432.635735][T14262] bridge60: the hash_elasticity option has been deprecated and is always 16 05:43:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc001102c, 0x0, 0xc0000101], [0xc1]}) 05:43:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0xffffffffffffff5d}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) r4 = dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x19, "a03db1e2ea1146fa0d36067d93875f33a8751a4f0a6ddba1ab"}, &(0x7f0000000180)=0x3d) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8000, 0x15c3, 0x8400, 0x5, 0x3, 0x48, 0x4, 0xffffffff, r3}, &(0x7f0000000100)=0x20) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000200)={0x4, 0x0, 0x2, {0x8, 0x564, 0x7f, 0xffffffff}}) 05:43:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200000000002c000000000000220000"], 0x2a}, 0x2}, 0x0) [ 432.952062][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:06 executing program 2: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 05:43:06 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x71, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r0) 05:43:06 executing program 0: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000380)={0x3, 'bcsf0\x00'}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\xee \x83\xd8\xc6\x93\xc4\x98\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1000003a6, @time}) [ 433.157691][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc001102c, 0x0, 0xc0000101], [0xc1]}) 05:43:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 05:43:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100007ff00000000e47792e46562cdd7357906e9000020000000000070d06c322a818d59b48ec453f303560cd62ba9225cab02ae18abfc7fa810491cfdb204d8e2c43f4f42ff81beb2e28665e3550ca439f62f2a50a84468", @ANYRES32=0x0, @ANYBLOB="0000000000000001000012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000100)={'bond_slave_1\x00', 0x1}) 05:43:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r5}}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r8 = dup2(r7, r7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r8}}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x250}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) 05:43:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 05:43:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100, 0x8001, 0x0, 0x12, 0x4, 0x1, "467b864db6a0cdf4c955d7c3c3e55a6569a716fac81a078e60b4299626dd410dd9f6ddfe2537a3d16de72a38c3b4ec23ffb7281cd4e185ffcbb309597eebe4a0", "1cad3cd0086ba73d22c1c3620b5e03f94c8bf39dd592d6096c00289f070d7bdadcd623c10003b938cc4bc305c712e1de9b3e43ad05d937418c4bbe8f0250125c", "4b33156258e2e1a00a2dcc8c9efa032af5a9156912b3c89c5bfd595eea0aee69", [0x0, 0xfffffffffffffffd]}) [ 433.583255][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc001102c, 0x0, 0xc0000101], [0xc1]}) 05:43:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) dup3(r1, r0, 0x0) 05:43:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000100000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 05:43:07 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2a) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 05:43:07 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 05:43:07 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) 05:43:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000100000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 05:43:07 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000040)) [ 434.372276][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, [], 0x27}}]}}}]}, 0x48}}, 0x0) 05:43:07 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0) 05:43:07 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0xfffffffffffffffe, 0x11f) 05:43:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000100000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 05:43:07 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000040)) 05:43:07 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000040)) 05:43:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000100000056000000000000009500000020000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x4, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 05:43:07 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x3}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000380)=""/152, 0x246}], 0x2}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb0000000000000000000400000000000000000000000000000000000004000400170000001f000000000700003f00000000000000030000000000120002000b00050000000100000000000000"], 0x88}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) 05:43:07 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x18a9, 0x305580) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x2000}) 05:43:08 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x8) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000040)) 05:43:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000300)=0x30) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {{}, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80400200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0xd20, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5b7b7ae1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) 05:43:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000800)={0x7f3, 0x0, 0x0, "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"}) 05:43:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10}, {0x10, 0x11}], 0x20}}], 0x2, 0x0) 05:43:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) 05:43:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0xb, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 05:43:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 05:43:08 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010001fff000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000500012000c0001006970367674690000400002001400045d2d9065000000000000000000000000190800030002000000080002000101000008000300fcffffff0800020041e300000800030005000000"], 0x70}}, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x10040, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x10000, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r4, 0x7003) socket$inet6_udp(0xa, 0x2, 0x0) 05:43:08 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x9, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x57, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Al'}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xfe7b, 0x2, 0x4, 0x3a}, {0x6, 0x24, 0x1a, 0x1, 0x40}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0xd407}]}, {{0x9, 0x5, 0x81, 0x3, 0x1bc, 0x3, 0x7, 0x3}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x36}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x2, "", {{{0x9, 0x5, 0x82, 0x2, 0x1f0, 0x1, 0xa4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x139, 0x43, 0x80, 0xff}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x8, 0xff, 0xfa, 0xff, 0x4}, 0x14, &(0x7f00000008c0)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7ffc8e9, 0x7800, 0x3}]}, 0x2, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3001}}, {0xcd, &(0x7f0000000a80)=@string={0xcd, 0x3, "8969d4a3575fae55e83ec56a07e416e53a542d6d2af4b49014a782ff5a531aa37d9c29c76caf3867ea084a43153f54ba9f0c98e09ab85087a554b900f4f41e020a84429f21407953ecdeee307c977f6e8db139783843cad77349b4c09241cbb340058394214085a16fc76d8d4b8a5c26fd31312a4ff159f0c95ac6e92db74fe1b8b3464bead35b5190160c13e0a8ea1af8d63369dadd2cd506f606d9e2eef924701c66e6a3e79044eb0b7b2c42192f64426f82799222d648f24ed0e3da2cf9a1229ab815f8fd94a7a7ad8d"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000500)={0xfffffffe, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @remote}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:08 executing program 3: r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000040)="1b0000001a0025f00485bc04fef7001d020b49ffed000000800728", 0x1b) 05:43:09 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="5f454c44065b05007311625b1e43f0010bf32b9a993b89725d4d1c31090000173bd22023eb2be30c77a0ba068c2b206431cbfabdf1ba04fb7e92c1dda2de803ddf1eb6e00100db10c8203b9befd204603766a143dc457298a4a0c40bfdb8d13171c4ff9b9ff17bcb4a1ddd393d50a7b4eb3fc3df94dc8e42f51dd40bdfd0684338e5e5a9b74d227d2fd2348f3910f0b567feab1024e5545c8e2f4fb2b1f87dae23e4bea2ae51e6705ef4c96aeead685ba8a3ce7009d0d35c7dfaeaa17a06888a95e80990595c5a0920d575791269d11760ba875795e45962c5e9b44f753fbd2b6d42b0fc33c8ddb8b5bb25d4f3cf8a7893f33f709a6d9be460643177d009a08dfeb8dd9d8dd811dafdbf6e891bd0fb35ced45262208b9fa230002bb571a322180a52fde0d66ba36c2f336d040ada505673e79f2fa40a161a63bf2d2e3229bd2110492f50e55a7bd8d21ec373efcc1c9de46416766e9103746f39d66611666b22613ba77ece8a272b79e19131b485c91642bb07b583ad1b9acddb7ccbfd23737e08d1c550ecb2a46f7ae0d7c03bac8237cf3c67b13f08e011407610be2b120d9b52aecd4b6ef90ccc9ea117ce8ca22857fd578c4f79440a2f62c0129b6b56e5f624bd34c7c5047197e7456ca894"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f20, 0x0) [ 435.888318][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 435.926211][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:43:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200280, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000280)=r4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0x9, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}}]}}]}, 0x444}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', r9}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000200)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c80082, r10}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) 05:43:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0xb, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 05:43:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@deltaction={0x14, 0x31, 0x301}, 0x14}}, 0x0) [ 436.091978][T12179] usb 5-1: new high-speed USB device number 11 using dummy_hcd 05:43:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x127, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xfffffd17, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x0, 0x16, [{0x0, 0x1, [@IFLA_VF_VLAN={0x0, 0x2, {0x0, 0xa5a, 0xffffffff}}]}, {0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x9, 0x80}}, @IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x7f, 0x6}}, @IFLA_VF_RATE={0x0, 0x6, {0x4, 0x7ff, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0x0, 0xe10, 0x5, 0x88a8}}, {0x0, 0x1, {0x7ff, 0xab, 0x1ff, 0x8100}}, {0x0, 0x1, {0x7, 0xe00, 0x80000000, 0x8100}}, {0x0, 0x1, {0x6, 0xd50, 0x4, 0x88a8}}, {0x0, 0x1, {0x500, 0x578, 0x614a, 0x9a8}}, {0x0, 0x1, {0x8, 0x445, 0x4, 0x88a8}}, {0x0, 0x1, {0x1844fedb, 0x59a, 0x8, 0x88a8}}, {0x0, 0x1, {0x3f, 0x6dd, 0x0, 0xe13995edd50d9801}}]}, @IFLA_VF_TRUST={0x0, 0x9, {0xffff, 0x8}}, @IFLA_VF_RATE={0x0, 0x6, {0x80000001, 0xa0, 0x3f}}, @IFLA_VF_TRUST={0x0, 0x9, {0x5, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x8001, 0x1b65}}, @IFLA_VF_VLAN={0x0, 0x2, {0x7f, 0x3bf, 0xfffffff7}}, @IFLA_VF_LINK_STATE={0x0, 0x5, {0x8000, 0x2}}]}, {0x0, 0x1, [@IFLA_VF_RATE={0x0, 0x6, {0x5, 0xd9e, 0x513}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x7fe, 0xfffffffe}}]}, {0x0, 0x1, [@IFLA_VF_TRUST={0x0, 0x9, {0x20, 0x5}}]}, {0x0, 0x1, [@IFLA_VF_TRUST={0x0, 0x9, {0x4, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x0, 0xa, {0x2, 0x101}}]}]}]}, 0x3c}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RRENAMEAT(r7, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$HIDIOCSREPORT(r10, 0x400c4808, &(0x7f0000000100)={0x2, 0xffffffff}) 05:43:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0xb, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 436.349091][T12179] usb 5-1: Using ep0 maxpacket: 16 05:43:09 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 436.428020][T14436] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0xb, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 436.483068][T12179] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 496 [ 436.493320][T12179] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 313 [ 436.532870][T14442] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 436.542834][T14442] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 05:43:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f0000000100)=0xc) [ 436.700975][T14448] bridge63: the hash_elasticity option has been deprecated and is always 16 [ 436.711213][T12179] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.720713][T12179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.728891][T12179] usb 5-1: Product: syz 05:43:09 executing program 0: mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 436.733383][T12179] usb 5-1: Manufacturer: 榉ꏔ彗單㻨櫅吺洭邴꜔ﾂ博ꌚ鱽윩꽬朸࣪䍊㼕메ಟ뢚蝐咥¹Ȟ萊齂䀡卹ヮ靼湿농砹䌸퟊䥳살䆒돋Հ钃䀡ꆅ읯赭詋♜ㇽ⨱嫉뜭뎸䭆폪兛ᚐጌ꣠᫪훸椳픬⓹ᱰ䒐௫ⱻ᥂搯潂禂⊒䣖仲Ⳛꇹ騢ᖸﷸꞔ궧 [ 436.763286][T12179] usb 5-1: SerialNumber: syz [ 436.821161][T14448] bridge64: the hash_elasticity option has been deprecated and is always 16 [ 437.212191][T12179] cdc_ncm 5-1:1.0: bind() failure [ 437.264186][T12179] cdc_ncm 5-1:1.1: bind() failure [ 437.273838][T12179] usb 5-1: USB disconnect, device number 11 [ 437.862200][ T12] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 438.101985][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 438.222168][ T12] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 496 [ 438.232567][ T12] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 313 [ 438.402152][ T12] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.411377][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.419692][ T12] usb 5-1: Product: syz [ 438.424031][ T12] usb 5-1: Manufacturer: 榉ꏔ彗單㻨櫅吺洭邴꜔ﾂ博ꌚ鱽윩꽬朸࣪䍊㼕메ಟ뢚蝐咥¹Ȟ萊齂䀡卹ヮ靼湿농砹䌸퟊䥳살䆒돋Հ钃䀡ꆅ읯赭詋♜ㇽ⨱嫉뜭뎸䭆폪兛ᚐጌ꣠᫪훸椳픬⓹ᱰ䒐௫ⱻ᥂搯潂禂⊒䣖仲Ⳛꇹ騢ᖸﷸꞔ궧 [ 438.454063][ T12] usb 5-1: SerialNumber: syz 05:43:11 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 05:43:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") socket(0x22, 0x2, 0x4) r1 = socket(0x22, 0x2, 0x1) close(r1) 05:43:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x271) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000780)=""/98, 0x172}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 05:43:11 executing program 0: unshare(0x20040600) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000043f000/0x1000)=nil, 0x1000}, 0x2}) 05:43:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7064797f, 0x88000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4, 0x2}, &(0x7f0000000140)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)={0x2c, 0x4, 0x0, {0x5, 0x4, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={r10}, &(0x7f0000000080)=0x8) r11 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r11, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r11, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={r10, 0xea, "e22751a98a806b6ecb8cb44c7f0a3aa70d9b9b44c155b43d70debae5918418b9d92416e738b2b0b4e8dc1d4d82720a1a538b40125b664d74862b60698b24af611198083b7161415e97ad3d7e76b60c89911095422146e7a63ab278da462b207fb7c1591ee0df6581d557cf27307e8b941497033f4b62c270bc4e6048730a001a1e9d96d44740def9a831521d55d3ae3d760391d0b9edc717324786bb6414614d7b2c4d90ff7061d4377623ea638c136b7639ddab74d82010f35b72bf5cf111d6b30d05512dd09c113c306b4643f0fd947ab9f5f970614a6db32d8cbb5b70a366e3ca909f9ad754ded507"}, &(0x7f0000000280)=0xf2) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000040)={r14}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r14, 0x5e2}, &(0x7f0000000300)=0x8) 05:43:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0008000008000100706965000c0008000800010000000000"], 0x38}}, 0x0) r3 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 438.832408][ T12] cdc_ncm 5-1:1.0: bind() failure [ 438.853172][T14473] bridge65: the hash_elasticity option has been deprecated and is always 16 [ 438.894097][ T12] cdc_ncm 5-1:1.1: bind() failure [ 438.946104][ T12] usb 5-1: USB disconnect, device number 12 05:43:12 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 05:43:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3}]}}}]}, 0x44}}, 0x0) 05:43:12 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) 05:43:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:43:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x9, 0x7, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 05:43:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) [ 439.237960][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000006 [ 439.277889][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000008 05:43:12 executing program 3: r0 = memfd_create(&(0x7f0000000200)='vboxnet0nodev\x00', 0x7) unshare(0x20400) fcntl$addseals(r0, 0x409, 0x0) 05:43:12 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) [ 439.329616][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000000a 05:43:12 executing program 4: personality(0xd21d0356f446a02) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000140), 0x8) [ 439.406729][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000000c [ 439.443964][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000000e [ 439.488029][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000012 [ 439.501363][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000014 05:43:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3ad) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r1}, 0x8) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x76, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0x8) [ 439.531674][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000016 [ 439.552681][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000018 [ 439.561413][T14502] kvm [14500]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000001a [ 439.649691][T14488] bridge66: the hash_elasticity option has been deprecated and is always 16 05:43:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="001c008ec39d01aca57bc5445140ff10000c000100000000000000"], 0x3c}}, 0x0) 05:43:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2000000000040, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x4000000000001d4, 0x0) 05:43:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) 05:43:12 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 05:43:12 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000003c0)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="2465c0e574ab", 'veth0_to_team\x00'}}, 0x1e) [ 439.863037][T14534] IPVS: ftp: loaded support on port[0] = 21 [ 439.950839][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newspdinfo={0x1c, 0x24, 0x105, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x4}]}, 0x1c}}, 0x0) 05:43:13 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) 05:43:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000140)={0xffffffffffffff8f, 0x3, 0x0, 0xfffffdf1, 0x0, 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) 05:43:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000010001ffd0000000010eeff0000000000a532ca721e867a3964d3d801e51e3dd92ebac2b730f716cfe88dd99a39eef2e2c3b5e6ab8d84191616a2a693aa4c8d20fd36b828bfc0b72ebe86631e9c9754bfee6f0e5387186d58479f484db3c944272b4314a0452025b3811d1083e2700e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 440.198167][T14554] binder: 14553:14554 ioctl c018620c 20000140 returned -22 05:43:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=[{0x10}, {0x10, 0x29, 0x43}], 0x20}}], 0x2, 0x0) 05:43:13 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f000033bffc)=0x30d) 05:43:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00106602c890016d942900000000c5c64b2312000c00010062726964676500000c000200b34a1cf3875fa0f8549434712a27c38729429cb21a60419a9e62be43a016319a39244c18ec6b22dd1e6cae1d9fba958c98a48a215fe5bab27a875c05d8"], 0x3c}}, 0x0) 05:43:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 440.455366][T14569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 05:43:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4000) 05:43:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff0000000071e3da3200000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) 05:43:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200026833cb0009050112080000000009058c0a08000000000c40c8a32820aaf2f1c0bc93b09135d694d46ab9023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f9f3354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sequencer2\x00', 0x20082, 0x0) 05:43:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)='X', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r0}, 0x0, 0x0, 0x0) 05:43:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x40000097, 0x7f]}) 05:43:14 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2801, 0x0) ioctl$sock_TIOCINQ(r0, 0x5452, &(0x7f0000000040)) 05:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 441.305542][T14601] bridge67: the hash_elasticity option has been deprecated and is always 16 05:43:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x1034c) r2 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x80000003) 05:43:14 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2142, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) [ 441.368145][T14601] bridge68: the hash_elasticity option has been deprecated and is always 16 05:43:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, 0x0, 0x0) 05:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 441.562517][ T3913] usb 1-1: new high-speed USB device number 21 using dummy_hcd 05:43:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={r10}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e22, 0x6f3, @empty, 0x4}}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x400, 0x70bd2b, 0x0, {}, [@IFLA_VFINFO_LIST={0x0, 0x16, [{0x0, 0x1, [@IFLA_VF_VLAN={0x0, 0x2, {0x4, 0xf23, 0x7fff}}]}, {0x0, 0x1, [@IFLA_VF_VLAN={0x0, 0x2, {0x7, 0x6c9, 0xff}}, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x3f, 0xa94}}]}, {0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0x545, 0x14e, 0x40, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x54, 0x100}}, @IFLA_VF_RATE={0x0, 0x6, {0x8, 0x8, 0x80}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0xfffffe01, 0x6}}, @IFLA_VF_RATE={0x0, 0x6, {0x111, 0x1ff, 0x10001}}]}, {0xb2, 0x1, [@IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x401}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x7, 0x7}}]}, {0x0, 0x1, [@IFLA_VF_LINK_STATE={0x0, 0x5, {0x200, 0x724}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x64, 0x3ff}}, @IFLA_VF_MAC={0x0, 0x1, {0x1, @random="dbd7b61abc17"}}]}, {0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x3765b4ac, 0x7fffffff}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x7, 0x3}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x5, 0xfffffb18}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0x3, 0x3, 0x3ff}}, {0x0, 0x1, {0x2, 0x9f5, 0x9, 0x19050}}]}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x6ea0e560, 0x3}}, @IFLA_VF_VLAN={0x0, 0x2, {0x71bf, 0x4c2, 0x3}}, @IFLA_VF_RATE={0x0, 0x6, {0x8000, 0x5, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x1f, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0xfffffffd, 0x1f}}]}, {0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0xfffffff8, 0xa3e, 0x200, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x1000, 0x9}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0x80, 0x6c0, 0x1, 0x8100}}, {0x0, 0x1, {0x400, 0xd2d, 0x9, 0x8100}}, {0x0, 0x1, {0xbe1, 0xe49, 0x7, 0x88a8}}, {0x0, 0x1, {0x5, 0x4e8, 0x1ff, 0x88a8}}, {0x0, 0x1, {0x3ff, 0x9ab, 0x9}}, {0x0, 0x1, {0x8001, 0x8be, 0xc57, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x0, 0xc, [{0x0, 0x1, {0x3, 0xe5f, 0x8}}, {0x0, 0x1, {0x7, 0x686, 0x20, 0x88a8}}, {0x0, 0x1, {0xfffffffc, 0x683, 0x7, 0x7a2d0049fd4c3d9e}}, {0x0, 0x1, {0x5, 0x5f2, 0x6, 0x8100}}, {0x0, 0x1, {0x2, 0xbcc, 0x2, 0x4928}}]}]}]}, @IFLA_IFALIAS={0x392, 0x14, 'syzkaller1\x00'}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x5}, @IFLA_PHYS_PORT_ID={0x0, 0x22, "151ab99989e95dc66bb82ffbfe"}, @IFLA_MASTER={0x0, 0xa, r4}]}, 0x3c}}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup3(r12, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_FREE(r13, 0x40206435, &(0x7f0000000300)={0x8001, 0x0, 0x10001, 0xfffffffffffffff7}) 05:43:14 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2142, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) 05:43:14 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x7f}]) r4 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 441.814395][ T3913] usb 1-1: Using ep0 maxpacket: 8 [ 441.944527][ T3913] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 441.952762][ T3913] usb 1-1: config 0 has no interface number 0 [ 441.959043][ T3913] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 441.968943][ T3913] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 441.978976][ T3913] usb 1-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 441.988142][ T3913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.016748][ T3913] usb 1-1: config 0 descriptor?? [ 442.281419][ T12] usb 1-1: USB disconnect, device number 21 05:43:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 05:43:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x108) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000100)=0x8000000000000002, 0x4) sendmmsg(r2, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 05:43:17 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2142, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) 05:43:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000100)="1f0000000106fffffd3b54c007110000f30501000b00060000001000020000", 0x1f) 05:43:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)=""/254) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001e824075e4db7ccd9000c00020008001a0000000000504cae8dd79b95753efd7b98b13d37bef7694f5d6df724f971478fa5c011be80a0092acdb4aea6b962a8503c69204d945669cfb3d475a37651b188cf1d4aef038f8a36096abb8297ffd24f61bcfbf31e5df6d7dc34d87d1b925af0d91ffc74953e280c3899dc33796c31442e3f662cfaa49e20833f00000000118a32016eecb7b6713c8bda8f2bcb72669127a9598d1502a80677"], 0x3c}}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1c) 05:43:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x7f}]) r4 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:43:17 executing program 2: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2142, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) 05:43:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fanotify_init(0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r5, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r6, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) sendfile(r5, r6, &(0x7f0000000140), 0x100000000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x10001, 'syz0\x00', 0x200}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000000001f2a0000000000000000003c0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) 05:43:17 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000240)=""/192) 05:43:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCFLSH(r0, 0x80045438, 0x71dff9) 05:43:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') sendfile(r1, r2, 0x0, 0xb) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x44}}, 0x8000) 05:43:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 05:43:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) unshare(0x400) fcntl$notify(r1, 0x402, 0x2) fcntl$notify(r0, 0x402, 0x0) 05:43:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x2, [@typed={0x8, 0x4001, @binary="04"}]}]}, 0x20}}, 0x0) 05:43:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000240)=""/192) 05:43:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync() r0 = gettid() tkill(r0, 0xe) migrate_pages(r0, 0x2, 0x0, &(0x7f0000000400)=0x9) 05:43:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002440)={{0x12, 0x1, 0x0, 0x3f, 0xc6, 0xe6, 0x8, 0xc52, 0x2102, 0x6fe7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x13, 0x71, 0xc6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0xac, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0xac, &(0x7f0000000080)={0x0, 0x0, 0x2, '\bD'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, &(0x7f0000000040)={0x0, 0x0, 0x2, "eef7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:43:18 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x7f}]) r4 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:43:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xfffffff7, 0x5, 0xad9d, 0x4, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000800000001c001240060001370062728864676500000c000200080000000000e6ca5e0c2006efb37a28ee"], 0x3c}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x8000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) 05:43:18 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xed6) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 05:43:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000240)=""/192) 05:43:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) seccomp(0xd1399ac836a79a8c, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x2, 0x7f, 0x7, 0x4}, {0x38, 0x4, 0x2, 0x800}]}) open(0x0, 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0xff49) [ 445.479927][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.581949][T12262] usb 3-1: new high-speed USB device number 23 using dummy_hcd 05:43:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000240)=""/192) 05:43:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS64(r0, 0x4c03, &(0x7f00000004c0)) 05:43:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x3, 0x7, 0x5, 0x0, 0x0, 0x500], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x5}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 445.822541][T12262] usb 3-1: Using ep0 maxpacket: 8 05:43:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001100)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000001140)="ae88e8f8240000005a90f57f07703aeff00000bbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000080)="aa04484ed0e591f4a7e95a4577670e92d9010000003fbd806371162abf7ca71e023a27b2", 0x6f1}], 0x2) 05:43:19 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400000000000028, 0x2, 0x0, "37aa5adbf10100ffff188308007c87cc7619bf42c301003f924f73fca69401c6"}) [ 445.942764][T12262] usb 3-1: New USB device found, idVendor=0c52, idProduct=2102, bcdDevice=6f.e7 [ 445.952090][T12262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.985682][T12262] usb 3-1: config 0 descriptor?? [ 446.030815][T12262] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 446.040081][T12262] usb 3-1: Detected FT-X 05:43:19 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 446.216361][T14707] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 446.242390][T12262] ftdi_sio ttyUSB0: Unable to read latency timer: -5 [ 446.906078][T12262] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 447.104773][T12262] usb 3-1: USB disconnect, device number 23 [ 447.114700][T12262] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 447.125013][T12262] ftdi_sio 3-1:0.0: device disconnected [ 447.871962][T12262] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 448.111943][T12262] usb 3-1: Using ep0 maxpacket: 8 [ 448.232225][T12262] usb 3-1: New USB device found, idVendor=0c52, idProduct=2102, bcdDevice=6f.e7 [ 448.241338][T12262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.251260][T12262] usb 3-1: config 0 descriptor?? [ 448.294982][T12262] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 448.303986][T12262] usb 3-1: Detected FT-X [ 448.502238][T12262] ftdi_sio ttyUSB0: Unable to read latency timer: -5 05:43:21 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) 05:43:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5c, 0x0, &(0x7f0000000280)=[@increfs, @clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:43:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x7f}]) r4 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:43:21 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/371], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 05:43:21 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$userio(0xffffffffffffff9c, &(0x7f0000001040)='/dev/userio\x00', 0x220100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000001100)={0x7, 0x8, 0xfa00, {r9, 0x7}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000001000)=0x3f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000000)=""/4096) 05:43:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 448.622892][T12262] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 448.661313][T12262] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 448.704133][T12262] usb 3-1: USB disconnect, device number 24 [ 448.778671][T12262] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 448.790882][T12262] ftdi_sio 3-1:0.0: device disconnected 05:43:21 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001140)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 05:43:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0x7, 0x7, 0x17, 0x80, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x3, 0x1, 0x5, 0xffffffffffffffe0, 0x8}, @ldst={0x39ef57f32496540, 0x1, 0x1, 0xa87487b735ee35f7, 0x9, 0xb37f36e9affc7b59, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x3d, &(0x7f0000000280)=""/61, 0x41000, 0x0, [], r4, 0x1, r7, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x18b}, 0x10}, 0x70) r8 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r9 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r9, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3cf9b3a7989500000000000000000000101000d32266cccdf629874f2c51d03a487559b203f8e8ce946e86dedd4bf1f7fd4a66781e7a595c469e910e8e9f0752bba3b2428643f142adc570db06af50882c94d217904af033d2e3154e8e477f98ee18241311d3feae86dff358b91dec1eb21e3e27bc354553cf169ed095ac37613d1f011bf12d8d06d19773e95fe145a95ab22b7082b2383b57e6f003391a23fc7212bffe643a7560b39eab", @ANYRES32=r9, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESHEX], @ANYRES32]], 0x3}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 05:43:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) 05:43:22 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 449.004652][ T3913] usb 6-1: new high-speed USB device number 4 using dummy_hcd 05:43:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700"/27, 0x1b) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 05:43:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 449.272182][ T3913] usb 6-1: Using ep0 maxpacket: 8 05:43:22 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x100000000000012) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) [ 449.424896][ T3913] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 449.433200][ T3913] usb 6-1: config 0 has no interface number 0 [ 449.439417][ T3913] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 449.452331][ T3913] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 133, changing to 11 [ 449.463873][ T3913] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 449.473163][ T3913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.489340][ T3913] usb 6-1: config 0 descriptor?? 05:43:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x3c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) [ 449.537792][ T3913] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 449.549327][ T3913] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input25 05:43:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0x8e, 0x4c, 0x40, 0x41e, 0x401d, 0x9788, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x1c, 0x20, 0x40}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 449.808560][T14812] bridge69: the hash_elasticity option has been deprecated and is always 16 [ 449.820451][ T12] usb 6-1: USB disconnect, device number 4 [ 449.832670][ T12] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 449.888536][T14812] bridge70: the hash_elasticity option has been deprecated and is always 16 [ 450.072633][T12262] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 450.432210][T12262] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 450.440311][T12262] usb 5-1: config 0 has no interface number 0 [ 450.446700][T12262] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=97.88 [ 450.455944][T12262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.465599][T12262] usb 5-1: config 0 descriptor?? [ 450.506833][T12262] gspca_main: spca505-2.14.0 probing 041e:401d [ 450.592008][ T3913] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 450.832040][ T3913] usb 6-1: Using ep0 maxpacket: 8 [ 450.932196][T12262] gspca_spca505: reg write: error -71 [ 450.938200][T12262] spca505: probe of 5-1:0.5 failed with error -5 [ 450.949075][T12262] usb 5-1: USB disconnect, device number 13 [ 450.962741][ T3913] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 450.971485][ T3913] usb 6-1: config 0 has no interface number 0 [ 450.977775][ T3913] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 450.989005][ T3913] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 133, changing to 11 [ 451.000411][ T3913] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 451.009639][ T3913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.019597][ T3913] usb 6-1: config 0 descriptor?? [ 451.077384][ T3913] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 451.089136][ T3913] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input26 [ 451.274370][T12262] usb 6-1: USB disconnect, device number 5 [ 451.281010][T12262] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 05:43:24 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/371], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 05:43:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) process_vm_writev(r5, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/229, 0xe5}], 0x1, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000000640)=""/238, 0xee}], 0x2, 0x0) 05:43:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x11, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@loopback, @broadcast, 0x0}, &(0x7f0000000100)=0xc) r6 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x8, 0x8400) write$eventfd(r6, &(0x7f0000000440)=0xffffffffffffff6e, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xfffffa17, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, @ip6ip6={{0x0, 0x1, 'ip6tnl\x00'}, {0x0, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLAGS={0x0, 0x8, 0x22}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x0, 0x8, 0x7}], @tunl6_policy=[@IFLA_IPTUN_REMOTE={0x0, 0x3, @loopback}, @IFLA_IPTUN_REMOTE={0x0, 0x3, @mcast2}, @IFLA_IPTUN_FLAGS={0x0, 0x8, 0x2e}, @IFLA_IPTUN_ENCAP_LIMIT={0x0, 0x6, 0x7f}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x0, 0x8, 0x1e}, @IFLA_IPTUN_REMOTE={0x0, 0x3, @remote}], @IFLA_IPTUN_PROTO, @tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x0, 0x7, 0xfffffff9}, @IFLA_IPTUN_FLAGS={0x0, 0x8, 0xf}, @IFLA_IPTUN_FLAGS={0x0, 0x8, 0xe}, @IFLA_IPTUN_FLOWINFO={0x0, 0x7, 0x75}, @IFLA_IPTUN_LOCAL={0x0, 0x2, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x0, 0x10, 0x9}, @IFLA_IPTUN_LINK={0x0, 0x2, r4}, @IFLA_IPTUN_LINK={0x0, 0x2, r5}, @IFLA_IPTUN_ENCAP_SPORT={0x0, 0x11, 0x4e20}, @IFLA_IPTUN_ENCAP_TYPE={0x0, 0xf, 0x1}, @IFLA_IPTUN_TTL={0x0, 0x4, 0xfd}]], @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x0, 0x2, @empty}, @IFLA_IPTUN_REMOTE={0x0, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], @tunl6_policy=[@IFLA_IPTUN_REMOTE={0x0, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_TTL={0x0, 0x4, 0x3f}, @IFLA_IPTUN_COLLECT_METADATA], @IFLA_IPTUN_REMOTE={0x0, 0x3, @mcast2}]]}}}]}, 0xffffffffffffffef}}, 0x0) 05:43:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1b) 05:43:24 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x61632e9910374f9e, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000000002) futex(0x0, 0x88, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 451.681986][ T12] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 451.777653][T14829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:43:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x44, 0x100000001, 0x8000000001}, 0x3c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x760000, 0x0, 0x20820000, r0, 0x2}, 0x2c) 05:43:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001a0000000000"], 0x3c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r3, 0xab03) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, &(0x7f0000000400)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x1c8, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @empty, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x24}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3fffc0000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3be}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000814}, 0x8) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r14, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @rand_addr=0x5}, {0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000440)='veth1\x00', 0x7, 0x4, 0x3}) 05:43:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 05:43:25 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x96, 0x1, 0xa4, 0x8, 0x403, 0xd6ea, 0xffff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x5b, 0x3f, 0x35, 0x0, [], [{{0x9, 0x5, 0x85}}]}}]}}]}}, 0x0) [ 452.062235][ T3913] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 452.062286][ T12] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 452.062363][ T12] usb 5-1: config 0 has no interface number 0 [ 452.084558][ T12] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=97.88 [ 452.093824][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:43:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000080002001400010000000000896d8bfb3909ae5f0751dba1a367294209738b0beb015e05d305c30415d2893089051aea8fb5f973ddac7172ba973d464986dd3ae44a2b6662cb2d6bc81ec1ca55e329e42b4a9a3a81bb3abf4627c2735804927b933d9f299c723c13441c2ea36900717cfbb060c4c5305d20e6dc3098978e35f1cbe4ef76364e3c23383af3b74cf225e76073627e9358331815f88cac359ad79074425a40fb475c1bd1a94fb6212818063c52eebed6a9af7ff2c04c2f99f12235e28e07b1ffd3786abd55b9fdb7264a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000120008002bbd7800fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="140003007465616d5f736c6176655f31000000000c000200001200000000000087fe0e00000000003900"/53], 0x3b}}, 0x0) [ 452.109424][ T12] usb 5-1: config 0 descriptor?? [ 452.173897][ T12] gspca_main: spca505-2.14.0 probing 041e:401d 05:43:25 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r1, r2) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, 0x0) [ 452.298777][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.308521][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.318569][ T3913] usb 6-1: Using ep0 maxpacket: 8 [ 452.361335][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.370962][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.380736][ T12] gspca_spca505: reg write: error -71 [ 452.386473][ T12] spca505: probe of 5-1:0.5 failed with error -5 [ 452.403896][ T12] usb 5-1: USB disconnect, device number 14 [ 452.462253][ T3913] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 452.470718][ T3913] usb 6-1: config 0 has no interface number 0 [ 452.477139][ T3913] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 452.488373][ T3913] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 133, changing to 11 [ 452.499838][ T3913] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 452.509084][ T3913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.518566][ T17] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 452.582722][ T3913] usb 6-1: config 0 descriptor?? [ 452.627495][ T3913] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 452.639386][ T3913] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input27 [ 452.682983][T12212] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 452.761960][ T17] usb 1-1: Using ep0 maxpacket: 8 05:43:25 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xac, 0xd9, 0xc0, 0x20, 0x5c6, 0x9625, 0xe2d2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x8, 0x60}}]}}]}}, 0x0) [ 452.892500][ T17] usb 1-1: New USB device found, idVendor=0403, idProduct=d6ea, bcdDevice=ff.ff [ 452.901948][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.922313][T12212] usb 4-1: Using ep0 maxpacket: 8 [ 452.935023][ T17] usb 1-1: config 0 descriptor?? [ 452.957506][T12262] usb 6-1: USB disconnect, device number 6 [ 452.964683][T12262] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 452.988237][ T17] usb 1-1: Could not find both bulk-in and bulk-out endpoints [ 452.995991][ T17] usb 1-1: FREEING ftdi=00000000ccfb4a28 [ 453.064500][T12212] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 453.074547][T12212] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853 [ 453.086633][T12212] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 453.099817][T12212] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 453.109118][T12212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.189460][ T17] usb 1-1: USB disconnect, device number 22 [ 453.202388][ T12] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 453.442870][ T12] usb 5-1: Using ep0 maxpacket: 32 05:43:26 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f000000000009058303005085fd1e92759c2b28f368ab64fcbe75e95398195ce7c30cffc01434b1050b2bd66611aa3c1429700205111609cc14b0418c9a384d4d279a040edbfa56ba3688bb82b94c8c4025b90bd94c17746c52dacf466a3f2feee9e2867b7a643179b92c75f6a0d71182adf3b711d6b1a88f1a909cf91552c260739b33c18dc4c4f2b76bbea80ec8112902f31615f4178650eb15318119123116704815a09c0da318d26d00f31bc6673b802afcc07705b0e0b0bcb6e67d1d14c41c2380bfe2a89c5f58250664a7b5d8b823ce8fb7089ad6722b68101ef7045b76d7a6272219b54e9a29f1a05c4742507b292277dbfd30ca77b8a08d8bff701b98cb6230879dac7f7e539a5f6b965543c8eb8610c788631484cba16298a632e31a2b6296e7fdbd355e051b6cc22616c9f9a800bbd2935c5d81d56937f400"/371], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 05:43:26 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d60105988c39c083e03132cb610629093859882d0c5465e78a3e7316cf79e4f37005f9580bcac9dc1375d69f35c615f14fe3b0fc150aa203addb501a0bc46506db915495dc213b83b860769897005a6bb5a97aa01c035dfcb2bcd563d20175a3f3da06847bc11c2a6ff4a80ead7b12420238a7dd361bc7dfedbe90e51943e89e43ffa8e0a09ee6a57b2c0a17e5e3fd7caa12854bf92c06bafff5c662dce9226c20bc951f9ec85f670869e05548456122e5d6e67ef021cb62a76c6cd58d776f9e6479c2e93afd5a448e7c8dd7397c", 0xce) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000021f00"/29], 0x3c}}, 0x0) [ 453.536629][T14872] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 453.563594][ T12] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 453.572450][ T12] usb 5-1: config 0 has no interface number 0 [ 453.578691][ T12] usb 5-1: New USB device found, idVendor=05c6, idProduct=9625, bcdDevice=e2.d2 [ 453.588207][T12212] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 453.600464][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.628733][ T12] usb 5-1: config 0 descriptor?? 05:43:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a3632a4e3121366b0c00010062726964636518ef45113340f06a1a0000000000"], 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xffff, 0x0, @rand_addr="0000000000290f412aade87bc400", 0x4000000}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) recvmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) dup2(r2, r0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x2) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x3, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @rand_addr="b8e79105cd07c53468a09f949b006030", 0x7fff}, 0x1c) [ 453.785913][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 453.798034][T12212] usb 4-1: USB disconnect, device number 18 [ 453.804233][ C1] usblp0: nonzero read bulk status received: -71 [ 453.812613][ T17] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 453.827203][T14854] ===================================================== [ 453.834218][T14854] BUG: KMSAN: use-after-free in usb_autopm_put_interface+0xf2/0x120 [ 453.842221][T14854] CPU: 1 PID: 14854 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 453.850123][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.860299][T14854] Call Trace: [ 453.863614][T14854] dump_stack+0x191/0x1f0 [ 453.867978][T14854] kmsan_report+0x14a/0x2f0 [ 453.872514][T14854] __msan_warning+0x73/0xf0 [ 453.877042][T14854] usb_autopm_put_interface+0xf2/0x120 [ 453.882512][T14854] usblp_release+0x182/0x3d0 [ 453.887258][T14854] ? usblp_open+0x610/0x610 [ 453.887979][T12262] usb 5-1: USB disconnect, device number 15 [ 453.891773][T14854] __fput+0x4c9/0xba0 [ 453.891804][T14854] ____fput+0x37/0x40 [ 453.891820][T14854] ? fput_many+0x2a0/0x2a0 [ 453.891837][T14854] task_work_run+0x22e/0x2a0 [ 453.891864][T14854] prepare_exit_to_usermode+0x39d/0x4d0 [ 453.891884][T14854] syscall_return_slowpath+0x90/0x610 [ 453.891908][T14854] do_syscall_64+0xdc/0x160 [ 453.891926][T14854] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 453.891940][T14854] RIP: 0033:0x413a91 [ 453.891955][T14854] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 453.891962][T14854] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 453.891974][T14854] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413a91 [ 453.892002][T14854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 453.906143][T14854] RBP: 0000000000000001 R08: 000000006e8b811c R09: 000000006e8b8120 [ 453.982869][ T12] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 453.984518][T14854] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20 [ 453.984528][T14854] R13: 000000000006ecd5 R14: 0000000000760e88 R15: 000000000075bf2c [ 453.984549][T14854] [ 453.984555][T14854] Uninit was created at: [ 453.984601][T14854] kmsan_internal_poison_shadow+0x60/0x110 [ 454.028588][T14854] kmsan_slab_free+0x8d/0x100 [ 454.033295][T14854] kfree+0x4c1/0x2e70 [ 454.037300][T14854] usb_release_interface+0x105/0x120 [ 454.042603][T14854] device_release+0xe2/0x380 [ 454.047321][T14854] kobject_put+0x38d/0x480 [ 454.051847][T14854] put_device+0x51/0x70 [ 454.056074][T14854] usb_disable_device+0x69a/0x1150 [ 454.061202][T14854] usb_disconnect+0x51e/0xd60 [ 454.065995][T14854] hub_event+0x3fd0/0x72f0 [ 454.070869][T14854] process_one_work+0x1572/0x1ef0 [ 454.075923][T14854] worker_thread+0x111b/0x2460 [ 454.080717][T14854] kthread+0x4b5/0x4f0 [ 454.085332][T14854] ret_from_fork+0x35/0x40 [ 454.089853][T14854] ===================================================== [ 454.096792][T14854] Disabling lock debugging due to kernel taint [ 454.102962][T14854] Kernel panic - not syncing: panic_on_warn set ... [ 454.109601][T14854] CPU: 1 PID: 14854 Comm: syz-executor.3 Tainted: G B 5.4.0-rc3+ #0 [ 454.113607][ T12] dummy_hcd dummy_hcd.0: port status 0x00100503 has changes [ 454.119176][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.136526][T14854] Call Trace: [ 454.139844][T14854] dump_stack+0x191/0x1f0 [ 454.144199][T14854] panic+0x3c9/0xc1e [ 454.148146][T14854] kmsan_report+0x2e8/0x2f0 [ 454.152977][T14854] __msan_warning+0x73/0xf0 [ 454.157516][T14854] usb_autopm_put_interface+0xf2/0x120 [ 454.163100][T14854] usblp_release+0x182/0x3d0 [ 454.167812][T14854] ? usblp_open+0x610/0x610 [ 454.172431][T14854] __fput+0x4c9/0xba0 [ 454.176552][T14854] ____fput+0x37/0x40 [ 454.180649][T14854] ? fput_many+0x2a0/0x2a0 [ 454.185090][T14854] task_work_run+0x22e/0x2a0 [ 454.189712][T14854] prepare_exit_to_usermode+0x39d/0x4d0 [ 454.195298][T14854] syscall_return_slowpath+0x90/0x610 [ 454.200714][T14854] do_syscall_64+0xdc/0x160 [ 454.203948][T12262] usb usb5: dummy_bus_suspend [ 454.205243][T14854] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 454.205258][T14854] RIP: 0033:0x413a91 [ 454.205279][T14854] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 454.205287][T14854] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 454.205302][T14854] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413a91 [ 454.205310][T14854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 454.205319][T14854] RBP: 0000000000000001 R08: 000000006e8b811c R09: 000000006e8b8120 [ 454.205329][T14854] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20 [ 454.205338][T14854] R13: 000000000006ecd5 R14: 0000000000760e88 R15: 000000000075bf2c [ 454.207276][T14854] Kernel Offset: disabled [ 454.294919][T14854] Rebooting in 86400 seconds..