(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1729.073109][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:19:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) write$char_usb(r3, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syz_usb_disconnect(r0) syncfs(r4) 07:19:34 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@updpolicy={0x17c, 0x19, 0x200, 0x70bd25, 0x25dfdbfc, {{@in=@empty, @in6=@remote, 0x4e24, 0xfff, 0x4e23, 0x1, 0x2, 0x20, 0x0, 0x73, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xc40, 0x5, 0x100000000}, {0x0, 0x0, 0x5, 0x7ff}, 0x3, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, [@policy={0xac, 0x7, {{@in6=@loopback, @in6=@mcast2, 0x4e22, 0xffff, 0x4e24, 0x0, 0x2, 0x0, 0xa0, 0x8, 0x0, 0xee01}, {0x1000, 0x0, 0x0, 0x800, 0x8, 0x9, 0x81, 0x5}, {0x9e4, 0x8, 0x4, 0x3ff}, 0x9, 0x6e6bb4, 0x1, 0x0, 0x0, 0x1}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0x80}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80000000}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@multicast1, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "85"}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=@getae={0x4a4, 0x1f, 0x8, 0x70bd2d, 0x25dfdbfd, {{@in6=@loopback, 0x4d3, 0x2, 0xff}, @in6=@mcast1, 0x52}, [@algo_auth={0x9f, 0x1, {{'sha256-ce\x00'}, 0x2b8, "d14a0272b9ebe1966eacf871dbd6dbabd54b37bda8f83146fd7f4ff40540acb481dab24bdd85bd83756e5ff534809e33e4b8e430c54e076d7752a856c4c5194b3f7d09232129f332f620ee77d73d67dba69b248fd202d4"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2b, 0x70bd2c, 0x70bd26, 0x4, [0x6, 0x6, 0x1]}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e20, @in6=@private1}}, @algo_comp={0xf8, 0x3, {{'lzs\x00'}, 0x580, "bf2c54c69c07f064837a4c38a376f4f428abbcee57e783598456b16bc2aa614d08e322f59c2436efe70c756e6853615fe6e6406cbbc9f213120b35842d9aa58ec0d0d8ccbf0981ce46cf908155333aee4804a1a2c6fe44446d2e0f4c34621445630049fdf036d9210f4089116addc52103ced707501d08d6da9e8ed4c114066ddd3354f924e41cb2f6b338a0609362c1ea531b3deaba8fb0b23a4d2f79a062361aa9e3ff8f91bbe6e5fbae0903a93e64"}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2d, 0x70bd25, 0x70bd29, 0x70bd2c, 0x8, [0x1, 0xe7, 0x200, 0x0, 0x400, 0x2]}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @migrate={0x1cc, 0x11, [{@in=@private=0xa010102, @in=@multicast2, @in6=@mcast2, @in6=@mcast1, 0xff, 0x0, 0x0, 0x3500, 0x2, 0x4caa446bdccab841}, {@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@loopback, 0x33, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x1, 0x0, 0x3505, 0xa, 0xa}, {@in6=@mcast1, @in=@private=0xa010102, @in=@rand_addr=0x64010101, @in=@loopback, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, @in6=@remote, 0x2b, 0x3, 0x0, 0x3500, 0x5, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x32, 0x4, 0x0, 0x3503, 0xa, 0xa}]}, @algo_crypt={0x72, 0x2, {{'ctr(serpent)\x00'}, 0x150, "b34394d05e7a6ac10a39cfe4c44104ad0b2f18ebca30eb584853f670cd77ca2b2f53cebc0ab962a5ce21"}}, @lastused={0xc, 0xf, 0x6}]}, 0x4a4}}, 0x4040) [ 1729.198039][ T2764] device team16 entered promiscuous mode [ 1729.205001][ T2764] 8021q: adding VLAN 0 to HW filter on device team16 [ 1729.306003][ T2769] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1729.314956][ T2769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1729.383559][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.399534][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.410199][ T5147] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1729.419609][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.473343][T31906] usb 6-1: new high-speed USB device number 11 using dummy_hcd 07:19:34 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1729.595933][ T5147] usb 2-1: config 0 descriptor?? 07:19:34 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1729.722590][T32099] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1729.848516][ T2779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.858477][ T2779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.867209][T31906] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.878165][T31906] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1729.887592][T31906] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.890173][ T2780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1730.046257][ T2780] device team17 entered promiscuous mode [ 1730.053141][ T2780] 8021q: adding VLAN 0 to HW filter on device team17 [ 1730.053158][ T2779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.054251][ T2779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.091701][ T2787] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1730.106080][ T2787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1730.184066][T31906] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1730.184236][T32099] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.193629][T31906] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1730.204140][T32099] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1730.214587][T31906] usb 6-1: Product: syz [ 1730.214688][T31906] usb 6-1: Manufacturer: syz [ 1730.214777][T31906] usb 6-1: SerialNumber: syz [ 1730.241076][T32099] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:19:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@updpolicy={0x17c, 0x19, 0x200, 0x70bd25, 0x25dfdbfc, {{@in=@empty, @in6=@remote, 0x4e24, 0xfff, 0x4e23, 0x1, 0x2, 0x20, 0x0, 0x73, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xc40, 0x5, 0x100000000}, {0x0, 0x0, 0x5, 0x7ff}, 0x3, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, [@policy={0xac, 0x7, {{@in6=@loopback, @in6=@mcast2, 0x4e22, 0xffff, 0x4e24, 0x0, 0x2, 0x0, 0xa0, 0x8, 0x0, 0xee01}, {0x1000, 0x0, 0x0, 0x800, 0x8, 0x9, 0x81, 0x5}, {0x9e4, 0x8, 0x4, 0x3ff}, 0x9, 0x6e6bb4, 0x1, 0x0, 0x0, 0x1}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0x80}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80000000}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in=@multicast1, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "85"}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=@getae={0x4a4, 0x1f, 0x8, 0x70bd2d, 0x25dfdbfd, {{@in6=@loopback, 0x4d3, 0x2, 0xff}, @in6=@mcast1, 0x52}, [@algo_auth={0x9f, 0x1, {{'sha256-ce\x00'}, 0x2b8, "d14a0272b9ebe1966eacf871dbd6dbabd54b37bda8f83146fd7f4ff40540acb481dab24bdd85bd83756e5ff534809e33e4b8e430c54e076d7752a856c4c5194b3f7d09232129f332f620ee77d73d67dba69b248fd202d4"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2b, 0x70bd2c, 0x70bd26, 0x4, [0x6, 0x6, 0x1]}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e20, @in6=@private1}}, @algo_comp={0xf8, 0x3, {{'lzs\x00'}, 0x580, "bf2c54c69c07f064837a4c38a376f4f428abbcee57e783598456b16bc2aa614d08e322f59c2436efe70c756e6853615fe6e6406cbbc9f213120b35842d9aa58ec0d0d8ccbf0981ce46cf908155333aee4804a1a2c6fe44446d2e0f4c34621445630049fdf036d9210f4089116addc52103ced707501d08d6da9e8ed4c114066ddd3354f924e41cb2f6b338a0609362c1ea531b3deaba8fb0b23a4d2f79a062361aa9e3ff8f91bbe6e5fbae0903a93e64"}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2d, 0x70bd25, 0x70bd29, 0x70bd2c, 0x8, [0x1, 0xe7, 0x200, 0x0, 0x400, 0x2]}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @migrate={0x1cc, 0x11, [{@in=@private=0xa010102, @in=@multicast2, @in6=@mcast2, @in6=@mcast1, 0xff, 0x0, 0x0, 0x3500, 0x2, 0x4caa446bdccab841}, {@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@loopback, 0x33, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x1, 0x0, 0x3505, 0xa, 0xa}, {@in6=@mcast1, @in=@private=0xa010102, @in=@rand_addr=0x64010101, @in=@loopback, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, @in6=@remote, 0x2b, 0x3, 0x0, 0x3500, 0x5, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x32, 0x4, 0x0, 0x3503, 0xa, 0xa}]}, @algo_crypt={0x72, 0x2, {{'ctr(serpent)\x00'}, 0x150, "b34394d05e7a6ac10a39cfe4c44104ad0b2f18ebca30eb584853f670cd77ca2b2f53cebc0ab962a5ce21"}}, @lastused={0xc, 0xf, 0x6}]}, 0x4a4}}, 0x4040) 07:19:35 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000922070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0xffff, 0x7f, 0x1, {0x22, 0xcc8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x20, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x9, 0xc0}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x8, 0x8, 0x8, 0x3f}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "b97b700aac0e4adf1114d92c99d959d7"}]}, 0x8, [{0x1d, &(0x7f0000000140)=@string={0x1d, 0x3, "cbf1489436113594629fa0b620cb976f113466fdd43c4cf28e23bd"}}, {0x19, &(0x7f0000000180)=@string={0x19, 0x3, "2719078bb9ac44922be2a9ce70c524f66522cb59881e80"}}, {0xec, &(0x7f00000001c0)=@string={0xec, 0x3, "bf68d7c0ca19ffeef846abeb8deb66ac526fe1dca072f445e8940c638d83de233c290915d1d0267bb8b05a838a5fe7e0272420cb8b133791126a47a46ce4a9d36799ac0664a8f8608e327c42e1ac4004b5f8d25f82d7461d622629d40490a467e60f5827577bd3aa8cc164f532abfe8865fb9a0b7d523a048eb6c2f9639393f967f45e66488ab4c4e484ad95962bbc1d4e81ae4477b27ae8f2822e41717e20898d17c0e3497755b7605b05b02c103505c2b88c117e5d13ad9ece4f2d0021e7bc068d7e69c767dd3403bee08da5565f199071ece23914471397edec23e2656c7502537bac1167cec24948"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0xc1, &(0x7f0000000340)=@string={0xc1, 0x3, "d87917c2723d0f8394269e42206e9be1f8b733c30c0fb2ac3f315ad6a473d7377697348447c66b63a8e2d3c1d1a1a66a3b26574f06e64b79581770fcae565497d7ff61fa3e48ee70f08ac0d5e2d2a53764bf1e1f1185d01b084c7969734c1e3303307f60821dd803d991e243930c7b97a9e40c2288e5e74a3eb5a7eef05be8d81bf062416e373faf23f6ce34166a619d9e19f20350c76acdae1da8111324e0afe721228ae7224fdc7f0d68e046ea9afd460e639f68d0ef577655f7354e77f4"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1042}}, {0x90, &(0x7f0000000480)=@string={0x90, 0x3, "ac6e11a7c907fbce49e2de7239f7e8b7b232cd9f843a73a8c63db71b7aec99e1bd6992d3f7751120a05409ee76f5729e141b51266a6beb9f549024eaadf3d61dd961cd153d1096a9ee2eb97bf30d905f5ce56889835b5ea2996f6420ccada96918aa650c19c9ae6b31e2d60d671063a3419409081d0834d723c75ee0518343f42521f2bce0b5aeb63b059dfebf82"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000ec0)={0x24, &(0x7f0000000d00)={0x20, 0x1, 0xf, {0xf, 0x8, "371f209674cb53dcf161dc9b6a"}}, &(0x7f0000000d40)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "38f1319ec9f40e59fd7441fcec576c476cfde2d145afdeb2834b7d190dacc9030e48e2e3c0e7b2368442a16dbdb89f7cb6b4597244fc199ba618b2f96ce88143ce36cc4e0c20463797ba68a1793a45ae92887e9a90e758d29a4a07c4e135d3ee9d11d739b3619c8bad3f7b095e31c791fa7eb83831a318892f31e3e7d02ca124f9b27a84aec71abfafb9ec08ef122923fc40882c9530644f68779a0fcb78ae2d26b66f702b9060a23827bfdf6c2e700a793adbdca3b4479e696a1d41c7195e47e438455ea67bd723d56a764a2ab3b974ae03d05891322ddc6d2596179d0a6d2fba21ee51dde205204b2f5eb7a8a218b2553752accc"}}, &(0x7f0000000e40)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x5, "d6b5976c"}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_4={0x3, 0x2, 0x4, "327f4e6a"}, @local=@item_012={0x2, 0x2, 0x0, "8d49"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "9750f7b6"}, @local=@item_012={0x2, 0x2, 0xa, "6782"}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9888, 0x4, 0x1, {0x22, 0x19f}}}}, &(0x7f00000010c0)={0x2c, &(0x7f0000000f00)={0x20, 0x8, 0x3c, "66633c5b174c14491caf8d28d41829f2fe51ad388de48db9b5fbff12828da72ea00231c8bfd84829437e96afc98f609de22f88a1e9053abfae34379a"}, &(0x7f0000000f80)={0x0, 0xa, 0x1}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001000)={0x20, 0x1, 0x4b, "9e6d4f7d6a04e88bcaf0ac02b8b02afb8afcf81e2aa7f681b62a7a8c7e9b0296e6675910d57511fdb058d525b124e46a6b128686315ec14bbb6a3ee8b12bd00675981bca27e794c68e8741"}, &(0x7f0000001080)={0x20, 0x3, 0x1, 0xa6}}) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x36, 0x31, {0x31, 0x8, "2cb5479aa66709237348cb79bf16d6a1887673eca1551767d444c25a484dfb7407e6bd5fe8fa9ad1675b230dba0c85"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f0000000640)={0x0, 0xf, 0x50, {0x5, 0xf, 0x50, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x101, 0xf00, 0x100, [0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "276d4459fda6c3f7e78d7fe26f501b21"}, @ssp_cap={0x24, 0x10, 0xa, 0xcc, 0x6, 0x5, 0xf, 0xa592, [0x3f00, 0xff3faf, 0x7ec0, 0xfe80cf, 0xf0, 0xff0030]}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0xff, 0xff, "f28d8b84", "f1e0613b"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x3, 0x7f, 0x0, 0x3, 0x0, 0x80}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000840)={0x0, 0x1, 0xa8, "f73324b0e12f926b4d1657778b0ebd6da99afa3d71f46cee4dd651c387caa710aa781e43d1730791dac20d16964439816839ad8de5197274a1324bcf298913c6d5f43d6cb8014896db4f356974e2eda7d28dc7d2f42b664ab7db4af902a1bac40a26317f0a69c1cc444f68e6db9e8ac240ef3e9db5218a4e68845b83346e1804d56ffcfde9a7998ef5615816dd71b51614dcee1b15c9f22f1932cf9b0a149d29a995199c2930861f"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xad}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x145, 0x11}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x18}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3b}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "0995"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b00)={0x40, 0x19, 0x2, 'e('}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x3, "c9f3fb5a"}, @global=@item_012={0x1, 0x1, 0x9, "93"}]}}, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x12b, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x119, 0x2, 0x1, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3, 0x2b, 0x9}, {0x6, 0x24, 0x1a, 0x81, 0x9}, [@mdlm_detail={0xa4, 0x24, 0x13, 0x20, "72d8c3057f2efe2ae2f4258f8b55dbbc56df5cd8005fee767b9c52195d0380461a52825d1d37a24bd2b2e3142643f5d7aea4542f9cd0eb5c90baf693cd6d707fd98a8041ca19899ecb1778dc74f15d0acfaa79550d99b5af3dc6524c12a988db49443a8b22479695d39ac5155f6e02b0788cd5c790314cea6b929cd46f357ffbfd5aaf208260e8f1d40aee750fe91f8e46868e5247f2b02cc925a36258f3894e"}, @mbim_extended={0x8, 0x24, 0x1c, 0xc34, 0x2}, @obex={0x5, 0x24, 0x15, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x278, 0x1, 0x1f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7f}}}}}}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x0, 0x20, 0x6, 0x2b, 0x8, 0x5}, 0xd0, &(0x7f0000001800)={0x5, 0xf, 0xd0, 0x5, [@generic={0x85, 0x10, 0xa, "faef2bb0a9f2599786257de574b78636cf34e522a2a9874cc783141d42914e719bc88354e5a0363b2b3c00d1ea084d3cc931713a866efa1d5c588da756f1ac8ef89db6079e9e972c1faa463018abb378f4572216c67f22f2c39172a33723f914653f97c586c1e3cd1c3c7804c88f625b3a333fe879abb651632819749aec3e2242a6"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x6, 0xff00, 0x3f, [0xff0000, 0x0, 0xff000f, 0xdf4f]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x38, 0x1, 0x2, 0xb20, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x9, 0xf00, 0x2, [0xc0, 0xff00c0, 0xc000, 0x3e40]}]}, 0x4, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x414}}, {0xaf, &(0x7f0000001940)=@string={0xaf, 0x3, "df8120273d62439787bb2275b683226ead30b07b2e60b816dd844dbffe43599fcaba0d1c56b767e251d773cb3fdbe710facf1ac59522e3fffd88aa19e83b7cf2c67e09d6ed58321dfd7e86755ebdb251469fa3ed2e61d5a3a9026f5610e60028a66efbefe3b5542dcdccca87e49a750efa05095f026360d834e4132bcee51f8e51779179b14193cf4ac00090377e859a2a9a01153381e3ecd1e6a8d662b4e5821806c591c43484db8bf6059369"}}, {0xe0, &(0x7f0000001a00)=@string={0xe0, 0x3, "803df10630fbf9b160d63b6fdb4f778d7cc348613d8c32e0fcef55111254661bba0c025b311180529aa8c5e7a492afa886697fe4e489a852d98783bba11c85eef2e64ced487d7a9a01430dbe9bee2223584085729c311d03b13894f96b75442a88747abfc388c07dfb72a9ac85b708914fda37c8f5e4cc3320169c319a0bdcf4b05b445781f368b43ce0c107080c594a813e15e2f17a71a7537956a8e0d933f9651da0020c03784d15293aee5215d4670d1fc5dff2f34846e126696b752598ee2c2fdebc00f1cc31965b2de21fcdb4f773b0c0b0668c794dcfd1514e118b"}}, {0xb0, &(0x7f0000001b00)=@string={0xb0, 0x3, "15a1e0c9016da08f77bcf971dd4b669b99c532c88d699da8afafc073c67fb075cfb1f4bb8500c0f334ea556e04d03eea3977c595df4ccf17e704c1b96924bfa9aa9969077d034e15cdc1addda72fe05be557343820c9f01dcebdfd36d61c029ba2092e7a553ce81d0248c54e6bf613abb0bfb46a1d6db446ca2d0d7015f0135bb8b12fdfcc1dc561f986032869f0093091b64b703ec9b94be687c1b1c4ef13e0fa3bb10f813d54e2ed05f5b8317d"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001d40)={0x14, &(0x7f0000001c40)={0x0, 0x21, 0x7f, {0x7f, 0xc, "09a0bb4466ccbd1beadcc15ab8b51a8d5a0346a48b33708bdfbd11c1c20518884d269708d1cd93a124acc414f053fb48869624e343a4a5619a08ca2fc883113946e294658902f7e8b98dcb03529a4115616ed4fdc680f415ee356e4bb87def54cafa9bd67290d8f3b995afe819347a9f588405218951ca47d7ce606468"}}, &(0x7f0000001d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001f80)={0x44, &(0x7f0000001d80)={0x60, 0x14, 0x5, 'f: \t\a'}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x78}, &(0x7f0000001e00)={0x0, 0x8, 0x1}, &(0x7f0000001e40)={0x20, 0x80, 0x1c, {0x800, 0x3ff, 0x1, 0x1f, 0x3, 0xff45, 0x7, 0x29a6, 0xfff, 0xfff8, 0x0, 0x1}}, &(0x7f0000001e80)={0x20, 0x85, 0x4, 0x1f}, &(0x7f0000001ec0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001f00)={0x20, 0x87, 0x2, 0x101}, &(0x7f0000001f40)={0x20, 0x89, 0x2}}) (async) syz_usb_connect(0x2, 0x2e7, &(0x7f0000001140)={{0x12, 0x1, 0x250, 0xf1, 0x90, 0x84, 0x8, 0x582, 0x113, 0xe7ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d5, 0x1, 0x8, 0x0, 0x30, 0xfd, [{{0x9, 0x4, 0xe3, 0x3f, 0x9, 0x3c, 0xb1, 0x78, 0x0, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1fe}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0xff, 0x3, 0x7f}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x9, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0x1b, 0x40, 0x5, 0x90, 0x9}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x2, 0x80, 0x29}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x7, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0xfc, 0xfc, [@generic={0xb6, 0x21, "1ad2a5fe5df6e69345982c74b376bef44d2d20ea804533936cc7687c5b1233cd3092dd1cb353c067f62a4f9a748b11503ebb3d9473c2bb28027473787b4990465424f63b342a87ed49f2936535c9730bcd13c093cc9302daaaa3e13878ef10c02673c8be8d093ef5bd7e7ebec2efd3c8c2059291202b97b144cd3db651d14822e2d76f93c6b170dbe94113da2297b1b1b09a9a4628170c7b3112a4582617033f5f19328048ce9e58b00e79568a6e0e6a9c3d33bd"}, @generic={0xb4, 0x23, "eada4452fd6f6226b161b54e423a315173ce491c1896243ce0a180c7b57101cc9d0dc97af73fec21dfb9ea128b46e71301c76485fd638c1125bac5a3ab7520ea9cda25f1154683ff5fecc888c5ac5c0e4fdf0dd64d7f55780e5d169b2b0f8b27cf5b50cebc1378281df3288f09b4aeccacd3ba27de95b51c53b6bef39d81478e92eff3dec0cef0582eae19f4ee00da54e61c9c9b1d7ccc56b5c9f792462c37026c9b1c157a0b9da7ec263b97c3d79391dd73"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x3, 0x0, 0x3, [@generic={0x101, 0xe8cc73f730320a66, "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"}]}}, {{0x9, 0x5, 0xe, 0x721da154c6ae0c4f, 0x40, 0x7f, 0x4, 0x81}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0xff, 0x2, 0x1f, 0x40, 0x5}, 0x114, &(0x7f0000001440)={0x5, 0xf, 0x114, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1f, 0xe1, 0x7}, @generic={0xed, 0x10, 0x2, "0d4dacc0371f2dcf6a3b76b76b2c7dc7e984a7d261eefe637a83a16dc00a8294d34a0538afbb6e05511343711142770d84bb83c4aab21043b9232ab34cf761ef251d841a687febbb8383006f6b832a78e6d01330dab40e7f44824ddef46d5233294448e213498dfe7ceaff093fd47269c536c33a8a876337894cb59a6f47c9fa4b7ebbc3131115aec45c0df9ffc25e381fa7d0a3a17d1fa5b014e8725eccac684921793cd25266b042c3e656cde9b6305aedd79d0b41410680ee2533855915476c9c22e49d9f1e43c570f3951d7860e3d4d1c8967c9395e907b89d1f686f557dadb82c6a3282776cef84"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x45, 0x4, 0x1, 0x1, 0xb3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x3, 0xf6}, @ptm_cap={0x3}]}, 0x1, [{0xa8, &(0x7f0000001580)=@string={0xa8, 0x3, "95d8c4643ba84d9bed9717464dcaf67fa4e9c07e3e1a5a7defa59668650cd5a9de3a18b8e564bedec8d071ecfb0b8281760ffda05c587e1c36432dd63b42a29bca5866119c887337304197c84dffd5cb068b16606ffb9f33e475a791440682c4bc0952c720c6c9bff2abcbc03f5bcaec7d152cd2a46c7b9fa0e0aa2d2cd5d6014809a4533db3dcba5f606d9e1d6901eaa79f7e31f38f10acb1e87f8a079240d1bc59c6a2f2c4"}}]}) r3 = syz_usb_connect(0x6, 0x1121, &(0x7f0000002000)={{0x12, 0x1, 0x110, 0x49, 0xb9, 0x2f, 0x20, 0x458, 0x4012, 0x9501, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110f, 0x3, 0xcc, 0x3, 0xe0, 0x3, [{{0x9, 0x4, 0xf9, 0x8, 0xe, 0xe5, 0x1d, 0xcc, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x81}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0x83, "f829"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x1f, 0x20, 0x1f, [@generic={0xe8, 0x0, "cabcc12ec889a6b0217640f668ffff52b0455491140ac63f7667dc94382012d66c7c77769bf9eb952bf4775fe5a9bd3b5df526fdbb650dded9dc21e98299257fe263bffbe995b2f6403d2fc1f08e5ce7fa9cf35919974a78c82063dd8d70bacf148cdbfbe82de08c9d04e7cdc1fb5d21618c94859ef50e7afdd9177ebaf68f70ba4b988ecad1dcd18ca0f917390865f3da8b02538ba191d4d035c777ea1d89dbf78de498ce1b609c452452ca828bcf3dcbc7d77cc4d1cbf8672a53f51fb3174512e55f13fd80bb6889ec15020e49cb4eeadbcac5bfb1b0f5dbef2243ac9bd38eebef813db976"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x51, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}, @generic={0xa1, 0x22, "fd42fab1c2095415415f59e67bf819c86ac65ff79649225f4ffa69ec2b242369f1c4ca1b0e489ee004f0077976c3dfaf10cd6ff047d12afd6065d9c7ffee53b4b179a4be81f54788176571d04243806cca53afb9de57caf64467022aed09b481c3dff39afb7e136451a3425b0416ba6b718561f8b8b94f5cb4e7676a725f57421f0e8156028759a4c415ee3776a2d05d154834aaa37199afc5dcd51d0cbd7b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x5, 0x4, 0x6, [@generic={0xcb, 0x3e, "17a0ae5b943239d9e8c68fd03114e9a612f76391ab7824adfc845758ca0cfdfc4d443b3f37f664b33cb4f410a5f898736d005602d2fb04aa1cc83a13cd370de1dd9bd9fd93001532a600dbf50a2f72515950b41b2bd2d1fd510641c8e58871e248fd60a194d8d077676aaaa029f0b6b948ae101f20359c633e0826a4502edc838cd4c34f113bf86be28202fb9cc5baa36615888e0cae0455855b5246dc070ff3371ae95fd5febb79fcfa0499839933d7abf9ce6c5c94ac1368f3ff602f8ad63de5b3d9de96e3dd8342"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x9f, 0x81, 0x1, [@generic={0x43, 0x23, "99069b38ba1403a7a18171d0948466158f1391e1d62841a1138b482934d541823db598a36fec275c0ab59eba9188375c67dfc5c60ea8a490d838aa7c40c0e2b721"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x40, 0x8, 0x7, [@generic={0x63, 0xd, "fe0fe4cee4fae45e4549436dfc331914d166820b7800a1498496920358ea80234959306818c0cd4409e115dfcae527afcb5580117ea4dd34bb95f61c80cece75121b8f0ead42dce97695de820d2d747f2456d064a480c43f71012a78e4fbe4056e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x1000}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x1f, 0x2, 0x4, [@generic={0xd5, 0x1, "f7c56dd132a0632d2bc9fbb7505d186b4be3529acae0d7198f98f5b97a7b90af94f4d7c15925a3ba3ad5023e6e2ea2165fd11951542bbf2c2a58f8f02c228344b1873cdf286e53e713e03a8a169d8e1ea746e342d3f4d29d2237e9cd9574cb16722fef56655fc5c48df5137e8fd0586c558293e047932ab71aad0c6c1d0dd0733ca15483e020e8f9abd0009cdab8b8ab6bc876d4b85acc6275284d350f8838e618e9e637d2c2489f52f653226ae648aac7e3e37275459d79dd3f960307278d2b6ec600c091f89889f45091feb299721df43ca2"}, @generic={0x15, 0xc, "0ee99da3df3a9e7322dfc27215db4d4186898e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xff, 0xe6, 0x40, [@generic={0xe2, 0x23, "7ff911084c3d89f4ffa5a7aa52e3f33d4a6c50c78f2d5f4ed163a5b9300e1263f63ab164953e768084558cf8d7b5890f3fc2d3cbda69c0c0a7e95a419bcec0ff979489276c83b44b72d0a0e4fb7be543e1f9f92cec878727fc0372da0eb51c74086955652dbefad0903a2377819d77581e54cadcd87e5b82f7bd07587d748cb405d5bb2812642f9a75137997fbbd4ac14aca7159f73230f3e67d305c57e36becd71906d401cc220c2fcd405ae63b5df669e6d20da7afc4d56c970c84a5caa6b8a863de74620fa390cd2db2eb5922392e28c1846367a351c58619751921804f54"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x9, 0xff, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x2eac}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xfff8}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x7f, 0x7, [@generic={0xfe, 0x7, "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"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3f, 0x3, 0x20, [@generic={0xaf, 0x22, "38211d45b6d47b7c4a2858aecbd0fae0a6d3961a1c72f373e9e3f151e509f95714872c8dc548c721eae011f8a67975244022796773748e590054d8c01293165999eee3aeb4a3ff7c34bbd4cf304b9906ca3dd84d612eb69cfcd171b186eddb785f6d5dd547b5525000b6d5943af0646d7b464341d73d6eb4d1f1e60ad4c8d003f7e104c96a1307dcfb5b3fbbe01ab1fa698f8bf029fd1c39ef21a4ff386362f0d9c97f0702a017c187f50fe7ba"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0x1, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1}, @generic={0xde, 0x1f, "ebbccda9597d05d2934b9c9a7ab40b0b511130e733c874a7157821de98ef8584e776e9fdae801cd33bd3a91fdf59352a32424c7f1a357d6f03a8487f56e5c68a34f7c6d024af8f5f8ed85d6ed9c6eb471fc2d9c4a73be80a36893c2b71feb30e5e9794385db874d5091a642e6e44ff9159c711abc198273335d15e1e6eabc5746db4fcae1782ec917fc014bc20296ca2826b0d294f7387e6e6f7cf538e3c9c4b4950228f7cfa766c7d86ae81338d05a1e4c4b79bc1c811796a0e9e74174c26c8a8a67e0e98ac6c9c275f3bbfad4f2cc7bc47792278c08ee3d39e792d"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x40, 0xb2, 0x3, [@generic={0x15, 0x5, "d04632e4d97fb3181ed5ad479fd75255cd01c9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x38f}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0xff, 0xf9, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfe, 0x5}]}}]}}, {{0x9, 0x4, 0x4, 0x80, 0xd, 0x2b, 0xe8, 0x4e, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x653}}], [{{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x0, 0x3, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x8}, @generic={0x3b, 0x11, "f1c20bca7456b5b69ea69590e17c62f0a33d825f2da5a301bdca78c61d9790eec6b0d64c4801ac681d22b123f1d4ac68f9349fc04e7edb6786"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5}]}}, {{0x9, 0x5, 0x83, 0x4, 0x40, 0x7f, 0x8, 0x1, [@generic={0x4d, 0x23, "fed429799c84c213d6dccf26a8950189efebefda948b355a5a8329a9583ebc2ff2194526274dd76ebda4691d36cb0cebd137d9371fe94330e5d54e152794ae84bcb77295800da85c5df5b8"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x7f, 0x6, [@generic={0x75, 0x23, "67617737cec8c6b3db815f4f03f7cce2a152183fb60945deac4c0ef01c79cfb40ed6b891a9970ae8a300f736d1eb099fa06ae481140670b7d1896346c888fd8a9caa5a229de281632746bf8a8a75c877838c83e588789d0a376457f0df432bf361f40454a2714e319994eb364cd9dce0a42f7b"}, @generic={0x7a, 0x31, "c7996a53e9d9fb9d1705c8fd43fc56ce2440a16e435f90abc29cdf402d48f117fef0e861fbccd6f3ecb3fa3ff1013be55ef58f0248c0b7d2a5c01ae7f522cdc387c32488851b1fdbae9687ea743a0ef1af707395861b5bcb56fb90606baf3b1422e2d6b504dcd7f1840098e89109e842ccebd3847f8be55a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x1ff, 0x1, 0x8, 0x2, [@generic={0xc, 0xb, "cf610d3ba18fdb995690"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xb4, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x29, 0x1}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x1a}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x87, 0x33, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x20, 0x0, 0x2, [@generic={0x6b, 0xe, "f229e48845e23023849fe0e8f2dd096a999647b24c4b59be24d193d649756d8bf992c223fd07b17847b7d50c49272661e42091bff90e0a34794614b9711fb879323b65b3198839b69abbbe91810c06f184bb7a07ee31a70ddc53ae1411c04d827be9fb90c89a76003b"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d, 0x4}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x40, 0x1f, [@generic={0xde, 0x7d, "66d0be8327410b3a008e4f2293d12d208e5229664db9d394872bc67a3a9900c3febe613d1a22e66c46efffa165f8ab27b9e5276176d26cf376f2fba37f8a7f381fde3dafb6ee48481aaf6ff696ee317160c510468f87752da9ae9f173c4fdce85f91b2d198e105d52b0c0ea558b436b8502124ee2d8ef28f48a7816055d0973670605ccee15fa204cd44d3c9ba255df05afd53e291b2c719d0fcaf084fde0fd2a810902b255dcd08a4489413449cedaffc0b78006bceae2adc0f054a115e5d17ac1c70ecb23f422d1f39b1104603b64639347b8d8c777490d86c16e0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1f, 0x3, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x68, 0x8, 0xe, 0xbb, 0xdc, 0x89, 0x1, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "56cb4f41a088"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xb5b, 0x5, 0x7, 0x3d}, {0x6, 0x24, 0x1a, 0x5e77}, [@dmm={0x7, 0x24, 0x14, 0xbb22}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x2, 0x9, 0x1, 0x61, 0x80}, @mdlm_detail={0x15, 0x24, 0x13, 0x8, "d5c004d6206bfcf9e13dc913a21cf1f494"}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x9, 0x7, 0x7, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x20, 0x75d6, [0x7f]}, @obex={0x5, 0x24, 0x15, 0xd7b}]}, @hid_hid={0x9, 0x21, 0x8001, 0x40, 0x1, {0x22, 0xca8}}], [{{0x9, 0x5, 0xe, 0x0, 0x3df, 0x3, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x40, 0x4, 0x4, [@generic={0xd2, 0x11, "6297c71d6c6676ee216ad47ef23d074dca14e74f3e1141a93e210ee2456313e16852d8c423bf6a2b4776dd8368bf9cebd9c5514c033637d64314e2eef485bc5392db3bcf3244e9deed73efbeffbd6d851e298dd479e844af6308839b19cc5990a4314babb9f2ef85ea6ca992907bdcaffd1675478a85f5c5847c235b9dc22050e936ff658157517ea3c8ced48364ddd3fefff72a9956be5181522a8c8564488691ba41ec907da3c7db5b4f777427be379b13cbfa38fa8eff3fa32f41d19e0cb1a0df4374da97c42edbe3f7cf12f48369"}, @generic={0x15, 0x5, "78a680753d51b8f63205737f2fc246da518090"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x4, 0x7, 0x9, [@generic={0x6e, 0x24, "6453df09ecd883e96810c310473939bdba7cdc09f6a0f966a509618249c689fb87bf286d2ac782d96284f5a37910f3dfef3dc88e0ab476dfbc59ee221ff71cc7a55059cdb4de891e1edf5a19b2dc160b327b5a61dd1b3e38c86953d2361a876d756134e86aaaf3cdfbc254f9"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x64, 0x9, 0x3f, [@generic={0xf3, 0xe, "95000d6999e0c145992b6fccdfa9c62c9173abc2624335623b4460dc25fb6fee1c5bc17962c26f8c7bdaf3bf910c51f00c40a604cce5f898882e6a9393f2c095930653669e88537947c5087cdc6ee6d2a08f0e06c5fd99d098858060a5cc592f53cde9a625b51351da7e72b4483a4811ba839ba9341e21d9e8f4b0066381cac4b8f91310b46c5d13d9b85161aa508305be15e3728baffa14b2be9901074cfcbb5b28c4f1633e6f91e896d3fdade4c9ff36fd3622aa0f8dd0e833d82f2a1d5df2bc657bfbf68594cd7b84875b084839c82476c46a7c49091292f444fcccd088429d3b426f178c66ee9c6ffa013e87656f82"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x30, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xb0d}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0x3f, 0x31, [@generic={0x1f, 0x23, "51fd3e17f8d0939492fe7dfff446a4fb99ef950241b76d635bd0fa9743"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x80, 0xf7, 0x4, [@generic={0x4, 0xe, "ec7f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x2, 0x0, 0x5, [@generic={0xa2, 0x21, "883afbb6425357d4239e9ad2d08a13f37bd6b64275874355eb41aae98db21b947efc66de95e865640648a514b5bd4416852543bfc56f2a0f86aa8c5b587d3f848bf8f66d65be1cd19c820968ad63d9f17c4ff37a37b5786e4f7061859746da16b9e4236e4627c7c93c339a01c5064ea4d4ad797d8cfdc5ab4cd5f7a7c3281b8047e0ebc17bb68c523ea92bd6ca7eb5bbf14a516750251c119345cc65926c03e7"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x81, 0xbc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x1f}, @generic={0x47, 0x24, "bfee833d3ec0d7d7533a589e92f57c636b7e1f5f8072daed98393e3ec0f718ecc28f94fd153585cea90946ca4e613b1f8e5be593f4b819b78ec8a0e9780ce87478184484d2"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x6, 0xff, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}, @generic={0xaa, 0x31, "1e3157225a402d6ba03baa10bdbb7b85f1b05a6087fb1f58955dc770f873aba189ea421e4d5e0aae1e89210f97de9dd1f041f67a0fb45e67ebebc0f4ec098a7e2703eace19b92c459bd0ccbc3c2061cd9100011b9e51f9e5f67802d68f3d7d918cb860cbad254507a30d6003e501d1bb242084de198232e3807e764c7b41203e0ca06699887186f28593fe3e9bcb64a8dcbd95e5e35e83bcb7ecd19a92ed7ab2967b6424b52cf39f"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0xda, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0xadb}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7f, 0xaf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x100}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x5, 0xb0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x2}]}}]}}]}}]}}, &(0x7f0000003380)={0xa, &(0x7f0000003140)={0xa, 0x6, 0x110, 0x7, 0x7, 0x9, 0x8, 0x6}, 0x19, &(0x7f0000003180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "2e37e042d7532ad1ad7ded950fd65d2b"}]}, 0x6, [{0x40, &(0x7f00000031c0)=@string={0x40, 0x3, "3405b9e191e87197ca91e420eab04399530a8b885a39cb6dcb425782fb0e1a3a9fad613b33471c0a72306816685d3ae6228e9a33c555459e81eb9513ba72"}}, {0x4, &(0x7f0000003200)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x402}}, {0x5f, &(0x7f0000003300)=@string={0x5f, 0x3, "397cdc0e20683fb862857a4462d021a07bffd05b45109b178bb01bedb7c6c83a1f293a077afc980663d09d0f6779b411058c5fa7006b896748db44ad4b8c3b15ead51ad2ce88128fdfd1eeb9f3e375646c903e9cf5e4895765c6679d86"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000003500)={0x24, &(0x7f0000003400)={0x40, 0x4, 0x13, {0x13, 0x22, "b2afccfb1d78f8710e216151fa7ff7db4c"}}, &(0x7f0000003440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000003480)={0x0, 0x22, 0x10, {[@global=@item_012={0x1, 0x1, 0x5, '!'}, @global=@item_4={0x3, 0x1, 0xb, "0ec9a9e9"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "53a4bb41"}, @global=@item_012={0x2, 0x1, 0x6, '[D'}]}}, &(0x7f00000034c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x139, 0xfe, 0x1, {0x22, 0xc5e}}}}, &(0x7f00000036c0)={0x2c, &(0x7f0000003540)={0x40, 0x16, 0x2f, "4bd4c16cb333e06ac48b4fdedc484aa7234983e50fbf69bb3dcbb732115651ab8cbdba9aec8be6cebc29cbb64c5f37"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003600)={0x20, 0x1, 0x74, "e5485d06aba415f09ba6259135fb7e43c6d191b2664d73d898428e1e3c9bfbeb730d7d800ef3c911924d9054a09c4066c64c5c25c1f7648d32f3bc9f264faf05d1fcccfc459caf254418cef2ac1e6c0116be390460fbe235996a38d748f912ee6cb7f6446b8887abef8c5eb46a8af359c7241dc3"}, &(0x7f0000003680)={0x20, 0x3, 0x1, 0x6}}) [ 1730.463719][ T5147] usbhid 2-1:0.0: can't add hid device: -71 [ 1730.470384][ T5147] usbhid: probe of 2-1:0.0 failed with error -71 [ 1730.491472][T31906] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1730.497925][T31906] cdc_wdm 6-1:21.0: Unknown control protocol [ 1730.554552][ T5147] usb 2-1: USB disconnect, device number 98 07:19:35 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1730.777766][T31906] usb 6-1: USB disconnect, device number 11 [ 1730.803287][T32099] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1730.812899][T32099] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1730.821602][T32099] usb 4-1: Product: syz [ 1730.826366][T32099] usb 4-1: Manufacturer: syz [ 1730.834452][ T2799] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1730.834533][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1730.854144][T32099] usb 4-1: SerialNumber: syz [ 1731.039506][T32099] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1731.046387][T32099] cdc_wdm 4-1:21.0: Unknown control protocol [ 1731.153805][ T2805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1731.206774][ T2805] device team18 entered promiscuous mode [ 1731.213918][ T2805] 8021q: adding VLAN 0 to HW filter on device team18 07:19:36 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1731.292501][ T5147] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1731.631859][T26254] usb 4-1: USB disconnect, device number 123 [ 1731.644065][ T2774] cdc_wdm 4-1:21.0: Tx URB error: -19 [ 1731.660281][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1731.671833][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1731.682233][ T5147] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1731.691527][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.693091][ T2816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1731.887942][ T5147] usb 2-1: config 0 descriptor?? [ 1732.142700][ T2818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.152739][ T2818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:19:37 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:37 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1732.421226][ T2822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1732.483458][ T2822] device team19 entered promiscuous mode [ 1732.490183][ T2822] 8021q: adding VLAN 0 to HW filter on device team19 [ 1732.501436][ T2823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1732.545862][ T2795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.555487][ T2795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.582671][ T2823] device team1 entered promiscuous mode [ 1732.589436][ T2823] 8021q: adding VLAN 0 to HW filter on device team1 [ 1732.591256][ T2818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.606995][ T2818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.653000][ T5147] hid-led: probe of 0003:0FC5:B080.002E failed with error -71 [ 1732.682991][ T5147] usb 2-1: USB disconnect, device number 99 07:19:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) write$char_usb(r3, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syz_usb_disconnect(r0) 07:19:37 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x101, 0x94) r0 = syz_clone3(&(0x7f0000000380)={0x60040000, 0x0, 0xfffffffffffffffc, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = getpid() inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_clone3(&(0x7f0000000640)={0x4000, &(0x7f0000000140), &(0x7f0000000180), 0x0, {0x24}, &(0x7f0000000200)=""/28, 0x1c, &(0x7f0000000240)=""/87, &(0x7f0000000600)=[0x0, r1, r2], 0x3}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x4000, &(0x7f0000000100)=0x400, 0xc8b) syz_open_procfs(r0, &(0x7f00000002c0)='setgroups\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x81000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:19:37 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:37 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffe, @local}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x5f0}}], 0x2, 0x8000) [ 1733.042956][ T2833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1733.069576][ T2834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:19:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffe, @local}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x5f0}}], 0x2, 0x8000) 07:19:38 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1733.274222][ T2834] device team20 entered promiscuous mode [ 1733.281123][ T2834] 8021q: adding VLAN 0 to HW filter on device team20 07:19:38 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1733.431337][ T2840] team0: Port device vlan9 added [ 1733.454146][ T5084] usb 4-1: new high-speed USB device number 124 using dummy_hcd 07:19:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffe, @local}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x5f0}}], 0x2, 0x8000) (rerun: 32) [ 1733.843256][ T5084] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.854145][ T5084] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1733.864105][ T5084] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.890723][ T2834] team0: Port device vlan9 removed 07:19:39 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x40, 0x3, "2bd1adc1ff79d6b36ff63d91753a98812614a9182948640ddda809479dcb8c137a87bcb1182b5cc09c6ea95d7d4dbf1d9a1b5dd6c428a6f5c65025cf"}, @ETHTOOL_A_WOL_SOPASS={0xc2, 0x3, "ac57e8583eb3915d6ded1f0b3e1125c05483c534b31bd8513405b98b834692fc240ca239fab07d3e8669fbe8b94555bf313fa3291fe213a02c0a986c200a88424836a757836271873b730b4eed6ad54a9ec544b8a49384d5fe2d1b38c1ac769624ee3c539a2096995dcbb6c55c42540ceb71a0930d6cc99974c5accce0757d36c42b3df0e43b3f67068a21bab932683b24e463a079eabb0cea7c51fb808d3981229341314fe3c5c3b51266b6f9cb814b4bbfce6705a12f940ec1dfcbb7f4"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "a72a47aed7c211a8e9644dbc6534695455e592d48cfa59f691241fd72e43ee27ba9cbc2fb3768ebfc1c21121e5bcfdbf817f87b45fa7e65e8ef778aa2b8d1964577e94f168d1f9f98a7d40665c0d06bf43ebf8cb1cdd616d70b968f763120d83ab1baf6fe3fd317fbb3906b3062cc0402a32e3a76fa869fdc5c5f925056d16e12e203610541101a54d14a8bd5f55e3a12004f0b6ccf265fc02e2e5a9a726469fc29a32ca079e4ee27865e7a6eb05a4531ffe1efc4f7e75a2bb6839d55a87cb3eb945f235fc333c4d3b694a4334bdeffba5ccbdd0"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[%/)&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^]\'\':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0x23, 0x3, "f1f79feb568be4e0de9c7189e0e6b52191a66819e509c3cb62eda8ddff7a69"}, @ETHTOOL_A_WOL_SOPASS={0xa5, 0x3, "1d3ec58f83a0f29bb7206182e040c81e028038f046befaa4ccffa6b23d349fa0903c56a80c704414dc1824d362c96ea0d182e6c4bf950b923ac8f29307515047118f5c55b8128f67757a7d0a326ba650c6762d30faa56dd3edad6013411a0a82324ac92bb279aee22f2511a77e152c61009e61f92735d919e535418c1c698080dceff1d91c2dcce760932b65eb54f15a7130f68919f4a4744987165b4856096860"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\\]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x84}, 0x24000004) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=""/86, 0x21000, 0x800, 0x8001, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f00000001c0)={0x0}, 0x20) [ 1734.050695][ T2848] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1734.059476][ T2848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1734.072655][ T5084] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1734.082336][ T5084] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1734.090994][ T5084] usb 4-1: Product: syz [ 1734.095548][ T5084] usb 4-1: Manufacturer: syz [ 1734.100327][ T5084] usb 4-1: SerialNumber: syz [ 1734.183688][ T2851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:39 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1734.259377][ T5084] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1734.265727][ T5084] cdc_wdm 4-1:21.0: Unknown control protocol 07:19:39 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1734.543793][ T2861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1734.595974][ T2861] device team20 entered promiscuous mode [ 1734.602889][ T2861] 8021q: adding VLAN 0 to HW filter on device team20 [ 1734.655645][T26254] usb 4-1: USB disconnect, device number 124 [ 1734.728049][ T2865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1735.015437][ T2861] team0: Port device vlan9 added [ 1735.145139][ T2866] team0: Port device vlan9 removed 07:19:41 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) write$char_usb(r3, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syz_usb_disconnect(r0) 07:19:41 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000040)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b"], 0x44}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) (async) 07:19:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async, rerun: 32) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) (rerun: 32) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x40, 0x3, "2bd1adc1ff79d6b36ff63d91753a98812614a9182948640ddda809479dcb8c137a87bcb1182b5cc09c6ea95d7d4dbf1d9a1b5dd6c428a6f5c65025cf"}, @ETHTOOL_A_WOL_SOPASS={0xc2, 0x3, "ac57e8583eb3915d6ded1f0b3e1125c05483c534b31bd8513405b98b834692fc240ca239fab07d3e8669fbe8b94555bf313fa3291fe213a02c0a986c200a88424836a757836271873b730b4eed6ad54a9ec544b8a49384d5fe2d1b38c1ac769624ee3c539a2096995dcbb6c55c42540ceb71a0930d6cc99974c5accce0757d36c42b3df0e43b3f67068a21bab932683b24e463a079eabb0cea7c51fb808d3981229341314fe3c5c3b51266b6f9cb814b4bbfce6705a12f940ec1dfcbb7f4"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "a72a47aed7c211a8e9644dbc6534695455e592d48cfa59f691241fd72e43ee27ba9cbc2fb3768ebfc1c21121e5bcfdbf817f87b45fa7e65e8ef778aa2b8d1964577e94f168d1f9f98a7d40665c0d06bf43ebf8cb1cdd616d70b968f763120d83ab1baf6fe3fd317fbb3906b3062cc0402a32e3a76fa869fdc5c5f925056d16e12e203610541101a54d14a8bd5f55e3a12004f0b6ccf265fc02e2e5a9a726469fc29a32ca079e4ee27865e7a6eb05a4531ffe1efc4f7e75a2bb6839d55a87cb3eb945f235fc333c4d3b694a4334bdeffba5ccbdd0"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[%/)&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^]\'\':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0x23, 0x3, "f1f79feb568be4e0de9c7189e0e6b52191a66819e509c3cb62eda8ddff7a69"}, @ETHTOOL_A_WOL_SOPASS={0xa5, 0x3, "1d3ec58f83a0f29bb7206182e040c81e028038f046befaa4ccffa6b23d349fa0903c56a80c704414dc1824d362c96ea0d182e6c4bf950b923ac8f29307515047118f5c55b8128f67757a7d0a326ba650c6762d30faa56dd3edad6013411a0a82324ac92bb279aee22f2511a77e152c61009e61f92735d919e535418c1c698080dceff1d91c2dcce760932b65eb54f15a7130f68919f4a4744987165b4856096860"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\\]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x84}, 0x24000004) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=""/86, 0x21000, 0x800, 0x8001, 0x2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f00000001c0)={0x0}, 0x20) 07:19:41 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:41 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x101, 0x94) r0 = syz_clone3(&(0x7f0000000380)={0x60040000, 0x0, 0xfffffffffffffffc, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = getpid() inotify_init1(0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_clone3(&(0x7f0000000640)={0x4000, &(0x7f0000000140), &(0x7f0000000180), 0x0, {0x24}, &(0x7f0000000200)=""/28, 0x1c, &(0x7f0000000240)=""/87, &(0x7f0000000600)=[0x0, r1, r2], 0x3}, 0x58) (async) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x4000, &(0x7f0000000100)=0x400, 0xc8b) (async) syz_open_procfs(r0, &(0x7f00000002c0)='setgroups\x00') (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000080)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x81000) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1736.543103][T26254] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1736.638560][ T2874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1736.651110][ T2876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1736.756752][ T2876] device team20 entered promiscuous mode [ 1736.763709][ T2876] 8021q: adding VLAN 0 to HW filter on device team20 [ 1736.803059][ T2878] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1736.811846][ T2878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:19:41 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1737.058007][T26254] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.068689][T26254] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1737.078017][T26254] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.088730][ T2876] team0: Port device vlan9 added 07:19:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) pipe(&(0x7f0000000040)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b"], 0x44}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) (async) 07:19:42 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x40, 0x3, "2bd1adc1ff79d6b36ff63d91753a98812614a9182948640ddda809479dcb8c137a87bcb1182b5cc09c6ea95d7d4dbf1d9a1b5dd6c428a6f5c65025cf"}, @ETHTOOL_A_WOL_SOPASS={0xc2, 0x3, "ac57e8583eb3915d6ded1f0b3e1125c05483c534b31bd8513405b98b834692fc240ca239fab07d3e8669fbe8b94555bf313fa3291fe213a02c0a986c200a88424836a757836271873b730b4eed6ad54a9ec544b8a49384d5fe2d1b38c1ac769624ee3c539a2096995dcbb6c55c42540ceb71a0930d6cc99974c5accce0757d36c42b3df0e43b3f67068a21bab932683b24e463a079eabb0cea7c51fb808d3981229341314fe3c5c3b51266b6f9cb814b4bbfce6705a12f940ec1dfcbb7f4"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "a72a47aed7c211a8e9644dbc6534695455e592d48cfa59f691241fd72e43ee27ba9cbc2fb3768ebfc1c21121e5bcfdbf817f87b45fa7e65e8ef778aa2b8d1964577e94f168d1f9f98a7d40665c0d06bf43ebf8cb1cdd616d70b968f763120d83ab1baf6fe3fd317fbb3906b3062cc0402a32e3a76fa869fdc5c5f925056d16e12e203610541101a54d14a8bd5f55e3a12004f0b6ccf265fc02e2e5a9a726469fc29a32ca079e4ee27865e7a6eb05a4531ffe1efc4f7e75a2bb6839d55a87cb3eb945f235fc333c4d3b694a4334bdeffba5ccbdd0"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[%/)&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^]\'\':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0x23, 0x3, "f1f79feb568be4e0de9c7189e0e6b52191a66819e509c3cb62eda8ddff7a69"}, @ETHTOOL_A_WOL_SOPASS={0xa5, 0x3, "1d3ec58f83a0f29bb7206182e040c81e028038f046befaa4ccffa6b23d349fa0903c56a80c704414dc1824d362c96ea0d182e6c4bf950b923ac8f29307515047118f5c55b8128f67757a7d0a326ba650c6762d30faa56dd3edad6013411a0a82324ac92bb279aee22f2511a77e152c61009e61f92735d919e535418c1c698080dceff1d91c2dcce760932b65eb54f15a7130f68919f4a4744987165b4856096860"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\\]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x84}, 0x24000004) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=""/86, 0x21000, 0x800, 0x8001, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f00000001c0)={0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) pipe(&(0x7f0000000040)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) (async) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3d8, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x40, 0x3, "2bd1adc1ff79d6b36ff63d91753a98812614a9182948640ddda809479dcb8c137a87bcb1182b5cc09c6ea95d7d4dbf1d9a1b5dd6c428a6f5c65025cf"}, @ETHTOOL_A_WOL_SOPASS={0xc2, 0x3, "ac57e8583eb3915d6ded1f0b3e1125c05483c534b31bd8513405b98b834692fc240ca239fab07d3e8669fbe8b94555bf313fa3291fe213a02c0a986c200a88424836a757836271873b730b4eed6ad54a9ec544b8a49384d5fe2d1b38c1ac769624ee3c539a2096995dcbb6c55c42540ceb71a0930d6cc99974c5accce0757d36c42b3df0e43b3f67068a21bab932683b24e463a079eabb0cea7c51fb808d3981229341314fe3c5c3b51266b6f9cb814b4bbfce6705a12f940ec1dfcbb7f4"}, @ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "a72a47aed7c211a8e9644dbc6534695455e592d48cfa59f691241fd72e43ee27ba9cbc2fb3768ebfc1c21121e5bcfdbf817f87b45fa7e65e8ef778aa2b8d1964577e94f168d1f9f98a7d40665c0d06bf43ebf8cb1cdd616d70b968f763120d83ab1baf6fe3fd317fbb3906b3062cc0402a32e3a76fa869fdc5c5f925056d16e12e203610541101a54d14a8bd5f55e3a12004f0b6ccf265fc02e2e5a9a726469fc29a32ca079e4ee27865e7a6eb05a4531ffe1efc4f7e75a2bb6839d55a87cb3eb945f235fc333c4d3b694a4334bdeffba5ccbdd0"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[%/)&%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^]\'\':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0x23, 0x3, "f1f79feb568be4e0de9c7189e0e6b52191a66819e509c3cb62eda8ddff7a69"}, @ETHTOOL_A_WOL_SOPASS={0xa5, 0x3, "1d3ec58f83a0f29bb7206182e040c81e028038f046befaa4ccffa6b23d349fa0903c56a80c704414dc1824d362c96ea0d182e6c4bf950b923ac8f29307515047118f5c55b8128f67757a7d0a326ba650c6762d30faa56dd3edad6013411a0a82324ac92bb279aee22f2511a77e152c61009e61f92735d919e535418c1c698080dceff1d91c2dcce760932b65eb54f15a7130f68919f4a4744987165b4856096860"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\\]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x84}, 0x24000004) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=""/86, 0x21000, 0x800, 0x8001, 0x2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f00000001c0)={0x0}, 0x20) (async) [ 1737.243805][T26254] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1737.253516][T26254] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1737.262361][T26254] usb 4-1: Product: syz [ 1737.266817][T26254] usb 4-1: Manufacturer: syz [ 1737.271727][T26254] usb 4-1: SerialNumber: syz [ 1737.302943][ T2876] team0: Port device vlan9 removed [ 1737.430712][T26254] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1737.437567][T26254] cdc_wdm 4-1:21.0: Unknown control protocol 07:19:42 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x101, 0x94) (async) r0 = syz_clone3(&(0x7f0000000380)={0x60040000, 0x0, 0xfffffffffffffffc, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) r1 = getpid() (async) inotify_init1(0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) syz_clone3(&(0x7f0000000640)={0x4000, &(0x7f0000000140), &(0x7f0000000180), 0x0, {0x24}, &(0x7f0000000200)=""/28, 0x1c, &(0x7f0000000240)=""/87, &(0x7f0000000600)=[0x0, r1, r2], 0x3}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) (async) set_mempolicy(0x4000, &(0x7f0000000100)=0x400, 0xc8b) (async) syz_open_procfs(r0, &(0x7f00000002c0)='setgroups\x00') (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000080)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x81000) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1737.703550][T26356] usb 4-1: USB disconnect, device number 125 [ 1737.719201][ T2899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1737.746988][ T2905] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1737.756625][ T2905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:19:42 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:43 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1738.187376][ T2919] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1738.254661][ T2920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1738.306045][ T2920] device team20 entered promiscuous mode [ 1738.312914][ T2920] 8021q: adding VLAN 0 to HW filter on device team20 [ 1738.504171][ T2921] team0: Port device vlan9 added [ 1738.737147][ T2924] team0: Port device vlan9 removed 07:19:44 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) write$char_usb(r3, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syz_usb_disconnect(r0) 07:19:44 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 07:19:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:44 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1739.393566][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1739.499877][ T2931] device team20 entered promiscuous mode [ 1739.506807][ T2931] 8021q: adding VLAN 0 to HW filter on device team20 [ 1739.560278][ T2937] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1739.569256][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1739.594097][ T2938] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1739.649568][ T2939] device team1 entered promiscuous mode [ 1739.656285][ T2939] 8021q: adding VLAN 0 to HW filter on device team1 07:19:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1739.725077][ T2935] team0: Port device vlan2 added [ 1739.784052][ T2931] team0: Port device vlan9 added [ 1739.853148][T26356] usb 4-1: new high-speed USB device number 126 using dummy_hcd 07:19:45 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1740.160984][ T2942] team0: Port device vlan2 removed 07:19:45 executing program 0: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r0, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) fallocate(0xffffffffffffffff, 0x62, 0x1, 0x4103fe) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000500)="af78c8b64b57083cf8519affba783d02fdd8bc486edb3a915a1672dab43d9950e07cb173a17a7b58f832f5761c94b5c6f5d3b9200a71730ed4db68ef0c1c21de26", 0x41}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="a99e3289d2f8f4f910a2f1d8368594002c61702fbf580d867134b1e888b8882fdc6c5a50a2e3fec32728528be39e990b0d2979df6de2201816d17827173a3b608f782791536cd8275d03de8831c51d47a7fe4df78d6b76546dfabd133564f80a4cab94c97142febaace212b45c9302000000824d9bf8e4f81c0044404ec9ba9cd6292bf7a836abc0f04cd54c9462f5df9f06a5d1ad66aaf2514c7c94c78c3ab640972bc4f01f5b293700", @ANYRES64, @ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x20004805) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 1740.216152][T26356] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.226938][T26356] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1740.236474][T26356] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.513708][T26356] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1740.523358][T26356] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1740.532330][T26356] usb 4-1: Product: syz [ 1740.536688][T26356] usb 4-1: Manufacturer: syz [ 1740.541583][T26356] usb 4-1: SerialNumber: syz [ 1740.605833][ T2950] device team21 entered promiscuous mode [ 1740.612838][ T2950] 8021q: adding VLAN 0 to HW filter on device team21 07:19:45 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca7531574000", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1740.792414][ T2951] team0: Port device vlan10 added [ 1740.804960][T26356] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1740.811184][T26356] cdc_wdm 4-1:21.0: Unknown control protocol [ 1741.099498][T26356] usb 4-1: USB disconnect, device number 126 [ 1741.414379][ T2955] team0: Port device vlan10 removed 07:19:48 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:48 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:48 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca7531574000", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:48 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:48 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ff99, 0x0) write$char_usb(r2, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syncfs(r3) [ 1743.589226][ T2966] __nla_validate_parse: 4 callbacks suppressed [ 1743.589291][ T2966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1743.685394][ T2966] device team21 entered promiscuous mode [ 1743.692324][ T2966] 8021q: adding VLAN 0 to HW filter on device team21 [ 1743.710621][ T2971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1743.767965][ T2971] device team1 entered promiscuous mode [ 1743.774724][ T2971] 8021q: adding VLAN 0 to HW filter on device team1 [ 1743.791419][ T2970] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1743.804000][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1743.862117][ T2974] device team2 entered promiscuous mode [ 1743.868765][ T2974] 8021q: adding VLAN 0 to HW filter on device team2 [ 1743.880845][ T5147] usb 4-1: new high-speed USB device number 127 using dummy_hcd 07:19:49 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca7531574000", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1743.947663][ T2978] team0: Port device vlan0 added [ 1744.303335][ T5147] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.314058][ T5147] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1744.323824][ T5147] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.444016][ T2982] team0: Port device vlan0 removed 07:19:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x278, 0xe8, 0x60000000, 0x0, 0x0, 0x0, 0x1e0, 0x1f0, 0x1f0, 0x1e0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x305) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000680)=""/111, 0x6f}], 0x5, &(0x7f0000000780)=""/42, 0x2a}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/72, 0x48}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)=""/39, 0x27}], 0x2, &(0x7f0000000940)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/107, 0x6b}], 0x2, &(0x7f0000000b00)=""/19, 0x13}, 0x33}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/39, 0x27}, {&(0x7f0000000b80)=""/55, 0x37}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/170, 0xaa}], 0x4}, 0x4}, {{&(0x7f0000000dc0)=@phonet, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000f80)=""/243, 0xf3}, {&(0x7f0000001080)=""/157, 0x9d}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/203, 0xcb}, {&(0x7f0000000880)=""/10, 0xa}], 0x7}, 0x3f}], 0x6, 0x2000, &(0x7f0000002480)={0x0, 0x3938700}) [ 1744.544639][ T5147] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1744.554076][ T5147] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1744.562901][ T5147] usb 4-1: Product: syz [ 1744.567296][ T5147] usb 4-1: Manufacturer: syz [ 1744.572211][ T5147] usb 4-1: SerialNumber: syz [ 1744.665394][ T2988] xt_TCPMSS: Only works on TCP SYN packets [ 1744.718003][ T5147] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1744.724446][ T5147] cdc_wdm 4-1:21.0: Unknown control protocol 07:19:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x278, 0xe8, 0x60000000, 0x0, 0x0, 0x0, 0x1e0, 0x1f0, 0x1f0, 0x1e0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x305) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000680)=""/111, 0x6f}], 0x5, &(0x7f0000000780)=""/42, 0x2a}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/72, 0x48}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)=""/39, 0x27}], 0x2, &(0x7f0000000940)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/107, 0x6b}], 0x2, &(0x7f0000000b00)=""/19, 0x13}, 0x33}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/39, 0x27}, {&(0x7f0000000b80)=""/55, 0x37}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/170, 0xaa}], 0x4}, 0x4}, {{&(0x7f0000000dc0)=@phonet, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000f80)=""/243, 0xf3}, {&(0x7f0000001080)=""/157, 0x9d}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/203, 0xcb}, {&(0x7f0000000880)=""/10, 0xa}], 0x7}, 0x3f}], 0x6, 0x2000, &(0x7f0000002480)={0x0, 0x3938700}) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x278, 0xe8, 0x60000000, 0x0, 0x0, 0x0, 0x1e0, 0x1f0, 0x1f0, 0x1e0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x305) (async) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000680)=""/111, 0x6f}], 0x5, &(0x7f0000000780)=""/42, 0x2a}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/72, 0x48}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)=""/39, 0x27}], 0x2, &(0x7f0000000940)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/107, 0x6b}], 0x2, &(0x7f0000000b00)=""/19, 0x13}, 0x33}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/39, 0x27}, {&(0x7f0000000b80)=""/55, 0x37}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/170, 0xaa}], 0x4}, 0x4}, {{&(0x7f0000000dc0)=@phonet, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000f80)=""/243, 0xf3}, {&(0x7f0000001080)=""/157, 0x9d}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/203, 0xcb}, {&(0x7f0000000880)=""/10, 0xa}], 0x7}, 0x3f}], 0x6, 0x2000, &(0x7f0000002480)={0x0, 0x3938700}) (async) 07:19:49 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x14, 0x4, 0x1, 0x4, 0x64, 0x68, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x84, [@multicast2]}, @timestamp={0x44, 0x4, 0x21, 0x0, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xa1, 0x3, 0x7, [{@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@broadcast, 0x200}, {@broadcast, 0x7}, {@local, 0x5}]}, @ra={0x94, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x8000, 0x12, 0x0, 0x1}}}}}, 0x0) syz_emit_ethernet(0x19b, &(0x7f0000000080)={@remote, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "8d185a", 0x165, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@fragment={0x2, 0x0, 0x82, 0x1, 0x0, 0x12, 0x65}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3b, 0xb, "a4395a11b700ee304f78411cb4ab4be8cf15e4095c61edddd6174dfb0ed003346b9ae9ee1d308839ee505c574b85a306c624b204843fdafac3e482ffc8c62ea60c9bdc1588f4aca5aa3609b668da5a6157ce7058b27da6e7"}, {0x22, 0x1f, "e440e4dd9c8000cafc19a3d42f2decbea72fa97eda692bed24eaa09d26b624601dfeb00f9b5489ab983ea67fc49065b45361a96d9f2d9bf50acc8e8cc5bb34f252e6a1d5ada97cfb753c5772a06973c9316074217c4fc83bc718be7a8a5a4609919431b0ad3fd869847b9eb5d04f0cec8febd702eb25cec3edf70602a43a53d6edc7ab8ecd80516030f3d7792d4ce9ee2d1fe19f122c26c60bee8185cb5a9fd5846c38e620633a528f2dd8f7b2f74635401e283e92f136580892f6d2f39c74918102d7f0cc19ff001788a52d8f426475777042a904600aebf2b094300f6c71bb762d1eaf0790355944e52fc9a5920181042fd27f0599c9ed9e"}]}}}}}}, &(0x7f0000000240)={0x9, 0x2, [0x9ab, 0xe2c, 0x55a, 0x283]}) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="334a9967647d", @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}, &(0x7f00000002c0)={0x1, 0x2, [0x109, 0x1b0, 0x7b1, 0x29a]}) [ 1745.036648][ T2991] xt_TCPMSS: Only works on TCP SYN packets [ 1745.091040][ T2994] xt_TCPMSS: Only works on TCP SYN packets [ 1745.104006][ T2985] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x278, 0xe8, 0x60000000, 0x0, 0x0, 0x0, 0x1e0, 0x1f0, 0x1f0, 0x1e0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x305) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000680)=""/111, 0x6f}], 0x5, &(0x7f0000000780)=""/42, 0x2a}, 0x2}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/72, 0x48}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)=""/39, 0x27}], 0x2, &(0x7f0000000940)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/160, 0xa0}, {&(0x7f0000000a40)=""/107, 0x6b}], 0x2, &(0x7f0000000b00)=""/19, 0x13}, 0x33}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/39, 0x27}, {&(0x7f0000000b80)=""/55, 0x37}, {&(0x7f0000000bc0)=""/244, 0xf4}, {&(0x7f0000000cc0)=""/170, 0xaa}], 0x4}, 0x4}, {{&(0x7f0000000dc0)=@phonet, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000f80)=""/243, 0xf3}, {&(0x7f0000001080)=""/157, 0x9d}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/203, 0xcb}, {&(0x7f0000000880)=""/10, 0xa}], 0x7}, 0x3f}], 0x6, 0x2000, &(0x7f0000002480)={0x0, 0x3938700}) [ 1745.453296][ T2998] xt_TCPMSS: Only works on TCP SYN packets 07:19:50 executing program 0: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r0, &(0x7f00000001c0), 0x0) (async) prlimit64(0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) (async) sched_setscheduler(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) (async) fallocate(0xffffffffffffffff, 0x62, 0x1, 0x4103fe) (async) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare(0x6c060000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000500)="af78c8b64b57083cf8519affba783d02fdd8bc486edb3a915a1672dab43d9950e07cb173a17a7b58f832f5761c94b5c6f5d3b9200a71730ed4db68ef0c1c21de26", 0x41}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="a99e3289d2f8f4f910a2f1d8368594002c61702fbf580d867134b1e888b8882fdc6c5a50a2e3fec32728528be39e990b0d2979df6de2201816d17827173a3b608f782791536cd8275d03de8831c51d47a7fe4df78d6b76546dfabd133564f80a4cab94c97142febaace212b45c9302000000824d9bf8e4f81c0044404ec9ba9cd6292bf7a836abc0f04cd54c9462f5df9f06a5d1ad66aaf2514c7c94c78c3ab640972bc4f01f5b293700", @ANYRES64, @ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x20004805) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 07:19:50 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x14, 0x4, 0x1, 0x4, 0x64, 0x68, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x84, [@multicast2]}, @timestamp={0x44, 0x4, 0x21, 0x0, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xa1, 0x3, 0x7, [{@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@broadcast, 0x200}, {@broadcast, 0x7}, {@local, 0x5}]}, @ra={0x94, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x8000, 0x12, 0x0, 0x1}}}}}, 0x0) (async) syz_emit_ethernet(0x19b, &(0x7f0000000080)={@remote, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "8d185a", 0x165, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@fragment={0x2, 0x0, 0x82, 0x1, 0x0, 0x12, 0x65}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3b, 0xb, "a4395a11b700ee304f78411cb4ab4be8cf15e4095c61edddd6174dfb0ed003346b9ae9ee1d308839ee505c574b85a306c624b204843fdafac3e482ffc8c62ea60c9bdc1588f4aca5aa3609b668da5a6157ce7058b27da6e7"}, {0x22, 0x1f, "e440e4dd9c8000cafc19a3d42f2decbea72fa97eda692bed24eaa09d26b624601dfeb00f9b5489ab983ea67fc49065b45361a96d9f2d9bf50acc8e8cc5bb34f252e6a1d5ada97cfb753c5772a06973c9316074217c4fc83bc718be7a8a5a4609919431b0ad3fd869847b9eb5d04f0cec8febd702eb25cec3edf70602a43a53d6edc7ab8ecd80516030f3d7792d4ce9ee2d1fe19f122c26c60bee8185cb5a9fd5846c38e620633a528f2dd8f7b2f74635401e283e92f136580892f6d2f39c74918102d7f0cc19ff001788a52d8f426475777042a904600aebf2b094300f6c71bb762d1eaf0790355944e52fc9a5920181042fd27f0599c9ed9e"}]}}}}}}, &(0x7f0000000240)={0x9, 0x2, [0x9ab, 0xe2c, 0x55a, 0x283]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="334a9967647d", @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}, &(0x7f00000002c0)={0x1, 0x2, [0x109, 0x1b0, 0x7b1, 0x29a]}) 07:19:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:50 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:50 executing program 1: syz_clone(0x63005200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2a, 0x8, 0x7ff, 0x25dfdbfc, {0x3}, [@typed={0x37, 0x8a, 0x0, 0x0, @binary="4bf295c6fcdd46d9fcc6bdcfa26d589e098e996fea0a8482f22fb7ef1c045c16a601551bf60cf7ca09fde5a88399ab619a4194"}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x80) [ 1745.633888][ T3001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1745.691791][ T3001] device team21 entered promiscuous mode [ 1745.698690][ T3001] 8021q: adding VLAN 0 to HW filter on device team21 [ 1745.710516][ T3008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:50 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x14, 0x4, 0x1, 0x4, 0x64, 0x68, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x84, [@multicast2]}, @timestamp={0x44, 0x4, 0x21, 0x0, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xa1, 0x3, 0x7, [{@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@broadcast, 0x200}, {@broadcast, 0x7}, {@local, 0x5}]}, @ra={0x94, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x8000, 0x12, 0x0, 0x1}}}}}, 0x0) (async) syz_emit_ethernet(0x19b, &(0x7f0000000080)={@remote, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "8d185a", 0x165, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@fragment={0x2, 0x0, 0x82, 0x1, 0x0, 0x12, 0x65}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3b, 0xb, "a4395a11b700ee304f78411cb4ab4be8cf15e4095c61edddd6174dfb0ed003346b9ae9ee1d308839ee505c574b85a306c624b204843fdafac3e482ffc8c62ea60c9bdc1588f4aca5aa3609b668da5a6157ce7058b27da6e7"}, {0x22, 0x1f, "e440e4dd9c8000cafc19a3d42f2decbea72fa97eda692bed24eaa09d26b624601dfeb00f9b5489ab983ea67fc49065b45361a96d9f2d9bf50acc8e8cc5bb34f252e6a1d5ada97cfb753c5772a06973c9316074217c4fc83bc718be7a8a5a4609919431b0ad3fd869847b9eb5d04f0cec8febd702eb25cec3edf70602a43a53d6edc7ab8ecd80516030f3d7792d4ce9ee2d1fe19f122c26c60bee8185cb5a9fd5846c38e620633a528f2dd8f7b2f74635401e283e92f136580892f6d2f39c74918102d7f0cc19ff001788a52d8f426475777042a904600aebf2b094300f6c71bb762d1eaf0790355944e52fc9a5920181042fd27f0599c9ed9e"}]}}}}}}, &(0x7f0000000240)={0x9, 0x2, [0x9ab, 0xe2c, 0x55a, 0x283]}) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="334a9967647d", @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}, &(0x7f00000002c0)={0x1, 0x2, [0x109, 0x1b0, 0x7b1, 0x29a]}) 07:19:51 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ff99, 0x0) write$char_usb(r2, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syncfs(r3) 07:19:51 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:51 executing program 0: mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) (async) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) writev(r0, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) (async) fallocate(0xffffffffffffffff, 0x62, 0x1, 0x4103fe) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6c060000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000500)="af78c8b64b57083cf8519affba783d02fdd8bc486edb3a915a1672dab43d9950e07cb173a17a7b58f832f5761c94b5c6f5d3b9200a71730ed4db68ef0c1c21de26", 0x41}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="a99e3289d2f8f4f910a2f1d8368594002c61702fbf580d867134b1e888b8882fdc6c5a50a2e3fec32728528be39e990b0d2979df6de2201816d17827173a3b608f782791536cd8275d03de8831c51d47a7fe4df78d6b76546dfabd133564f80a4cab94c97142febaace212b45c9302000000824d9bf8e4f81c0044404ec9ba9cd6292bf7a836abc0f04cd54c9462f5df9f06a5d1ad66aaf2514c7c94c78c3ab640972bc4f01f5b293700", @ANYRES64, @ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="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"], 0x40, 0x800}}], 0x1, 0x20004805) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 1746.607532][T26254] usb 4-1: USB disconnect, device number 127 07:19:51 executing program 5: sysfs$3(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x2e2f, 0x24000, 0x2, 0x4, 0x1f, 0xd54, 0x5, 0x2], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) readv(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/192, 0xc0}], 0x3) sendfile(r1, r3, 0x0, 0x49) sysfs$3(0x3) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) fcntl$addseals(r4, 0x409, 0x0) 07:19:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1746.794618][ T3027] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1746.823183][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:19:51 executing program 1: syz_clone(0x63005200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2a, 0x8, 0x7ff, 0x25dfdbfc, {0x3}, [@typed={0x37, 0x8a, 0x0, 0x0, @binary="4bf295c6fcdd46d9fcc6bdcfa26d589e098e996fea0a8482f22fb7ef1c045c16a601551bf60cf7ca09fde5a88399ab619a4194"}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x80) syz_clone(0x63005200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2a, 0x8, 0x7ff, 0x25dfdbfc, {0x3}, [@typed={0x37, 0x8a, 0x0, 0x0, @binary="4bf295c6fcdd46d9fcc6bdcfa26d589e098e996fea0a8482f22fb7ef1c045c16a601551bf60cf7ca09fde5a88399ab619a4194"}]}, 0x4c}}, 0x0) (async) pipe(&(0x7f0000000040)) (async) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x80) (async) [ 1746.982583][ T3029] device team21 entered promiscuous mode [ 1746.989329][ T3029] 8021q: adding VLAN 0 to HW filter on device team21 [ 1747.091819][ T3039] team0: Port device vlan10 added 07:19:52 executing program 5: sysfs$3(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x2e2f, 0x24000, 0x2, 0x4, 0x1f, 0xd54, 0x5, 0x2], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) readv(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/192, 0xc0}], 0x3) sendfile(r1, r3, 0x0, 0x49) sysfs$3(0x3) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) fcntl$addseals(r4, 0x409, 0x0) sysfs$3(0x3) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x2e2f, 0x24000, 0x2, 0x4, 0x1f, 0xd54, 0x5, 0x2], 0x8, 0x80000}) (async) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) (async) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) readv(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/192, 0xc0}], 0x3) (async) sendfile(r1, r3, 0x0, 0x49) (async) sysfs$3(0x3) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) (async) fcntl$addseals(r4, 0x409, 0x0) (async) 07:19:52 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1747.362375][T26254] usb 4-1: new high-speed USB device number 2 using dummy_hcd 07:19:52 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) socket(0x2a, 0x6, 0xfffffffb) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'syzkaller0\x00', {0x4}, 0x5}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0e052bbd70fae9bbfb3387a30df27790d007"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2, 0x40, 0x20, 0x0, 0x7}}) [ 1747.491419][ T3040] team0: Port device vlan10 removed [ 1747.805907][T26254] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.816628][T26254] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1747.827390][T26254] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.854357][ T3055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:52 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x0, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:19:53 executing program 5: sysfs$3(0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x2e2f, 0x24000, 0x2, 0x4, 0x1f, 0xd54, 0x5, 0x2], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) (async) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) readv(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/192, 0xc0}], 0x3) (async) sendfile(r1, r3, 0x0, 0x49) sysfs$3(0x3) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) (async) fcntl$addseals(r4, 0x409, 0x0) 07:19:53 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1748.007916][T26254] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1748.017716][T26254] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1748.026700][T26254] usb 4-1: Product: syz [ 1748.032504][T26254] usb 4-1: Manufacturer: syz [ 1748.037406][T26254] usb 4-1: SerialNumber: syz [ 1748.291462][T26254] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1748.297882][T26254] cdc_wdm 4-1:21.0: Unknown control protocol [ 1748.414598][ T3073] device team21 entered promiscuous mode [ 1748.421331][ T3073] 8021q: adding VLAN 0 to HW filter on device team21 [ 1748.519374][ T3069] team0: Port device vlan10 added [ 1748.896468][ T3075] team0: Port device vlan10 removed 07:19:55 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ff99, 0x0) write$char_usb(r2, &(0x7f00000000c0)="d25eb4536b22ae4b20a67edb6955424788a3914b9fe7d70c9be4af5e9108a441ddcc23d0", 0x24) syncfs(r3) 07:19:55 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) socket(0x2a, 0x6, 0xfffffffb) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'syzkaller0\x00', {0x4}, 0x5}) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0e052bbd70fae9bbfb3387a30df27790d007"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2, 0x40, 0x20, 0x0, 0x7}}) 07:19:55 executing program 5: syz_open_dev$video4linux(&(0x7f0000000cc0), 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x15b}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc008561b, &(0x7f0000000080)={0x58da, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffe, 0x7, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1013, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x1f, 0x0, 0x3009, 0x4, 0x72, 0x559a, 0xf9ae}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x4ff99, 0x0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x3, 0x30, [0x6, 0x7fff, 0xffff, 0x1], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 07:19:55 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1749.907737][ T5147] usb 4-1: USB disconnect, device number 2 07:19:55 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x0, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1750.094654][ T3083] __nla_validate_parse: 2 callbacks suppressed [ 1750.094717][ T3083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1750.338363][ T3083] device team21 entered promiscuous mode [ 1750.345362][ T3083] 8021q: adding VLAN 0 to HW filter on device team21 [ 1750.356072][ T3082] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1750.432392][ T3093] team0: Port device vlan10 added [ 1750.612827][ T5147] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1750.681694][ T3095] team0: Port device vlan10 removed [ 1750.983838][ T5147] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.994482][ T5147] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1751.009550][ T5147] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.259568][ T5147] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1751.269408][ T5147] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1751.278842][ T5147] usb 4-1: Product: syz [ 1751.283344][ T5147] usb 4-1: Manufacturer: syz [ 1751.288131][ T5147] usb 4-1: SerialNumber: syz [ 1751.363480][ T5147] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1751.369717][ T5147] cdc_wdm 4-1:21.0: Unknown control protocol 07:19:56 executing program 1: syz_clone(0x63005200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2a, 0x8, 0x7ff, 0x25dfdbfc, {0x3}, [@typed={0x37, 0x8a, 0x0, 0x0, @binary="4bf295c6fcdd46d9fcc6bdcfa26d589e098e996fea0a8482f22fb7ef1c045c16a601551bf60cf7ca09fde5a88399ab619a4194"}]}, 0x4c}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x101}, 0x80) 07:19:56 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) socket(0x2a, 0x6, 0xfffffffb) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'syzkaller0\x00', {0x4}, 0x5}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (rerun: 32) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0e052bbd70fae9bbfb3387a30df27790d007"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2, 0x40, 0x20, 0x0, 0x7}}) 07:19:56 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:56 executing program 5: syz_open_dev$video4linux(&(0x7f0000000cc0), 0x5, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x15b}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc008561b, &(0x7f0000000080)={0x58da, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffe, 0x7, 0x1}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1013, 0x1}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x1f, 0x0, 0x3009, 0x4, 0x72, 0x559a, 0xf9ae}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x24008800, 0x0, 0x0) (async) splice(r4, 0x0, r5, 0x0, 0x4ff99, 0x0) (async) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x3, 0x30, [0x6, 0x7fff, 0xffff, 0x1], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 07:19:56 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x0, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1751.628201][ T3102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1751.715907][ T3102] device team21 entered promiscuous mode [ 1751.724541][ T3102] 8021q: adding VLAN 0 to HW filter on device team21 [ 1751.743397][ T3101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1751.839484][ T3112] team0: Port device vlan10 added 07:19:56 executing program 5: syz_open_dev$video4linux(&(0x7f0000000cc0), 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x15b}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc008561b, &(0x7f0000000080)={0x58da, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffe, 0x7, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1013, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x1f, 0x0, 0x3009, 0x4, 0x72, 0x559a, 0xf9ae}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x4ff99, 0x0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x3, 0x30, [0x6, 0x7fff, 0xffff, 0x1], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$video4linux(&(0x7f0000000cc0), 0x5, 0x0) (async) pipe(&(0x7f0000000040)) (async) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x15b}}, './file0\x00'}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc008561b, &(0x7f0000000080)={0x58da, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffe, 0x7, 0x1}) (async) pipe(&(0x7f0000000040)) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1, 0x1013, 0x1}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x1f, 0x0, 0x3009, 0x4, 0x72, 0x559a, 0xf9ae}) (async) pipe(&(0x7f0000000040)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x24008800, 0x0, 0x0) (async) splice(r4, 0x0, r5, 0x0, 0x4ff99, 0x0) (async) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x3, 0x30, [0x6, 0x7fff, 0xffff, 0x1], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 07:19:57 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1752.190095][ T3118] team0: Port device vlan10 removed 07:19:58 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) syz_usb_disconnect(r0) syncfs(r4) 07:19:58 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000c96b64eb0f2000e2367024000b000000f8ff0000000000000000c640de32a4c049a2ff8570ffff000000000000ab62f7bdbe3c19d787c080cab0cbae992a23da0c96c4993d9d0965aee0e650f08724954d00fd3b090c6653211794581f0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:19:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) recvmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)=""/54, 0x36}], 0x2}, 0x1) sendmmsg(r1, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004a00)="8e8dea72b9b819", 0x7}], 0x1}}], 0x1, 0x0) 07:19:58 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:19:58 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x0, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1753.252560][T31906] usb 4-1: USB disconnect, device number 3 [ 1753.375121][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1753.427885][ T3135] device team21 entered promiscuous mode [ 1753.434984][ T3135] 8021q: adding VLAN 0 to HW filter on device team21 [ 1753.691526][ T3135] team0: Port device vlan10 added [ 1753.924228][T31906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1754.026354][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 1754.033113][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 1754.340632][T31906] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.351370][T31906] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1754.360834][T31906] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.562797][T31906] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1754.572310][T31906] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1754.580976][T31906] usb 4-1: Product: syz [ 1754.586938][T31906] usb 4-1: Manufacturer: syz [ 1754.591746][T31906] usb 4-1: SerialNumber: syz [ 1754.671131][T31906] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1754.677512][T31906] cdc_wdm 4-1:21.0: Unknown control protocol [ 1755.102282][ C1] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1755.104798][T31906] usb 4-1: USB disconnect, device number 4 [ 1755.109249][ C1] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1755.121840][ C1] cdc_wdm 4-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 07:20:00 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="79a30dbd9ee75e8724b2388288a8", 0xe}, {&(0x7f00000001c0)="deb57809", 0x4}], 0x2}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 07:20:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000c96b64eb0f2000e2367024000b000000f8ff0000000000000000c640de32a4c049a2ff8570ffff000000000000ab62f7bdbe3c19d787c080cab0cbae992a23da0c96c4993d9d0965aee0e650f08724954d00fd3b090c6653211794581f0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) socket(0x11, 0x800000003, 0x0) (async) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000c96b64eb0f2000e2367024000b000000f8ff0000000000000000c640de32a4c049a2ff8570ffff000000000000ab62f7bdbe3c19d787c080cab0cbae992a23da0c96c4993d9d0965aee0e650f08724954d00fd3b090c6653211794581f0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) (async) 07:20:00 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x0, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:00 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) recvmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)=""/54, 0x36}], 0x2}, 0x1) sendmmsg(r1, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004a00)="8e8dea72b9b819", 0x7}], 0x1}}], 0x1, 0x0) [ 1755.372706][ T3160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1755.426190][ T3160] device team22 entered promiscuous mode [ 1755.433024][ T3160] 8021q: adding VLAN 0 to HW filter on device team22 [ 1755.524242][ T3163] team0: Port device vlan11 added 07:20:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000c96b64eb0f2000e2367024000b000000f8ff0000000000000000c640de32a4c049a2ff8570ffff000000000000ab62f7bdbe3c19d787c080cab0cbae992a23da0c96c4993d9d0965aee0e650f08724954d00fd3b090c6653211794581f0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) socket(0x11, 0x800000003, 0x0) (async) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000c96b64eb0f2000e2367024000b000000f8ff0000000000000000c640de32a4c049a2ff8570ffff000000000000ab62f7bdbe3c19d787c080cab0cbae992a23da0c96c4993d9d0965aee0e650f08724954d00fd3b090c6653211794581f0000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) (async) 07:20:00 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="79a30dbd9ee75e8724b2388288a8", 0xe}, {&(0x7f00000001c0)="deb57809", 0x4}], 0x2}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) [ 1755.887193][ T3166] team0: Port device vlan11 removed 07:20:01 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(r3) 07:20:01 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="79a30dbd9ee75e8724b2388288a8", 0xe}, {&(0x7f00000001c0)="deb57809", 0x4}], 0x2}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) 07:20:01 executing program 5: r0 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_usb_connect$uac1(0x4, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x81, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x1, "8ab511c5"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x2, 0x6, [0x8, 0x5, 0x4, 0x3, 0x5, 0x1], 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x81, "0bbd44"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x2, 0x8, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0xd5, {0x7, 0x25, 0x1, 0x100, 0xff, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xba, 0x4, 0x1, 0x16, "1e0e521cf46b2551"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0x1f}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1f, 0x7e, "326e5d8e9ad500"}]}, {{0x9, 0x5, 0x82, 0x9, 0x27f6a8512dacc69c, 0x1, 0x7f, 0x9, {0x7, 0x25, 0x1, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x80, 0x1f, 0x8}, 0xc3, &(0x7f00000002c0)={0x5, 0xf, 0xc3, 0x3, [@ptm_cap={0x3}, @generic={0xb8, 0x10, 0xb, "a5b68c9794e4e097683c7fa0b597395ca4b054dcd982e870e041d89d6a8c2f2b56bd7a8883701ffb4bb7d9abc510aa9a47b6cc0493d7da1192c8ed535856bc4712a9d76b8fea1b23f35512f88c6a85b96eb264bf97555452060feef3e8883200bf0e26f479bfcfcc0ec3cc03b5808fbb99c98c4acd38174febe30765af0d9b56f4e8b5488ec7e0863769342a6d40585c82c1c391d243260927fa1103fbeb49e297678b3448876a610da5b88a707f2bd5fc2029c654"}, @ptm_cap={0x3}]}, 0x5, [{0x96, &(0x7f00000001c0)=@string={0x96, 0x3, "a5316521c4d5b34408176bf497b0015a3ee7fed815cde6e0df36f1b176892719ef02ad02a1955d19b793ca3a3fae82e5f7585b9bffafa532f5301d2ceeae88799020dc6af1639c801dba479a75ebb14280090b300dd01c9fe4c86b8b55a12ab2c23a976391aa8d8c003b4bb702b0fe4b8c9bb5456d005be9cbb856573da27adae7320fd61f393b441fdad9fc676ae0f9109c183c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x21, &(0x7f0000000440)=@string={0x21, 0x3, "c49da38e6b5d7fdd4e7de45b8957033c70860a79419b6142a68c9539c304bf"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "4216f77248144aa7e22620b1f5fda24c6ac9bb7a89365338e0730dd88200d3f2a88d366b9137d2409ab18b3a5470c6ca266ec79530f2084dd1718356150f25d6cd84840636523648b75ff74d5a8ce92655238aade615d516634a88731955a8d83b1f17db9a0aa2fd056411bde2ebc7219e9e8b1a21a251a4ae340029a090dc1cf2"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, &(0x7f0000000640)={0x40, 0x2, 0x63, {0x63, 0x2, "486ef6498eda94be2f9ab3e727a6e419ee4bbef3f0d02b4d1cf67b403907135cd600331cb25cb6d166553cca2fa0a6fdb635d0ff16e9c517ac90857add6b36cd454a864268d48f19f1090511019dff39e268c39fd50ddb54e4df6edf484cc54af8"}}, &(0x7f00000006c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "8afde28871a025c62922e38cf96397ba44e63d94a4f4bf0c0251013fefdf9c70a4059bd4f219599cf8c5fa4e42434232b51d0310e44f49ff83a4a2e5f5da1939aa7f462003941ca6f8f0adf4554977fb6a2608ec28c65adc152e5fd626c1baa270935fc2be20f8aeb1487a87e59e6ea08e9fb2e0c697ed3fc26ea2f0b427fa8c9c512dcbcfdee130b2ef08adf6c48f9b8d0ebf86c63b38cda78ff1e1b0787a01a60572727924cba45fb6fab35f5ae50ef84e06ca0f9e996a27ed241e588e108fb4f4b8a84c1d6becca4ef43a92dda93e5cf2"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x40, 0x5, 0x17, "ffb47e6d04cd27f5b75269dc1b6abf7dadf46af2ed706f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x72}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000900)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000940)={0x20, 0x82, 0x3, "12b410"}, &(0x7f0000000980)={0x20, 0x83, 0x3, "74dc96"}, &(0x7f00000009c0)={0x20, 0x84, 0x2, '\'Z'}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "1f0099"}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000140)=@string={0x6, 0x3, "8a2e8d0e"}}]}) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc, &(0x7f0000000100)=@string={0xc, 0x3, "09faa5fd0b52321a9f0c"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000000c0)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000600)=@conn_svc_rsp={0x0, 0x0, 0xa, "eb2ee6ec", {0x3, 0x1, 0x0, 0x2, 0x401, 0x8, 0x40}}) 07:20:01 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) recvmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)=""/54, 0x36}], 0x2}, 0x1) (async) sendmmsg(r1, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004a00)="8e8dea72b9b819", 0x7}], 0x1}}], 0x1, 0x0) 07:20:01 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x0, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1756.619808][ T3179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:20:01 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) syz_usb_disconnect(r0) syncfs(r4) [ 1756.786213][ T3179] device team22 entered promiscuous mode [ 1756.793370][ T3179] 8021q: adding VLAN 0 to HW filter on device team22 [ 1756.890670][ T3189] team0: Port device vlan11 added [ 1756.922909][ T5091] usb 4-1: new high-speed USB device number 5 using dummy_hcd 07:20:02 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1757.224826][ T3179] team0: Port device vlan11 removed 07:20:02 executing program 5: r0 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_usb_connect$uac1(0x4, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x81, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x1, "8ab511c5"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x2, 0x6, [0x8, 0x5, 0x4, 0x3, 0x5, 0x1], 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x81, "0bbd44"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x2, 0x8, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0xd5, {0x7, 0x25, 0x1, 0x100, 0xff, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xba, 0x4, 0x1, 0x16, "1e0e521cf46b2551"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0x1f}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1f, 0x7e, "326e5d8e9ad500"}]}, {{0x9, 0x5, 0x82, 0x9, 0x27f6a8512dacc69c, 0x1, 0x7f, 0x9, {0x7, 0x25, 0x1, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x80, 0x1f, 0x8}, 0xc3, &(0x7f00000002c0)={0x5, 0xf, 0xc3, 0x3, [@ptm_cap={0x3}, @generic={0xb8, 0x10, 0xb, "a5b68c9794e4e097683c7fa0b597395ca4b054dcd982e870e041d89d6a8c2f2b56bd7a8883701ffb4bb7d9abc510aa9a47b6cc0493d7da1192c8ed535856bc4712a9d76b8fea1b23f35512f88c6a85b96eb264bf97555452060feef3e8883200bf0e26f479bfcfcc0ec3cc03b5808fbb99c98c4acd38174febe30765af0d9b56f4e8b5488ec7e0863769342a6d40585c82c1c391d243260927fa1103fbeb49e297678b3448876a610da5b88a707f2bd5fc2029c654"}, @ptm_cap={0x3}]}, 0x5, [{0x96, &(0x7f00000001c0)=@string={0x96, 0x3, "a5316521c4d5b34408176bf497b0015a3ee7fed815cde6e0df36f1b176892719ef02ad02a1955d19b793ca3a3fae82e5f7585b9bffafa532f5301d2ceeae88799020dc6af1639c801dba479a75ebb14280090b300dd01c9fe4c86b8b55a12ab2c23a976391aa8d8c003b4bb702b0fe4b8c9bb5456d005be9cbb856573da27adae7320fd61f393b441fdad9fc676ae0f9109c183c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x21, &(0x7f0000000440)=@string={0x21, 0x3, "c49da38e6b5d7fdd4e7de45b8957033c70860a79419b6142a68c9539c304bf"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "4216f77248144aa7e22620b1f5fda24c6ac9bb7a89365338e0730dd88200d3f2a88d366b9137d2409ab18b3a5470c6ca266ec79530f2084dd1718356150f25d6cd84840636523648b75ff74d5a8ce92655238aade615d516634a88731955a8d83b1f17db9a0aa2fd056411bde2ebc7219e9e8b1a21a251a4ae340029a090dc1cf2"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, &(0x7f0000000640)={0x40, 0x2, 0x63, {0x63, 0x2, "486ef6498eda94be2f9ab3e727a6e419ee4bbef3f0d02b4d1cf67b403907135cd600331cb25cb6d166553cca2fa0a6fdb635d0ff16e9c517ac90857add6b36cd454a864268d48f19f1090511019dff39e268c39fd50ddb54e4df6edf484cc54af8"}}, &(0x7f00000006c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "8afde28871a025c62922e38cf96397ba44e63d94a4f4bf0c0251013fefdf9c70a4059bd4f219599cf8c5fa4e42434232b51d0310e44f49ff83a4a2e5f5da1939aa7f462003941ca6f8f0adf4554977fb6a2608ec28c65adc152e5fd626c1baa270935fc2be20f8aeb1487a87e59e6ea08e9fb2e0c697ed3fc26ea2f0b427fa8c9c512dcbcfdee130b2ef08adf6c48f9b8d0ebf86c63b38cda78ff1e1b0787a01a60572727924cba45fb6fab35f5ae50ef84e06ca0f9e996a27ed241e588e108fb4f4b8a84c1d6becca4ef43a92dda93e5cf2"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x40, 0x5, 0x17, "ffb47e6d04cd27f5b75269dc1b6abf7dadf46af2ed706f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x72}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000900)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000940)={0x20, 0x82, 0x3, "12b410"}, &(0x7f0000000980)={0x20, 0x83, 0x3, "74dc96"}, &(0x7f00000009c0)={0x20, 0x84, 0x2, '\'Z'}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "1f0099"}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000140)=@string={0x6, 0x3, "8a2e8d0e"}}]}) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc, &(0x7f0000000100)=@string={0xc, 0x3, "09faa5fd0b52321a9f0c"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000000c0)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000600)=@conn_svc_rsp={0x0, 0x0, 0xa, "eb2ee6ec", {0x3, 0x1, 0x0, 0x2, 0x401, 0x8, 0x40}}) syz_usb_connect(0x6, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$uac1(0x4, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x81, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x1, "8ab511c5"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x2, 0x6, [0x8, 0x5, 0x4, 0x3, 0x5, 0x1], 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x81, "0bbd44"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x2, 0x8, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0xd5, {0x7, 0x25, 0x1, 0x100, 0xff, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xba, 0x4, 0x1, 0x16, "1e0e521cf46b2551"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0x1f}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1f, 0x7e, "326e5d8e9ad500"}]}, {{0x9, 0x5, 0x82, 0x9, 0x27f6a8512dacc69c, 0x1, 0x7f, 0x9, {0x7, 0x25, 0x1, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x80, 0x1f, 0x8}, 0xc3, &(0x7f00000002c0)={0x5, 0xf, 0xc3, 0x3, [@ptm_cap={0x3}, @generic={0xb8, 0x10, 0xb, "a5b68c9794e4e097683c7fa0b597395ca4b054dcd982e870e041d89d6a8c2f2b56bd7a8883701ffb4bb7d9abc510aa9a47b6cc0493d7da1192c8ed535856bc4712a9d76b8fea1b23f35512f88c6a85b96eb264bf97555452060feef3e8883200bf0e26f479bfcfcc0ec3cc03b5808fbb99c98c4acd38174febe30765af0d9b56f4e8b5488ec7e0863769342a6d40585c82c1c391d243260927fa1103fbeb49e297678b3448876a610da5b88a707f2bd5fc2029c654"}, @ptm_cap={0x3}]}, 0x5, [{0x96, &(0x7f00000001c0)=@string={0x96, 0x3, "a5316521c4d5b34408176bf497b0015a3ee7fed815cde6e0df36f1b176892719ef02ad02a1955d19b793ca3a3fae82e5f7585b9bffafa532f5301d2ceeae88799020dc6af1639c801dba479a75ebb14280090b300dd01c9fe4c86b8b55a12ab2c23a976391aa8d8c003b4bb702b0fe4b8c9bb5456d005be9cbb856573da27adae7320fd61f393b441fdad9fc676ae0f9109c183c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x21, &(0x7f0000000440)=@string={0x21, 0x3, "c49da38e6b5d7fdd4e7de45b8957033c70860a79419b6142a68c9539c304bf"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "4216f77248144aa7e22620b1f5fda24c6ac9bb7a89365338e0730dd88200d3f2a88d366b9137d2409ab18b3a5470c6ca266ec79530f2084dd1718356150f25d6cd84840636523648b75ff74d5a8ce92655238aade615d516634a88731955a8d83b1f17db9a0aa2fd056411bde2ebc7219e9e8b1a21a251a4ae340029a090dc1cf2"}}]}) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, &(0x7f0000000640)={0x40, 0x2, 0x63, {0x63, 0x2, "486ef6498eda94be2f9ab3e727a6e419ee4bbef3f0d02b4d1cf67b403907135cd600331cb25cb6d166553cca2fa0a6fdb635d0ff16e9c517ac90857add6b36cd454a864268d48f19f1090511019dff39e268c39fd50ddb54e4df6edf484cc54af8"}}, &(0x7f00000006c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "8afde28871a025c62922e38cf96397ba44e63d94a4f4bf0c0251013fefdf9c70a4059bd4f219599cf8c5fa4e42434232b51d0310e44f49ff83a4a2e5f5da1939aa7f462003941ca6f8f0adf4554977fb6a2608ec28c65adc152e5fd626c1baa270935fc2be20f8aeb1487a87e59e6ea08e9fb2e0c697ed3fc26ea2f0b427fa8c9c512dcbcfdee130b2ef08adf6c48f9b8d0ebf86c63b38cda78ff1e1b0787a01a60572727924cba45fb6fab35f5ae50ef84e06ca0f9e996a27ed241e588e108fb4f4b8a84c1d6becca4ef43a92dda93e5cf2"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x40, 0x5, 0x17, "ffb47e6d04cd27f5b75269dc1b6abf7dadf46af2ed706f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x72}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000900)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000940)={0x20, 0x82, 0x3, "12b410"}, &(0x7f0000000980)={0x20, 0x83, 0x3, "74dc96"}, &(0x7f00000009c0)={0x20, 0x84, 0x2, '\'Z'}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "1f0099"}}) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000140)=@string={0x6, 0x3, "8a2e8d0e"}}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc, &(0x7f0000000100)=@string={0xc, 0x3, "09faa5fd0b52321a9f0c"}}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000000c0)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000600)=@conn_svc_rsp={0x0, 0x0, 0xa, "eb2ee6ec", {0x3, 0x1, 0x0, 0x2, 0x401, 0x8, 0x40}}) (async) [ 1757.263595][T26254] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1757.318814][ T5091] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.329529][ T5091] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1757.338911][ T5091] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:02 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24008800, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x4ff99, 0x0) syz_usb_disconnect(r0) syncfs(r4) 07:20:02 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1757.573443][ T5091] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1757.583880][ T5091] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1757.592843][ T5091] usb 4-1: Product: syz [ 1757.597218][ T5091] usb 4-1: Manufacturer: syz [ 1757.602262][ T5091] usb 4-1: SerialNumber: syz [ 1757.635011][T26254] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.645523][T26254] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1757.654873][T26254] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.702918][ T5091] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1757.709147][ T5091] cdc_wdm 4-1:21.0: Unknown control protocol [ 1757.860240][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1757.913131][ T3204] device team26 entered promiscuous mode [ 1757.919854][ T3204] 8021q: adding VLAN 0 to HW filter on device team26 [ 1757.953638][ T5147] usb 4-1: USB disconnect, device number 5 [ 1757.987126][T26254] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1757.996667][T26254] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1758.006810][T26254] usb 2-1: Product: syz [ 1758.011193][T26254] usb 2-1: Manufacturer: syz [ 1758.016163][T26254] usb 2-1: SerialNumber: syz [ 1758.178060][T31906] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1758.195661][T26254] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1758.201900][T26254] cdc_wdm 2-1:21.0: Unknown control protocol [ 1758.520841][T26254] usb 2-1: USB disconnect, device number 100 [ 1758.613308][T31906] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.623829][T31906] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1758.633155][T31906] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.813311][T31906] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1758.822865][T31906] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1758.831543][T31906] usb 1-1: Product: syz [ 1758.836049][T31906] usb 1-1: Manufacturer: syz [ 1758.840844][T31906] usb 1-1: SerialNumber: syz [ 1758.908023][T31906] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1758.914509][T31906] cdc_wdm 1-1:21.0: Unknown control protocol [ 1759.342291][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1759.349698][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1759.366564][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1759.373717][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1759.383246][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1759.390319][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1759.402229][ T5147] usb 1-1: USB disconnect, device number 82 07:20:04 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x0, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:04 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(r3) 07:20:04 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:04 executing program 5: r0 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_usb_connect$uac1(0x4, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x81, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x81}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x1, "8ab511c5"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x2, 0x6, [0x8, 0x5, 0x4, 0x3, 0x5, 0x1], 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x6, 0x81, "0bbd44"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x2, 0x8, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0xd5, {0x7, 0x25, 0x1, 0x100, 0xff, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xba, 0x4, 0x1, 0x16, "1e0e521cf46b2551"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0x1f}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1f, 0x7e, "326e5d8e9ad500"}]}, {{0x9, 0x5, 0x82, 0x9, 0x27f6a8512dacc69c, 0x1, 0x7f, 0x9, {0x7, 0x25, 0x1, 0x1, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x80, 0x1f, 0x8}, 0xc3, &(0x7f00000002c0)={0x5, 0xf, 0xc3, 0x3, [@ptm_cap={0x3}, @generic={0xb8, 0x10, 0xb, "a5b68c9794e4e097683c7fa0b597395ca4b054dcd982e870e041d89d6a8c2f2b56bd7a8883701ffb4bb7d9abc510aa9a47b6cc0493d7da1192c8ed535856bc4712a9d76b8fea1b23f35512f88c6a85b96eb264bf97555452060feef3e8883200bf0e26f479bfcfcc0ec3cc03b5808fbb99c98c4acd38174febe30765af0d9b56f4e8b5488ec7e0863769342a6d40585c82c1c391d243260927fa1103fbeb49e297678b3448876a610da5b88a707f2bd5fc2029c654"}, @ptm_cap={0x3}]}, 0x5, [{0x96, &(0x7f00000001c0)=@string={0x96, 0x3, "a5316521c4d5b34408176bf497b0015a3ee7fed815cde6e0df36f1b176892719ef02ad02a1955d19b793ca3a3fae82e5f7585b9bffafa532f5301d2ceeae88799020dc6af1639c801dba479a75ebb14280090b300dd01c9fe4c86b8b55a12ab2c23a976391aa8d8c003b4bb702b0fe4b8c9bb5456d005be9cbb856573da27adae7320fd61f393b441fdad9fc676ae0f9109c183c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x21, &(0x7f0000000440)=@string={0x21, 0x3, "c49da38e6b5d7fdd4e7de45b8957033c70860a79419b6142a68c9539c304bf"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "4216f77248144aa7e22620b1f5fda24c6ac9bb7a89365338e0730dd88200d3f2a88d366b9137d2409ab18b3a5470c6ca266ec79530f2084dd1718356150f25d6cd84840636523648b75ff74d5a8ce92655238aade615d516634a88731955a8d83b1f17db9a0aa2fd056411bde2ebc7219e9e8b1a21a251a4ae340029a090dc1cf2"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, &(0x7f0000000640)={0x40, 0x2, 0x63, {0x63, 0x2, "486ef6498eda94be2f9ab3e727a6e419ee4bbef3f0d02b4d1cf67b403907135cd600331cb25cb6d166553cca2fa0a6fdb635d0ff16e9c517ac90857add6b36cd454a864268d48f19f1090511019dff39e268c39fd50ddb54e4df6edf484cc54af8"}}, &(0x7f00000006c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "8afde28871a025c62922e38cf96397ba44e63d94a4f4bf0c0251013fefdf9c70a4059bd4f219599cf8c5fa4e42434232b51d0310e44f49ff83a4a2e5f5da1939aa7f462003941ca6f8f0adf4554977fb6a2608ec28c65adc152e5fd626c1baa270935fc2be20f8aeb1487a87e59e6ea08e9fb2e0c697ed3fc26ea2f0b427fa8c9c512dcbcfdee130b2ef08adf6c48f9b8d0ebf86c63b38cda78ff1e1b0787a01a60572727924cba45fb6fab35f5ae50ef84e06ca0f9e996a27ed241e588e108fb4f4b8a84c1d6becca4ef43a92dda93e5cf2"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x40, 0x5, 0x17, "ffb47e6d04cd27f5b75269dc1b6abf7dadf46af2ed706f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x72}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000900)={0x20, 0x81, 0x1, 'h'}, &(0x7f0000000940)={0x20, 0x82, 0x3, "12b410"}, &(0x7f0000000980)={0x20, 0x83, 0x3, "74dc96"}, &(0x7f00000009c0)={0x20, 0x84, 0x2, '\'Z'}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "1f0099"}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000140)=@string={0x6, 0x3, "8a2e8d0e"}}]}) (async) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc, &(0x7f0000000100)=@string={0xc, 0x3, "09faa5fd0b52321a9f0c"}}]}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000000c0)=ANY=[]) (rerun: 32) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000600)=@conn_svc_rsp={0x0, 0x0, 0xa, "eb2ee6ec", {0x3, 0x1, 0x0, 0x2, 0x401, 0x8, 0x40}}) [ 1759.737262][ T3214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1759.862742][ T3214] device team22 entered promiscuous mode [ 1759.869641][ T3214] 8021q: adding VLAN 0 to HW filter on device team22 [ 1759.883951][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1759.937985][ T3221] device team27 entered promiscuous mode [ 1759.944844][ T3221] 8021q: adding VLAN 0 to HW filter on device team27 07:20:05 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d21a220a90511058c220102030109021b0002000000000900ab164500090402000029e45000000000"], 0x0) [ 1759.985321][ T3224] team0: Port device vlan11 added 07:20:05 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0xf, {0xf, 0x0, "0192605d4416e3d06691ed591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r2) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x6, 0xdf, {0xdf, 0x21, "8d726a6596fbec729de0f37bb7a5448ae11db4eb4db4d22aa2cc750d72f23e80f21b06b11a5b9c8fe936c5b4e15dbbe119a11e3b066e141c84772b7250c51d520dd59ac759381cdf16bdeffb45b98c02819f633d3acf0c63fd3e3e0e6020b7b75e352ad73e98c56de2d44dc870a89723ccf3570b4f19d0afa26738792ac221b4326e268857805879662c6745425a5dfb8921d45f287d74894110366999ebd7cd715f8cf93b1b2208175e6f5a5cc9c036aed9cdb141c592fe2436a54b47ba4073a16a43b3124d6677d88b2e4b4c3d7f758909e658e002c89345feda4afa"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000180)={0x0, 0x22, 0x13, {[@global, @main=@item_4={0x3, 0x0, 0xa, "e46e1d59"}, @global=@item_4={0x3, 0x1, 0x4, "c6586896"}, @main=@item_012={0x2, 0x0, 0xb, 'PG'}, @main=@item_4={0x3, 0x0, 0xc, "5f78611d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x14c}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0xa3, "79e3ab5bb716b49159011be2e9b33942605a61d3d2221b38c1bb1d6577cfb52b71a95c448802c2acb947a83d1b8e33c37e9e557a1f6aa73920d2a036627081fc84d302d1752be1ef31a525423c636d8f154424ce98b189d4948bcef7fdc7ebff222d976a92039de67f2ff7d1ce413321e7bcf3884312e886be8fc627bcfc5463b97d9553f8838dd12fb120d91239c5053f90e72514699f4a763b6af05fcd899da9d3f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, &(0x7f0000000680)={0x40, 0x22, 0x46, {0x46, 0x3, "52afbc504100636c8ef166466f8a7814949a1090ff9dd44007751e79fa1d1238ae47728cef2c56c4083362734827c72043632a7c7c854b04ab1b9a4f81b1ba9724d6efe9"}}, &(0x7f0000000800)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "279afdb79c6c48d4d7bb42f63a42a7e351a2e69ba1fb0ed4910880456754255116f63470832f0863be64e197c9873df431f2ab9eb9dc85bb2e9cb68bc5ce6d2b78ff2bd6215f6e1df8cb6db4968c144a408e611b5f5eb630dea59dd82afe6d511622723f3b4fd7d21eb32c6117c10da1165e70ca52e4bc431cf2f61d47b903c22cfc0b721ce78e164cd4c672c301416040bd22aa683d5562e6c4fd9bccfc44422b1050f1871c4dab9367f2ed172d4bde7b55b8ec0166438258b74f3478f123841ad522c8bf2d91"}}, &(0x7f0000000700)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "59f8ff3d"}, @local=@item_012={0x1, 0x2, 0x9, 'K'}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xe39}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x40, 0xb, 0xa4, "600311061aa19d87d92f2e2b5c8dffc9dcd10b08ee7cd00267cc5028f84881a48eaf73c8702d6ed7953ad5b3e9ef0d04376a705bbb3547265f77910e6acb4edadde23fb23fac5b803413bb8c3f1e0c1deb1d0ce3e17eb7d67097456a92fc68671e906944c5c2d3762204ffc3c7029f822e41474a3c856fc3b18f2ba9f2484dc5ea84e2273e868843d3575a83f13ea1fbd0a312f28425362918700f53c75bb4e24bc9aad7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0x11, "1f5db88c70a9abd63a8561dee0d6c0d1d1"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x7}}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x1, 'r'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b40)={0x274, 0xffffffffffffffaa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_usb_disconnect(r3) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x4802, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) [ 1760.115184][ T5084] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1760.283627][ T3226] team0: Port device vlan11 removed 07:20:05 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1760.503604][ T5084] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.514643][ T5084] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1760.525571][ T5084] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.537785][T26254] usb 6-1: new high-speed USB device number 12 using dummy_hcd 07:20:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x0, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1760.622805][ T5102] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1760.693909][ T3232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1760.720952][ T5084] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1760.731712][ T5084] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1760.740926][ T5084] usb 4-1: Product: syz [ 1760.745365][ T5084] usb 4-1: Manufacturer: syz [ 1760.750157][ T5084] usb 4-1: SerialNumber: syz [ 1760.752964][ T3232] device team28 entered promiscuous mode [ 1760.761524][ T3232] 8021q: adding VLAN 0 to HW filter on device team28 [ 1760.812530][T26254] usb 6-1: Using ep0 maxpacket: 32 [ 1760.833113][ T5102] usb 2-1: device descriptor read/64, error 18 [ 1760.897359][ T3236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1760.935811][T26254] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.946438][T26254] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1760.956351][ T3236] device team22 entered promiscuous mode [ 1760.963246][ T3236] 8021q: adding VLAN 0 to HW filter on device team22 [ 1760.977031][ T5084] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1760.983506][ T5084] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@ipv6_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x34}}, 0x0) [ 1761.053940][ T3237] team0: Port device vlan11 added 07:20:06 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1761.114728][ T5102] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1761.216704][T26254] usb 6-1: New USB device found, idVendor=05a9, idProduct=0511, bcdDevice=22.8c [ 1761.226242][T26254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.234734][T26254] usb 6-1: Product: syz [ 1761.239102][T26254] usb 6-1: Manufacturer: syz [ 1761.245680][T26254] usb 6-1: SerialNumber: syz [ 1761.325048][ T5102] usb 2-1: device descriptor read/64, error 18 [ 1761.383587][ T5147] usb 4-1: USB disconnect, device number 6 [ 1761.402654][ T3223] cdc_wdm 4-1:21.0: Tx URB error: -19 [ 1761.409645][ T3239] cdc_wdm 4-1:21.0: Tx URB error: -19 [ 1761.423824][T26254] usb 6-1: config 0 descriptor?? [ 1761.441303][ T3238] team0: Port device vlan11 removed [ 1761.463942][ T5102] usb usb2-port1: attempt power cycle [ 1761.676908][ T3245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1761.728988][ T3245] device team29 entered promiscuous mode [ 1761.735836][ T3245] 8021q: adding VLAN 0 to HW filter on device team29 [ 1761.753939][ T3246] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1761.784498][T26254] usb 6-1: USB disconnect, device number 12 07:20:06 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x0, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@ipv6_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x34}}, 0x0) [ 1761.893565][ T5102] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1761.999405][ T3249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:20:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1762.066736][ T3249] device team22 entered promiscuous mode [ 1762.073564][ T3249] 8021q: adding VLAN 0 to HW filter on device team22 [ 1762.103683][ T5102] usb 2-1: device descriptor read/8, error -61 [ 1762.185550][ T3250] team0: Port device vlan11 added [ 1762.198533][ T3254] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:20:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x11}}) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@ipv6_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x34}}, 0x0) [ 1762.392542][ T5102] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1762.445543][ T3249] team0: Port device vlan11 removed [ 1762.600515][ T3256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1762.652341][ T3256] device team30 entered promiscuous mode [ 1762.659091][ T3256] 8021q: adding VLAN 0 to HW filter on device team30 [ 1762.676536][ T5102] usb 2-1: device descriptor read/8, error -61 [ 1762.695079][ T3261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1762.803742][ T5102] usb usb2-port1: unable to enumerate USB device 07:20:07 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:07 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(r3) 07:20:07 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d21a220a90511058c220102030109021b0002000000000900ab164500090402000029e45000000000"], 0x0) [ 1763.025308][ T3265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1763.142587][ T3265] device team22 entered promiscuous mode [ 1763.149296][ T3265] 8021q: adding VLAN 0 to HW filter on device team22 [ 1763.218485][ T3265] team0: Port device vlan11 added [ 1763.262490][ T5102] usb 6-1: new high-speed USB device number 13 using dummy_hcd 07:20:08 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket$qrtr(0x2a, 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/133, 0x85, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0x3ffff}}}) 07:20:08 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0xf, {0xf, 0x0, "0192605d4416e3d06691ed591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r2) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x6, 0xdf, {0xdf, 0x21, "8d726a6596fbec729de0f37bb7a5448ae11db4eb4db4d22aa2cc750d72f23e80f21b06b11a5b9c8fe936c5b4e15dbbe119a11e3b066e141c84772b7250c51d520dd59ac759381cdf16bdeffb45b98c02819f633d3acf0c63fd3e3e0e6020b7b75e352ad73e98c56de2d44dc870a89723ccf3570b4f19d0afa26738792ac221b4326e268857805879662c6745425a5dfb8921d45f287d74894110366999ebd7cd715f8cf93b1b2208175e6f5a5cc9c036aed9cdb141c592fe2436a54b47ba4073a16a43b3124d6677d88b2e4b4c3d7f758909e658e002c89345feda4afa"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000180)={0x0, 0x22, 0x13, {[@global, @main=@item_4={0x3, 0x0, 0xa, "e46e1d59"}, @global=@item_4={0x3, 0x1, 0x4, "c6586896"}, @main=@item_012={0x2, 0x0, 0xb, 'PG'}, @main=@item_4={0x3, 0x0, 0xc, "5f78611d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x14c}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0xa3, "79e3ab5bb716b49159011be2e9b33942605a61d3d2221b38c1bb1d6577cfb52b71a95c448802c2acb947a83d1b8e33c37e9e557a1f6aa73920d2a036627081fc84d302d1752be1ef31a525423c636d8f154424ce98b189d4948bcef7fdc7ebff222d976a92039de67f2ff7d1ce413321e7bcf3884312e886be8fc627bcfc5463b97d9553f8838dd12fb120d91239c5053f90e72514699f4a763b6af05fcd899da9d3f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xfd, "868f567b1a12943fef16da283b566fc9daa22bee30036f7f82d3322fc74dbfa872354dd61350722f19c71662af92b252d2163efd8fc8df53815a23aeb2b2a6108954ae4282895733e5ac2b77e3a0839123207df3b2bc2b03e59affd9f7de79a64829b39584d5b9c026739457f64ca715a5fdc4e7aece2e0fa4f7c1d03123c3b8e017ecf8716d2905f8fca8d4e1b9a4c38f3cef1e6493226653b57d57964b2c3bee55419fdf2ceadece3ee40cf2527ef4dafcafc812a2ebefaeb525202af96c2f30ffe57133479f9f68f20d2679f20c0d58f2b54fbe38ba8849712fc28942d515ac71e9ba3874f47a370ec3e6d99fb964999eabaf81dfd456c72d3ee92a"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, &(0x7f0000000680)={0x40, 0x22, 0x46, {0x46, 0x3, "52afbc504100636c8ef166466f8a7814949a1090ff9dd44007751e79fa1d1238ae47728cef2c56c4083362734827c72043632a7c7c854b04ab1b9a4f81b1ba9724d6efe9"}}, &(0x7f0000000800)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "279afdb79c6c48d4d7bb42f63a42a7e351a2e69ba1fb0ed4910880456754255116f63470832f0863be64e197c9873df431f2ab9eb9dc85bb2e9cb68bc5ce6d2b78ff2bd6215f6e1df8cb6db4968c144a408e611b5f5eb630dea59dd82afe6d511622723f3b4fd7d21eb32c6117c10da1165e70ca52e4bc431cf2f61d47b903c22cfc0b721ce78e164cd4c672c301416040bd22aa683d5562e6c4fd9bccfc44422b1050f1871c4dab9367f2ed172d4bde7b55b8ec0166438258b74f3478f123841ad522c8bf2d91"}}, &(0x7f0000000700)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "59f8ff3d"}, @local=@item_012={0x1, 0x2, 0x9, 'K'}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xe39}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x40, 0xb, 0xa4, "600311061aa19d87d92f2e2b5c8dffc9dcd10b08ee7cd00267cc5028f84881a48eaf73c8702d6ed7953ad5b3e9ef0d04376a705bbb3547265f77910e6acb4edadde23fb23fac5b803413bb8c3f1e0c1deb1d0ce3e17eb7d67097456a92fc68671e906944c5c2d3762204ffc3c7029f822e41474a3c856fc3b18f2ba9f2484dc5ea84e2273e868843d3575a83f13ea1fbd0a312f28425362918700f53c75bb4e24bc9aad7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0x11, "1f5db88c70a9abd63a8561dee0d6c0d1d1"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x7}}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x1, 'r'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b40)={0x274, 0xffffffffffffffaa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_usb_disconnect(r3) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x4802, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0xf, {0xf, 0x0, "0192605d4416e3d06691ed591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_disconnect(r2) (async) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x6, 0xdf, {0xdf, 0x21, "8d726a6596fbec729de0f37bb7a5448ae11db4eb4db4d22aa2cc750d72f23e80f21b06b11a5b9c8fe936c5b4e15dbbe119a11e3b066e141c84772b7250c51d520dd59ac759381cdf16bdeffb45b98c02819f633d3acf0c63fd3e3e0e6020b7b75e352ad73e98c56de2d44dc870a89723ccf3570b4f19d0afa26738792ac221b4326e268857805879662c6745425a5dfb8921d45f287d74894110366999ebd7cd715f8cf93b1b2208175e6f5a5cc9c036aed9cdb141c592fe2436a54b47ba4073a16a43b3124d6677d88b2e4b4c3d7f758909e658e002c89345feda4afa"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000180)={0x0, 0x22, 0x13, {[@global, @main=@item_4={0x3, 0x0, 0xa, "e46e1d59"}, @global=@item_4={0x3, 0x1, 0x4, "c6586896"}, @main=@item_012={0x2, 0x0, 0xb, 'PG'}, @main=@item_4={0x3, 0x0, 0xc, "5f78611d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x14c}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0xa3, "79e3ab5bb716b49159011be2e9b33942605a61d3d2221b38c1bb1d6577cfb52b71a95c448802c2acb947a83d1b8e33c37e9e557a1f6aa73920d2a036627081fc84d302d1752be1ef31a525423c636d8f154424ce98b189d4948bcef7fdc7ebff222d976a92039de67f2ff7d1ce413321e7bcf3884312e886be8fc627bcfc5463b97d9553f8838dd12fb120d91239c5053f90e72514699f4a763b6af05fcd899da9d3f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, &(0x7f0000000680)={0x40, 0x22, 0x46, {0x46, 0x3, "52afbc504100636c8ef166466f8a7814949a1090ff9dd44007751e79fa1d1238ae47728cef2c56c4083362734827c72043632a7c7c854b04ab1b9a4f81b1ba9724d6efe9"}}, &(0x7f0000000800)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "279afdb79c6c48d4d7bb42f63a42a7e351a2e69ba1fb0ed4910880456754255116f63470832f0863be64e197c9873df431f2ab9eb9dc85bb2e9cb68bc5ce6d2b78ff2bd6215f6e1df8cb6db4968c144a408e611b5f5eb630dea59dd82afe6d511622723f3b4fd7d21eb32c6117c10da1165e70ca52e4bc431cf2f61d47b903c22cfc0b721ce78e164cd4c672c301416040bd22aa683d5562e6c4fd9bccfc44422b1050f1871c4dab9367f2ed172d4bde7b55b8ec0166438258b74f3478f123841ad522c8bf2d91"}}, &(0x7f0000000700)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "59f8ff3d"}, @local=@item_012={0x1, 0x2, 0x9, 'K'}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xe39}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x40, 0xb, 0xa4, "600311061aa19d87d92f2e2b5c8dffc9dcd10b08ee7cd00267cc5028f84881a48eaf73c8702d6ed7953ad5b3e9ef0d04376a705bbb3547265f77910e6acb4edadde23fb23fac5b803413bb8c3f1e0c1deb1d0ce3e17eb7d67097456a92fc68671e906944c5c2d3762204ffc3c7029f822e41474a3c856fc3b18f2ba9f2484dc5ea84e2273e868843d3575a83f13ea1fbd0a312f28425362918700f53c75bb4e24bc9aad7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0x11, "1f5db88c70a9abd63a8561dee0d6c0d1d1"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x7}}) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x1, 'r'}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b40)={0x274, 0xffffffffffffffaa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) syz_usb_disconnect(r3) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x4802, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) (async) 07:20:08 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1763.445763][ T3265] team0: Port device vlan11 removed [ 1763.453443][T26254] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1763.532385][ T5102] usb 6-1: Using ep0 maxpacket: 32 [ 1763.657778][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1763.674296][ T5102] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.684821][ T5102] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1763.716978][ T3272] device team31 entered promiscuous mode [ 1763.723895][ T3272] 8021q: adding VLAN 0 to HW filter on device team31 07:20:08 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = socket$qrtr(0x2a, 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/133, 0x85, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0x3ffff}}}) socket(0x2, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) pread64(r1, &(0x7f0000000140)=""/133, 0x85, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0x3ffff}}}) (async) 07:20:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1763.814248][ T5084] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1763.870943][T26254] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.882117][T26254] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1763.891461][T26254] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.945093][ T5102] usb 6-1: New USB device found, idVendor=05a9, idProduct=0511, bcdDevice=22.8c [ 1763.954559][ T5102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.963230][ T5102] usb 6-1: Product: syz [ 1763.967637][ T5102] usb 6-1: Manufacturer: syz [ 1763.972617][ T5102] usb 6-1: SerialNumber: syz [ 1764.048055][ T5102] usb 6-1: config 0 descriptor?? [ 1764.059921][ T5084] usb 2-1: device descriptor read/64, error 18 [ 1764.103723][ T3281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1764.157360][ T3281] device team22 entered promiscuous mode [ 1764.164257][ T3281] 8021q: adding VLAN 0 to HW filter on device team22 [ 1764.183002][T26254] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1764.192733][T26254] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1764.201492][T26254] usb 4-1: Product: syz 07:20:09 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1764.205996][T26254] usb 4-1: Manufacturer: syz [ 1764.210811][T26254] usb 4-1: SerialNumber: syz [ 1764.227528][ T3284] team0: Port device vlan11 added 07:20:09 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/133, 0x85, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0x3ffff}}}) [ 1764.324615][T26254] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1764.330879][T26254] cdc_wdm 4-1:21.0: Unknown control protocol [ 1764.372672][ T5084] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1764.453499][ T5102] usb 6-1: USB disconnect, device number 13 [ 1764.572763][ T5084] usb 2-1: device descriptor read/64, error 18 [ 1764.616056][ T5147] usb 4-1: USB disconnect, device number 7 [ 1764.641678][ T3281] team0: Port device vlan11 removed [ 1764.692894][ T5084] usb usb2-port1: attempt power cycle 07:20:09 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d21a220a90511058c220102030109021b0002000000000900ab164500090402000029e45000000000"], 0x0) [ 1764.869550][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:10 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:10 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1765.142429][ T5084] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1765.343532][ T5084] usb 2-1: device descriptor read/8, error -61 [ 1765.383433][ T3298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1765.441825][ T3298] device team22 entered promiscuous mode [ 1765.448691][ T3298] 8021q: adding VLAN 0 to HW filter on device team22 [ 1765.493045][ T5091] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1765.622978][ T5084] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1765.689720][ T3301] team0: Port device vlan11 added [ 1765.742348][ T5091] usb 6-1: Using ep0 maxpacket: 32 [ 1765.802599][ T5084] usb 2-1: device descriptor read/8, error -61 [ 1765.873542][ T5091] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.884430][ T5091] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1765.907978][ T3298] team0: Port device vlan11 removed [ 1765.941823][ T5084] usb usb2-port1: unable to enumerate USB device 07:20:11 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(r3) 07:20:11 executing program 0: r0 = syz_clone(0x4500c400, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x1, 0x2}, &(0x7f0000000140)=[{}, {}]) [ 1766.093604][ T5091] usb 6-1: New USB device found, idVendor=05a9, idProduct=0511, bcdDevice=22.8c [ 1766.104662][ T5091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.113114][ T5091] usb 6-1: Product: syz [ 1766.117490][ T5091] usb 6-1: Manufacturer: syz [ 1766.122414][ T5091] usb 6-1: SerialNumber: syz [ 1766.208357][ T5091] usb 6-1: config 0 descriptor?? 07:20:11 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:11 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0xf, {0xf, 0x0, "0192605d4416e3d06691ed591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r2) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x6, 0xdf, {0xdf, 0x21, "8d726a6596fbec729de0f37bb7a5448ae11db4eb4db4d22aa2cc750d72f23e80f21b06b11a5b9c8fe936c5b4e15dbbe119a11e3b066e141c84772b7250c51d520dd59ac759381cdf16bdeffb45b98c02819f633d3acf0c63fd3e3e0e6020b7b75e352ad73e98c56de2d44dc870a89723ccf3570b4f19d0afa26738792ac221b4326e268857805879662c6745425a5dfb8921d45f287d74894110366999ebd7cd715f8cf93b1b2208175e6f5a5cc9c036aed9cdb141c592fe2436a54b47ba4073a16a43b3124d6677d88b2e4b4c3d7f758909e658e002c89345feda4afa"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000180)={0x0, 0x22, 0x13, {[@global, @main=@item_4={0x3, 0x0, 0xa, "e46e1d59"}, @global=@item_4={0x3, 0x1, 0x4, "c6586896"}, @main=@item_012={0x2, 0x0, 0xb, 'PG'}, @main=@item_4={0x3, 0x0, 0xc, "5f78611d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x14c}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0xa3, "79e3ab5bb716b49159011be2e9b33942605a61d3d2221b38c1bb1d6577cfb52b71a95c448802c2acb947a83d1b8e33c37e9e557a1f6aa73920d2a036627081fc84d302d1752be1ef31a525423c636d8f154424ce98b189d4948bcef7fdc7ebff222d976a92039de67f2ff7d1ce413321e7bcf3884312e886be8fc627bcfc5463b97d9553f8838dd12fb120d91239c5053f90e72514699f4a763b6af05fcd899da9d3f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, &(0x7f0000000680)={0x40, 0x22, 0x46, {0x46, 0x3, "52afbc504100636c8ef166466f8a7814949a1090ff9dd44007751e79fa1d1238ae47728cef2c56c4083362734827c72043632a7c7c854b04ab1b9a4f81b1ba9724d6efe9"}}, &(0x7f0000000800)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "279afdb79c6c48d4d7bb42f63a42a7e351a2e69ba1fb0ed4910880456754255116f63470832f0863be64e197c9873df431f2ab9eb9dc85bb2e9cb68bc5ce6d2b78ff2bd6215f6e1df8cb6db4968c144a408e611b5f5eb630dea59dd82afe6d511622723f3b4fd7d21eb32c6117c10da1165e70ca52e4bc431cf2f61d47b903c22cfc0b721ce78e164cd4c672c301416040bd22aa683d5562e6c4fd9bccfc44422b1050f1871c4dab9367f2ed172d4bde7b55b8ec0166438258b74f3478f123841ad522c8bf2d91"}}, &(0x7f0000000700)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "59f8ff3d"}, @local=@item_012={0x1, 0x2, 0x9, 'K'}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xe39}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x40, 0xb, 0xa4, "600311061aa19d87d92f2e2b5c8dffc9dcd10b08ee7cd00267cc5028f84881a48eaf73c8702d6ed7953ad5b3e9ef0d04376a705bbb3547265f77910e6acb4edadde23fb23fac5b803413bb8c3f1e0c1deb1d0ce3e17eb7d67097456a92fc68671e906944c5c2d3762204ffc3c7029f822e41474a3c856fc3b18f2ba9f2484dc5ea84e2273e868843d3575a83f13ea1fbd0a312f28425362918700f53c75bb4e24bc9aad7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0x11, "1f5db88c70a9abd63a8561dee0d6c0d1d1"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x7}}) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x1, 'r'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b40)={0x274, 0xffffffffffffffaa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_usb_disconnect(r3) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x4802, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0xf, {0xf, 0x0, "0192605d4416e3d06691ed591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_disconnect(r2) (async) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x6, 0xdf, {0xdf, 0x21, "8d726a6596fbec729de0f37bb7a5448ae11db4eb4db4d22aa2cc750d72f23e80f21b06b11a5b9c8fe936c5b4e15dbbe119a11e3b066e141c84772b7250c51d520dd59ac759381cdf16bdeffb45b98c02819f633d3acf0c63fd3e3e0e6020b7b75e352ad73e98c56de2d44dc870a89723ccf3570b4f19d0afa26738792ac221b4326e268857805879662c6745425a5dfb8921d45f287d74894110366999ebd7cd715f8cf93b1b2208175e6f5a5cc9c036aed9cdb141c592fe2436a54b47ba4073a16a43b3124d6677d88b2e4b4c3d7f758909e658e002c89345feda4afa"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000180)={0x0, 0x22, 0x13, {[@global, @main=@item_4={0x3, 0x0, 0xa, "e46e1d59"}, @global=@item_4={0x3, 0x1, 0x4, "c6586896"}, @main=@item_012={0x2, 0x0, 0xb, 'PG'}, @main=@item_4={0x3, 0x0, 0xc, "5f78611d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x14c}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0xa3, "79e3ab5bb716b49159011be2e9b33942605a61d3d2221b38c1bb1d6577cfb52b71a95c448802c2acb947a83d1b8e33c37e9e557a1f6aa73920d2a036627081fc84d302d1752be1ef31a525423c636d8f154424ce98b189d4948bcef7fdc7ebff222d976a92039de67f2ff7d1ce413321e7bcf3884312e886be8fc627bcfc5463b97d9553f8838dd12fb120d91239c5053f90e72514699f4a763b6af05fcd899da9d3f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, &(0x7f0000000680)={0x40, 0x22, 0x46, {0x46, 0x3, "52afbc504100636c8ef166466f8a7814949a1090ff9dd44007751e79fa1d1238ae47728cef2c56c4083362734827c72043632a7c7c854b04ab1b9a4f81b1ba9724d6efe9"}}, &(0x7f0000000800)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "279afdb79c6c48d4d7bb42f63a42a7e351a2e69ba1fb0ed4910880456754255116f63470832f0863be64e197c9873df431f2ab9eb9dc85bb2e9cb68bc5ce6d2b78ff2bd6215f6e1df8cb6db4968c144a408e611b5f5eb630dea59dd82afe6d511622723f3b4fd7d21eb32c6117c10da1165e70ca52e4bc431cf2f61d47b903c22cfc0b721ce78e164cd4c672c301416040bd22aa683d5562e6c4fd9bccfc44422b1050f1871c4dab9367f2ed172d4bde7b55b8ec0166438258b74f3478f123841ad522c8bf2d91"}}, &(0x7f0000000700)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "59f8ff3d"}, @local=@item_012={0x1, 0x2, 0x9, 'K'}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xe39}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x40, 0xb, 0xa4, "600311061aa19d87d92f2e2b5c8dffc9dcd10b08ee7cd00267cc5028f84881a48eaf73c8702d6ed7953ad5b3e9ef0d04376a705bbb3547265f77910e6acb4edadde23fb23fac5b803413bb8c3f1e0c1deb1d0ce3e17eb7d67097456a92fc68671e906944c5c2d3762204ffc3c7029f822e41474a3c856fc3b18f2ba9f2484dc5ea84e2273e868843d3575a83f13ea1fbd0a312f28425362918700f53c75bb4e24bc9aad7"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x1, 0x11, "1f5db88c70a9abd63a8561dee0d6c0d1d1"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x7}}) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x1, 'r'}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b40)={0x274, 0xffffffffffffffaa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) syz_usb_disconnect(r3) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x4802, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) (async) 07:20:11 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1766.561007][T32099] usb 6-1: USB disconnect, device number 14 [ 1766.592461][ T5091] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1766.709661][ T3309] __nla_validate_parse: 1 callbacks suppressed [ 1766.709726][ T3309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1766.782410][ T3311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:20:11 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1766.886182][ T3311] device team22 entered promiscuous mode [ 1766.893027][ T3311] 8021q: adding VLAN 0 to HW filter on device team22 [ 1766.983091][ T5091] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.993855][ T5091] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1767.003324][ T5091] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.005113][ T3315] team0: Port device vlan11 added [ 1767.041772][ T3317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1767.082811][ T5147] usb 2-1: new full-speed USB device number 109 using dummy_hcd 07:20:12 executing program 0: r0 = syz_clone(0x4500c400, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x1, 0x2}, &(0x7f0000000140)=[{}, {}]) 07:20:12 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:12 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1767.273401][ T5147] usb 2-1: device descriptor read/64, error 18 [ 1767.289020][ T5091] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1767.298513][ T5091] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1767.307311][ T5091] usb 4-1: Product: syz [ 1767.311723][ T5091] usb 4-1: Manufacturer: syz [ 1767.316789][ T5091] usb 4-1: SerialNumber: syz [ 1767.445317][ T3318] team0: Port device vlan11 removed [ 1767.503801][ T5091] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1767.510077][ T5091] cdc_wdm 4-1:21.0: Unknown control protocol [ 1767.542263][ T5147] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1767.681878][ T3325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1767.702469][ T3326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1767.734369][ T5147] usb 2-1: device descriptor read/64, error 18 [ 1767.753311][ T3326] device team2 entered promiscuous mode [ 1767.759965][ T3326] 8021q: adding VLAN 0 to HW filter on device team2 [ 1767.766447][T32099] usb 4-1: USB disconnect, device number 8 [ 1767.853106][ T5147] usb usb2-port1: attempt power cycle 07:20:13 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:13 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x9, 0x9, 0x1d06, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/552, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x2, @thr={&(0x7f0000000940), &(0x7f0000000980)="d835947c5fde7224a6a9f6b59537c3c28ede77fda3fd8cd5609488ec7ecb0338bfedc57d65e924977744f1ecbd50b5ae7769df05bbdae4ce0a8d6a1b2ecb0a4d584bfbbdc48aae56f7eb35912b1e1deca268a2340990bd34691da6c48608a9f37759a9821e6ed7ffade40e79c7d05c04b6ab66bc4394330ad7b5a19aa78d0c193efa6184e1cd2658737b7fc0c719fb969acbb3caa39a5c9a2fc80f668f9aab0e1adfb11b7d6bbec17d356646ff0bd31d90b110f02c4897618ac222961026e620612441084e7088f84c413168f2334a22458c2fd2f9bcaea02e7baff91b7c3d29a483142d492e144ec65ce0c41187205aa402ba6e"}}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000280)='./file0\x00') timer_create(0x3, &(0x7f0000000640)={0x0, 0x26, 0x2}, &(0x7f0000000680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000002c0)=@generic={0x3, 0xe22, 0x1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600)={0x3, 'nicvf0\x00', {0x1}, 0x38}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) unshare(0x200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000500)="66ba610066b8008066ef66b866008ec00fa9d94500c4e30d5c08090f017b1066b80a018ec00f01cf0f221fc4e311416ab900", 0x32}], 0x1, 0x45, 0x0, 0x0) [ 1768.253903][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1768.273201][ T5147] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1768.391287][ T3335] device team22 entered promiscuous mode [ 1768.398125][ T3335] 8021q: adding VLAN 0 to HW filter on device team22 [ 1768.449242][ T3340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1768.465887][ T5147] usb 2-1: device descriptor read/8, error -61 [ 1768.520569][ T3335] team0: Port device vlan11 added [ 1768.743223][ T5147] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1768.885321][ T3343] team0: Port device vlan11 removed [ 1768.912556][ T5147] usb 2-1: device descriptor read/8, error -61 [ 1769.105107][ T5147] usb usb2-port1: unable to enumerate USB device 07:20:14 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(r3) 07:20:14 executing program 0: r0 = syz_clone(0x4500c400, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x1, 0x2}, &(0x7f0000000140)=[{}, {}]) [ 1769.783735][T32099] usb 4-1: new high-speed USB device number 9 using dummy_hcd 07:20:14 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:14 executing program 1: syz_emit_ethernet(0x256, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x0, 0x5}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "38eefd", 0x220, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xfd, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad834f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast1, @empty, @remote}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xa67, 0x871, 0xd, 0xa3d]}) 07:20:14 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:14 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x9, 0x9, 0x1d06, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x4}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/552, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x2, @thr={&(0x7f0000000940), &(0x7f0000000980)="d835947c5fde7224a6a9f6b59537c3c28ede77fda3fd8cd5609488ec7ecb0338bfedc57d65e924977744f1ecbd50b5ae7769df05bbdae4ce0a8d6a1b2ecb0a4d584bfbbdc48aae56f7eb35912b1e1deca268a2340990bd34691da6c48608a9f37759a9821e6ed7ffade40e79c7d05c04b6ab66bc4394330ad7b5a19aa78d0c193efa6184e1cd2658737b7fc0c719fb969acbb3caa39a5c9a2fc80f668f9aab0e1adfb11b7d6bbec17d356646ff0bd31d90b110f02c4897618ac222961026e620612441084e7088f84c413168f2334a22458c2fd2f9bcaea02e7baff91b7c3d29a483142d492e144ec65ce0c41187205aa402ba6e"}}, &(0x7f0000000540)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) (async, rerun: 64) unshare(0x40020000) rmdir(&(0x7f0000000280)='./file0\x00') (async, rerun: 64) timer_create(0x3, &(0x7f0000000640)={0x0, 0x26, 0x2}, &(0x7f0000000680)) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000002c0)=@generic={0x3, 0xe22, 0x1}) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600)={0x3, 'nicvf0\x00', {0x1}, 0x38}) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) unshare(0x200) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000500)="66ba610066b8008066ef66b866008ec00fa9d94500c4e30d5c08090f017b1066b80a018ec00f01cf0f221fc4e311416ab900", 0x32}], 0x1, 0x45, 0x0, 0x0) [ 1769.971596][ T3359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:20:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x40, 0x2, 0x99, {0x99, 0x6, "258ffce0dfab798abcc7032f33cc62f0e34b1bbe7512aa99c36d1a3c86d19c07073cf64c8f1076b9030aa198908fcad3540270205f3be5306523284ed212a58abd457181e31fddb1146ff7af721e8832d00797f6f919d09f925fbcd045e727073bd33123c0dc7f36f69f7006d272b790e894a5b3d5988af8fe7c80b99f85027489e408197ac35fc837f5dfd13ffdee96db9d49db2f0336"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "75091b949e8f3dbe980c342b447569266466c22b9c98434700b078b29211797cfc91d1805865ed9c33b95a880123ef78a15cb61cfdbe365668d49ba9c632375f301a0812f0bd928da01b9e3c72abb5a1a0bb06ee1685791307f5"}}, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "bb"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x3f, 0x1, {0x22, 0xc2b}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x0, 0x93, "449a218a5da12b4e4d82dfce691d7fe9172707ac8dea8e1ceb98ded016ff15120701bf7f48caa27101a14b4b90a135addd8a9933fdaac71ee1d687cede65ffc0f0713f749db0da2c448387e2a7d51d378b7a58b49e0343441363c350e6edbce4e1549484ff9f6c53a1e6037305b84546745873ebb35ee622fc7d2a2d1d43ce4d432e75b7f6f1dec38219072649cab1d89dba70"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000440)={0x20, 0x1, 0x23, "b182203df82e8d8c51165d77315d51fc26eb378b24f0174635efa96afc59ae6ef75f0b"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00d84d0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x2}) 07:20:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x9, 0x9, 0x1d06, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x4}, 0x48) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/552, @ANYRES32, @ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x2, @thr={&(0x7f0000000940), &(0x7f0000000980)="d835947c5fde7224a6a9f6b59537c3c28ede77fda3fd8cd5609488ec7ecb0338bfedc57d65e924977744f1ecbd50b5ae7769df05bbdae4ce0a8d6a1b2ecb0a4d584bfbbdc48aae56f7eb35912b1e1deca268a2340990bd34691da6c48608a9f37759a9821e6ed7ffade40e79c7d05c04b6ab66bc4394330ad7b5a19aa78d0c193efa6184e1cd2658737b7fc0c719fb969acbb3caa39a5c9a2fc80f668f9aab0e1adfb11b7d6bbec17d356646ff0bd31d90b110f02c4897618ac222961026e620612441084e7088f84c413168f2334a22458c2fd2f9bcaea02e7baff91b7c3d29a483142d492e144ec65ce0c41187205aa402ba6e"}}, &(0x7f0000000540)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) unshare(0x22020000) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) (async) rmdir(&(0x7f0000000280)='./file0\x00') timer_create(0x3, &(0x7f0000000640)={0x0, 0x26, 0x2}, &(0x7f0000000680)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') (async) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x6589}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000002c0)=@generic={0x3, 0xe22, 0x1}) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600)={0x3, 'nicvf0\x00', {0x1}, 0x38}) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async, rerun: 32) unshare(0x200) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000500)="66ba610066b8008066ef66b866008ec00fa9d94500c4e30d5c08090f017b1066b80a018ec00f01cf0f221fc4e311416ab900", 0x32}], 0x1, 0x45, 0x0, 0x0) [ 1770.173290][T32099] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.174705][ T3359] device team22 entered promiscuous mode [ 1770.183864][T32099] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1770.190344][ T3359] 8021q: adding VLAN 0 to HW filter on device team22 [ 1770.198560][T32099] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.215230][ T3358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:15 executing program 1: syz_emit_ethernet(0x256, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x0, 0x5}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "38eefd", 0x220, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xfd, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad834f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast1, @empty, @remote}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xa67, 0x871, 0xd, 0xa3d]}) syz_emit_ethernet(0x256, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x0, 0x5}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "38eefd", 0x220, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xfd, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad834f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast1, @empty, @remote}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xa67, 0x871, 0xd, 0xa3d]}) (async) 07:20:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1770.553481][T32099] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1770.567570][T32099] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1770.576813][T32099] usb 4-1: Product: syz [ 1770.581204][T32099] usb 4-1: Manufacturer: syz [ 1770.586164][T32099] usb 4-1: SerialNumber: syz [ 1770.622960][ T5102] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1770.657185][ T3359] team0: Port device vlan11 added [ 1770.804820][T32099] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1770.811111][T32099] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:15 executing program 1: syz_emit_ethernet(0x256, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x0, 0x5}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "38eefd", 0x220, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xfd, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad834f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast1, @empty, @remote}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xa67, 0x871, 0xd, 0xa3d]}) [ 1770.883480][ T3386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1771.003577][ T5102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.015498][ T5102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.025592][ T5102] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1771.038851][ T5102] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1771.048212][ T5102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.069535][ T5147] usb 4-1: USB disconnect, device number 9 07:20:16 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000000c0)=[{}, {}, {}, {}]) r2 = open(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x208}, 0x1, 0x0, 0x0, 0x1010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x800000, &(0x7f0000000bc0), 0x0, 0x0, &(0x7f0000000c40), 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000600), 0x4, &(0x7f0000000680)) stat(0x0, 0x0) stat(&(0x7f0000000dc0)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x400, 0x40, &(0x7f0000000ec0)) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/97, 0x61}], 0x3, 0x7, 0x1f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000000000), 0xc, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 1771.344623][ T5102] usb 1-1: config 0 descriptor?? [ 1771.827870][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.835780][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.843582][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.851229][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.859096][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.866877][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.874711][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.882520][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.892559][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.900173][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.908587][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.916305][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.924164][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.931796][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1771.939560][ T5102] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 1772.105311][ T5102] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 1772.131442][ T5102] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1772.150135][ T5102] usb 1-1: USB disconnect, device number 83 07:20:17 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(r3) 07:20:17 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:17 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:17 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/2863], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x6, 0x3, &(0x7f0000002500)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x100a, &(0x7f0000003880)=""/4106, 0x0, 0x3, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd, 0x4}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x103, 0x0, &(0x7f0000001040)="e460cdfbef2431f8cfe2ed08ff2800119386dd6a00000000072ceb3014cd3ec8a755c1e1380081ffad000000000100000014000005002429098861a9002196fdd0360000001f930d3f8c64305488577af2c9ff6e01a891d8ec1f919db2238f06af942e1044898197b57ced10eacc0a0ada2793c1a24c4cbed727ae8b247203b39b85c745482a95ef35300200406af7aafcc9b0d806f41b5922a3ebfa533f55d78a6fcf44f9ef94a0d8c20bbe20be18821e46bd620a46de479855075606b59f1e495c0ef31692d857d09bc256e90ffb27139e6c48cb0eaa186805c8a88c3d4d432113b27609960a264591c5f788a730ef0d5e97a65a8a9f6e83f00873412666634729b8", 0x0, 0x441, 0x0, 0x476, 0xeb, &(0x7f0000001180)="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", &(0x7f0000000dc0)="c883d51801810999c0d7bb75cfef51d93f3eaa3b3f1a100f5e6711b2cff00820e2b1e1442556f49f146b0117902ff60eb52678492181a2b4fcde6d4a2db2b785241ea65ea8af827042d7b3e76fab6627db3be58963589a7cb1c232ff681cc6cd213cb20d5f60d404caedf769ffb94b2cf7b4a1fb423c9c99655b8f76faac431c4020d37767660001633a00000000000000000000000000000000600f5719802441c674319a696a3d1960665cd48cad7d1ac120df24583997175e576b549e41c03352bb3a43493fad289aae679434e68149250c3ebb23c414936f34e7d12feadd0400df0a13d1b62be78ffc"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd8, 0xf5, &(0x7f00000002c0)="5e7c5beca4cfb94d55e06bb77c591a9cec4f30370d119a6c7913d9ffeb89393c0e5c154efbfe22942553e4831f6def1c015d27008a237d2958d4ffa870a7e7b5225d9324daac3c95ba9e408bb5148042ef4fb28b8f9153564f980c908012490840b9155bf1d3bc56b716b5330617f26ecb85c485797507c20ab8258d0aefefc98e5f37cb2ba7cb4782cb95b1fa5ce5e4dfd42bc70cbd10c1d92a6d3025da570915316392e853bbc3acaae4be874662fcd94297b7d367dd0f5f62f1fe84edec93484a3a30b6eac49daf9e947dd33f7e2525a042513beb7102", &(0x7f0000000740)=""/245, 0x20, 0x0, 0x2d, 0xf8, &(0x7f0000000700)="ad93a6047036fb2821ca7fa67ec3fc58e41233e5a165914b7da8eab70f73b50b1c964c6592ce5b959c67717d10", &(0x7f0000000500)="4c3f2fbd9d3a68e7c0eb71156db22bb22c2aad023823134f91df482806043d520b9726443d129c5d69785f5d6e8ed67db4b5b823295bfa1d2642aa479bc3ba22e5b8126af5793318a8c580b34d1dcee1b3f5573da10744d3002489cf4fa077b4e2cc057b3ba12ba16e98af990df40daf041b1dfaf1061d2d0ecad25c19239f0385915701ca6e9d7a55d7a08bc0541a3f6ed2115d0025a1a3aa7602f9494fe19fee352f0d5553860c35e311a1db1397172b46565872149824d5ce3b81c09aa07a721825187f915a559d5c5ea5cb64bffab39cfb323f65b677aedf2cbd7ae15645556229da4f656bc643b51282dda52b3724f7e6ecf7f85f40", 0x64151587ce58f4f2, 0x6}, 0x48) mlock(&(0x7f0000000000/0x11000)=nil, 0x11000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x0, 0x7ff, 0xcf, 0x9, 0x98}) set_mempolicy(0x4000, &(0x7f0000000240)=0x4, 0x1) shmget$private(0x0, 0x2000, 0x200, &(0x7f000000d000/0x2000)=nil) set_mempolicy(0x3, &(0x7f0000000680)=0x6a3, 0x8) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000003000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000087070000000000000000000018300000050000000000000000000000bdff18310000010000000000000000000000c8270000730a000018260000", @ANYRES32=0x1, @ANYBLOB="0010000007000000ff5700000a00002000000000000000009500000000000000f87383a5d2cc8d55987ed96c083f43b345c84b7c857a4197617c172a01524578e598c74ec76d0ca096cd84d1de2e896e99d9c30c5085a84b191bd0285dfd9b9149137b9a45292a0700c04ee8372a77f6fc3bf1eb857836b71796a04049b98c98000000000000000000000000010000003e5834667433f8f74fb29296933689556db936f4f357eabd9f2a49b0ca1a460000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xc, 0xe0, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000006000/0x2000)=nil) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000280)=0x80000000, 0x4089, 0x3) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(r3, &(0x7f0000001000/0x2000)=nil, 0x1000) ioctl$FICLONE(r2, 0x40049409, r1) shmctl$SHM_LOCK(r4, 0xb) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x9, 0x6, 0x2) [ 1772.666947][ T3401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x40, 0x2, 0x99, {0x99, 0x6, "258ffce0dfab798abcc7032f33cc62f0e34b1bbe7512aa99c36d1a3c86d19c07073cf64c8f1076b9030aa198908fcad3540270205f3be5306523284ed212a58abd457181e31fddb1146ff7af721e8832d00797f6f919d09f925fbcd045e727073bd33123c0dc7f36f69f7006d272b790e894a5b3d5988af8fe7c80b99f85027489e408197ac35fc837f5dfd13ffdee96db9d49db2f0336"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "75091b949e8f3dbe980c342b447569266466c22b9c98434700b078b29211797cfc91d1805865ed9c33b95a880123ef78a15cb61cfdbe365668d49ba9c632375f301a0812f0bd928da01b9e3c72abb5a1a0bb06ee1685791307f5"}}, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "bb"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x3f, 0x1, {0x22, 0xc2b}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x0, 0x93, "449a218a5da12b4e4d82dfce691d7fe9172707ac8dea8e1ceb98ded016ff15120701bf7f48caa27101a14b4b90a135addd8a9933fdaac71ee1d687cede65ffc0f0713f749db0da2c448387e2a7d51d378b7a58b49e0343441363c350e6edbce4e1549484ff9f6c53a1e6037305b84546745873ebb35ee622fc7d2a2d1d43ce4d432e75b7f6f1dec38219072649cab1d89dba70"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000440)={0x20, 0x1, 0x23, "b182203df82e8d8c51165d77315d51fc26eb378b24f0174635efa96afc59ae6ef75f0b"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x81}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00d84d0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x2}) [ 1772.769002][ T24] audit: type=1800 audit(1676445617.815:55): pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 07:20:17 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1772.837932][ T3403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1772.993878][ T3403] device team23 entered promiscuous mode [ 1773.000609][ T3403] 8021q: adding VLAN 0 to HW filter on device team23 [ 1773.069491][ T3407] team0: Port device vlan12 added 07:20:18 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/2863], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x6, 0x3, &(0x7f0000002500)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x100a, &(0x7f0000003880)=""/4106, 0x0, 0x3, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd, 0x4}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x103, 0x0, &(0x7f0000001040)="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", 0x0, 0x441, 0x0, 0x476, 0xeb, &(0x7f0000001180)="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", &(0x7f0000000dc0)="c883d51801810999c0d7bb75cfef51d93f3eaa3b3f1a100f5e6711b2cff00820e2b1e1442556f49f146b0117902ff60eb52678492181a2b4fcde6d4a2db2b785241ea65ea8af827042d7b3e76fab6627db3be58963589a7cb1c232ff681cc6cd213cb20d5f60d404caedf769ffb94b2cf7b4a1fb423c9c99655b8f76faac431c4020d37767660001633a00000000000000000000000000000000600f5719802441c674319a696a3d1960665cd48cad7d1ac120df24583997175e576b549e41c03352bb3a43493fad289aae679434e68149250c3ebb23c414936f34e7d12feadd0400df0a13d1b62be78ffc"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd8, 0xf5, &(0x7f00000002c0)="5e7c5beca4cfb94d55e06bb77c591a9cec4f30370d119a6c7913d9ffeb89393c0e5c154efbfe22942553e4831f6def1c015d27008a237d2958d4ffa870a7e7b5225d9324daac3c95ba9e408bb5148042ef4fb28b8f9153564f980c908012490840b9155bf1d3bc56b716b5330617f26ecb85c485797507c20ab8258d0aefefc98e5f37cb2ba7cb4782cb95b1fa5ce5e4dfd42bc70cbd10c1d92a6d3025da570915316392e853bbc3acaae4be874662fcd94297b7d367dd0f5f62f1fe84edec93484a3a30b6eac49daf9e947dd33f7e2525a042513beb7102", &(0x7f0000000740)=""/245, 0x20, 0x0, 0x2d, 0xf8, &(0x7f0000000700)="ad93a6047036fb2821ca7fa67ec3fc58e41233e5a165914b7da8eab70f73b50b1c964c6592ce5b959c67717d10", &(0x7f0000000500)="4c3f2fbd9d3a68e7c0eb71156db22bb22c2aad023823134f91df482806043d520b9726443d129c5d69785f5d6e8ed67db4b5b823295bfa1d2642aa479bc3ba22e5b8126af5793318a8c580b34d1dcee1b3f5573da10744d3002489cf4fa077b4e2cc057b3ba12ba16e98af990df40daf041b1dfaf1061d2d0ecad25c19239f0385915701ca6e9d7a55d7a08bc0541a3f6ed2115d0025a1a3aa7602f9494fe19fee352f0d5553860c35e311a1db1397172b46565872149824d5ce3b81c09aa07a721825187f915a559d5c5ea5cb64bffab39cfb323f65b677aedf2cbd7ae15645556229da4f656bc643b51282dda52b3724f7e6ecf7f85f40", 0x64151587ce58f4f2, 0x6}, 0x48) (async) mlock(&(0x7f0000000000/0x11000)=nil, 0x11000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x0, 0x7ff, 0xcf, 0x9, 0x98}) set_mempolicy(0x4000, &(0x7f0000000240)=0x4, 0x1) (async, rerun: 64) shmget$private(0x0, 0x2000, 0x200, &(0x7f000000d000/0x2000)=nil) (async, rerun: 64) set_mempolicy(0x3, &(0x7f0000000680)=0x6a3, 0x8) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) (async) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000003000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000087070000000000000000000018300000050000000000000000000000bdff18310000010000000000000000000000c8270000730a000018260000", @ANYRES32=0x1, @ANYBLOB="0010000007000000ff5700000a00002000000000000000009500000000000000f87383a5d2cc8d55987ed96c083f43b345c84b7c857a4197617c172a01524578e598c74ec76d0ca096cd84d1de2e896e99d9c30c5085a84b191bd0285dfd9b9149137b9a45292a0700c04ee8372a77f6fc3bf1eb857836b71796a04049b98c98000000000000000000000000010000003e5834667433f8f74fb29296933689556db936f4f357eabd9f2a49b0ca1a460000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xc, 0xe0, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000006000/0x2000)=nil) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000280)=0x80000000, 0x4089, 0x3) (async, rerun: 64) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) (async, rerun: 64) shmat(r3, &(0x7f0000001000/0x2000)=nil, 0x1000) ioctl$FICLONE(r2, 0x40049409, r1) (async, rerun: 32) shmctl$SHM_LOCK(r4, 0xb) (async, rerun: 32) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x9, 0x6, 0x2) [ 1773.152542][T32099] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1773.432900][ T5102] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1773.514714][T32099] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.525513][T32099] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1773.539277][T32099] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.658284][ T3414] team0: Port device vlan12 removed [ 1773.792899][ T5102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.802925][T32099] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1773.804197][ T5102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.813319][T32099] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1773.823267][ T5102] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1773.831756][T32099] usb 4-1: Product: syz [ 1773.846200][ T5102] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1773.846342][ T5102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.872637][T32099] usb 4-1: Manufacturer: syz [ 1773.877403][T32099] usb 4-1: SerialNumber: syz [ 1773.903476][ T24] audit: type=1800 audit(1676445618.945:56): pid=3418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 07:20:19 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/2863], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x6, 0x3, &(0x7f0000002500)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x100a, &(0x7f0000003880)=""/4106, 0x0, 0x3, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd, 0x4}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x103, 0x0, &(0x7f0000001040)="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", 0x0, 0x441, 0x0, 0x476, 0xeb, &(0x7f0000001180)="59235bd7a9324ff307d871773323e9fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63936ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267e9ff3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492679889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2be54c2c6588d94ae7f2d558c95e85b600735c84b48b7b8001651fa96ada0d00f2a01ea0c3d76bc5f4e2de3565f14983dfe91b662417d734802ffe64f51de687b24f015362af1ef87ef6d547879bcf8fc9c6d2db76ece14cc2d30953799d084de2467b79fb3ca78d4f2ded28b69c73d0e87df6cae62632066204b5e90fef3b29571ef526b4b9a2db90d85ce66e92547ab22958ecdb5762bac637b6e39f49bde5f497e60064b789e5cae7b41f443d3c51cf4ebb8746ef56cf2571b19ac618d10f9d9420605c85aaf82f09ffd473aa0e827c5a6b1c7bcdb07bbda0d227ffea00f63d811e8db64fdfbb83f5dcd6459c594e36012f353dc10f72a48fb8b5c2d27e8a4a90db09ea13c88ab63b8b9c13f10078221180b6e49e6b3bc9583dee7e9bc76b72ec27d8da48c27f3f5a2977b1c9906fa53c7fc047189437a98e59afb4dbaabaf86f15f21bcab8f320316383c7a327", &(0x7f0000000dc0)="c883d51801810999c0d7bb75cfef51d93f3eaa3b3f1a100f5e6711b2cff00820e2b1e1442556f49f146b0117902ff60eb52678492181a2b4fcde6d4a2db2b785241ea65ea8af827042d7b3e76fab6627db3be58963589a7cb1c232ff681cc6cd213cb20d5f60d404caedf769ffb94b2cf7b4a1fb423c9c99655b8f76faac431c4020d37767660001633a00000000000000000000000000000000600f5719802441c674319a696a3d1960665cd48cad7d1ac120df24583997175e576b549e41c03352bb3a43493fad289aae679434e68149250c3ebb23c414936f34e7d12feadd0400df0a13d1b62be78ffc"}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd8, 0xf5, &(0x7f00000002c0)="5e7c5beca4cfb94d55e06bb77c591a9cec4f30370d119a6c7913d9ffeb89393c0e5c154efbfe22942553e4831f6def1c015d27008a237d2958d4ffa870a7e7b5225d9324daac3c95ba9e408bb5148042ef4fb28b8f9153564f980c908012490840b9155bf1d3bc56b716b5330617f26ecb85c485797507c20ab8258d0aefefc98e5f37cb2ba7cb4782cb95b1fa5ce5e4dfd42bc70cbd10c1d92a6d3025da570915316392e853bbc3acaae4be874662fcd94297b7d367dd0f5f62f1fe84edec93484a3a30b6eac49daf9e947dd33f7e2525a042513beb7102", &(0x7f0000000740)=""/245, 0x20, 0x0, 0x2d, 0xf8, &(0x7f0000000700)="ad93a6047036fb2821ca7fa67ec3fc58e41233e5a165914b7da8eab70f73b50b1c964c6592ce5b959c67717d10", &(0x7f0000000500)="4c3f2fbd9d3a68e7c0eb71156db22bb22c2aad023823134f91df482806043d520b9726443d129c5d69785f5d6e8ed67db4b5b823295bfa1d2642aa479bc3ba22e5b8126af5793318a8c580b34d1dcee1b3f5573da10744d3002489cf4fa077b4e2cc057b3ba12ba16e98af990df40daf041b1dfaf1061d2d0ecad25c19239f0385915701ca6e9d7a55d7a08bc0541a3f6ed2115d0025a1a3aa7602f9494fe19fee352f0d5553860c35e311a1db1397172b46565872149824d5ce3b81c09aa07a721825187f915a559d5c5ea5cb64bffab39cfb323f65b677aedf2cbd7ae15645556229da4f656bc643b51282dda52b3724f7e6ecf7f85f40", 0x64151587ce58f4f2, 0x6}, 0x48) mlock(&(0x7f0000000000/0x11000)=nil, 0x11000) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x0, 0x7ff, 0xcf, 0x9, 0x98}) (async) set_mempolicy(0x4000, &(0x7f0000000240)=0x4, 0x1) shmget$private(0x0, 0x2000, 0x200, &(0x7f000000d000/0x2000)=nil) set_mempolicy(0x3, &(0x7f0000000680)=0x6a3, 0x8) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) (async) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000003000/0x2000)=nil) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000087070000000000000000000018300000050000000000000000000000bdff18310000010000000000000000000000c8270000730a000018260000", @ANYRES32=0x1, @ANYBLOB="0010000007000000ff5700000a00002000000000000000009500000000000000f87383a5d2cc8d55987ed96c083f43b345c84b7c857a4197617c172a01524578e598c74ec76d0ca096cd84d1de2e896e99d9c30c5085a84b191bd0285dfd9b9149137b9a45292a0700c04ee8372a77f6fc3bf1eb857836b71796a04049b98c98000000000000000000000000010000003e5834667433f8f74fb29296933689556db936f4f357eabd9f2a49b0ca1a460000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xc, 0xe0, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000006000/0x2000)=nil) (async) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000280)=0x80000000, 0x4089, 0x3) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) (async) shmat(r3, &(0x7f0000001000/0x2000)=nil, 0x1000) ioctl$FICLONE(r2, 0x40049409, r1) (async) shmctl$SHM_LOCK(r4, 0xb) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x9, 0x6, 0x2) [ 1774.361328][ T5102] usb 1-1: config 0 descriptor?? 07:20:19 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1774.389608][T32099] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1774.396369][T32099] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:19 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000000c0)=[{}, {}, {}, {}]) r2 = open(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x208}, 0x1, 0x0, 0x0, 0x1010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) syz_clone(0x800000, &(0x7f0000000bc0), 0x0, 0x0, &(0x7f0000000c40), 0x0) (async) waitid$P_PIDFD(0x3, r1, &(0x7f0000000600), 0x4, &(0x7f0000000680)) stat(0x0, 0x0) (async) stat(&(0x7f0000000dc0)='./file0\x00', 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x400, 0x40, &(0x7f0000000ec0)) (async) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/97, 0x61}], 0x3, 0x7, 0x1f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000000000), 0xc, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 1774.610423][ T5100] usb 4-1: USB disconnect, device number 10 [ 1774.665987][ T3431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1774.690290][ T24] audit: type=1800 audit(1676445619.735:57): pid=3425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=42 res=0 errno=0 07:20:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/2863], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x6, 0x3, &(0x7f0000002500)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x100a, &(0x7f0000003880)=""/4106, 0x0, 0x3, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd, 0x4}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x103, 0x0, &(0x7f0000001040)="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", 0x0, 0x441, 0x0, 0x476, 0xeb, &(0x7f0000001180)="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", &(0x7f0000000dc0)="c883d51801810999c0d7bb75cfef51d93f3eaa3b3f1a100f5e6711b2cff00820e2b1e1442556f49f146b0117902ff60eb52678492181a2b4fcde6d4a2db2b785241ea65ea8af827042d7b3e76fab6627db3be58963589a7cb1c232ff681cc6cd213cb20d5f60d404caedf769ffb94b2cf7b4a1fb423c9c99655b8f76faac431c4020d37767660001633a00000000000000000000000000000000600f5719802441c674319a696a3d1960665cd48cad7d1ac120df24583997175e576b549e41c03352bb3a43493fad289aae679434e68149250c3ebb23c414936f34e7d12feadd0400df0a13d1b62be78ffc"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd8, 0xf5, &(0x7f00000002c0)="5e7c5beca4cfb94d55e06bb77c591a9cec4f30370d119a6c7913d9ffeb89393c0e5c154efbfe22942553e4831f6def1c015d27008a237d2958d4ffa870a7e7b5225d9324daac3c95ba9e408bb5148042ef4fb28b8f9153564f980c908012490840b9155bf1d3bc56b716b5330617f26ecb85c485797507c20ab8258d0aefefc98e5f37cb2ba7cb4782cb95b1fa5ce5e4dfd42bc70cbd10c1d92a6d3025da570915316392e853bbc3acaae4be874662fcd94297b7d367dd0f5f62f1fe84edec93484a3a30b6eac49daf9e947dd33f7e2525a042513beb7102", &(0x7f0000000740)=""/245, 0x20, 0x0, 0x2d, 0xf8, &(0x7f0000000700)="ad93a6047036fb2821ca7fa67ec3fc58e41233e5a165914b7da8eab70f73b50b1c964c6592ce5b959c67717d10", &(0x7f0000000500)="4c3f2fbd9d3a68e7c0eb71156db22bb22c2aad023823134f91df482806043d520b9726443d129c5d69785f5d6e8ed67db4b5b823295bfa1d2642aa479bc3ba22e5b8126af5793318a8c580b34d1dcee1b3f5573da10744d3002489cf4fa077b4e2cc057b3ba12ba16e98af990df40daf041b1dfaf1061d2d0ecad25c19239f0385915701ca6e9d7a55d7a08bc0541a3f6ed2115d0025a1a3aa7602f9494fe19fee352f0d5553860c35e311a1db1397172b46565872149824d5ce3b81c09aa07a721825187f915a559d5c5ea5cb64bffab39cfb323f65b677aedf2cbd7ae15645556229da4f656bc643b51282dda52b3724f7e6ecf7f85f40", 0x64151587ce58f4f2, 0x6}, 0x48) mlock(&(0x7f0000000000/0x11000)=nil, 0x11000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x0, 0x7ff, 0xcf, 0x9, 0x98}) set_mempolicy(0x4000, &(0x7f0000000240)=0x4, 0x1) shmget$private(0x0, 0x2000, 0x200, &(0x7f000000d000/0x2000)=nil) set_mempolicy(0x3, &(0x7f0000000680)=0x6a3, 0x8) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000003000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000087070000000000000000000018300000050000000000000000000000bdff18310000010000000000000000000000c8270000730a000018260000", @ANYRES32=0x1, @ANYBLOB="0010000007000000ff5700000a00002000000000000000009500000000000000f87383a5d2cc8d55987ed96c083f43b345c84b7c857a4197617c172a01524578e598c74ec76d0ca096cd84d1de2e896e99d9c30c5085a84b191bd0285dfd9b9149137b9a45292a0700c04ee8372a77f6fc3bf1eb857836b71796a04049b98c98000000000000000000000000010000003e5834667433f8f74fb29296933689556db936f4f357eabd9f2a49b0ca1a460000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xc, 0xe0, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000006000/0x2000)=nil) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000280)=0x80000000, 0x4089, 0x3) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(r3, &(0x7f0000001000/0x2000)=nil, 0x1000) ioctl$FICLONE(r2, 0x40049409, r1) shmctl$SHM_LOCK(r4, 0xb) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x9, 0x6, 0x2) [ 1774.903192][ T5102] usbhid 1-1:0.0: can't add hid device: -71 [ 1774.909728][ T5102] usbhid: probe of 1-1:0.0 failed with error -71 [ 1774.986594][ T3431] device team23 entered promiscuous mode [ 1774.993661][ T3431] 8021q: adding VLAN 0 to HW filter on device team23 [ 1775.035784][ T5102] usb 1-1: USB disconnect, device number 84 [ 1775.159413][ T3435] team0: Port device vlan12 added [ 1775.559637][ T24] audit: type=1800 audit(1676445620.605:58): pid=3444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=46 res=0 errno=0 [ 1775.693751][ T3438] team0: Port device vlan12 removed 07:20:21 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(r3) 07:20:21 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:21 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000000c0)=[{}, {}, {}, {}]) (async) r2 = open(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x208}, 0x1, 0x0, 0x0, 0x1010}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x800000, &(0x7f0000000bc0), 0x0, 0x0, &(0x7f0000000c40), 0x0) (async) waitid$P_PIDFD(0x3, r1, &(0x7f0000000600), 0x4, &(0x7f0000000680)) stat(0x0, 0x0) stat(&(0x7f0000000dc0)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x400, 0x40, &(0x7f0000000ec0)) (async) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/97, 0x61}], 0x3, 0x7, 0x1f) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000000000), 0xc, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 07:20:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) r5 = accept$phonet_pipe(r4, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x59, 0x8, "e350d3088eb0f8b79d77ac6a98764b474054bbca869feee1af9d03c6654f7c16f7323ec9a618196c71e9aac09493b5f62d361c3b84921ebf65a2499457020c91efa8371f5ab6a683989b788e0e3bf7f380f5572249"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x15a8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1550, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "5bbd57d005af93ee227614366fad00dc43fa7747baf2e4b168400c916461ecf3e067499da96784bcf8c8132085b638e2261e8b9fc023a2a13feed3ce42480f7caffda4ea0873696b53e1012e52e915e1cba9689dfea8762e8a41f6aa8cb8c88dc719add30cae6f67df28ffce431e5c9a33df4ceb1cef5a0e0565d3878d831da24a7b29a524731f40617058d2cc8ac96ad94e73bcd42d5bb1b4e1509f4c29307313827e1a9c80ab71f1b6100665edb076aefbb18ab969c1b02b2efd5c386b10aba0ad308200ad2772c5a0844d6442093f8b2867c2"}]}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "b797d8413301597ad4081f8c26c9562bf7d56eec4450532b6fdf26eff3e1654f176db721aed10c61f07f3b8eca3cf9e66f7f1b51eb86fbdcca0b5efaa7542e12a325d75179534be18ce9889bc337e8f9886b6e7684959ce879131b120b698c41224a240b8f833f9293897ea0c996a73b61727c4935e5611a572217d60d6513c7016011c9eae7727a1710e2317b6ad1f9650530ff12d4881b438ab53892573e5ce108fa21b0e09c8a9a1b29ccf3504f66bd9d2dc4bc0783411a73"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "19fc2d2aa9ce32f3d4c905f9024f7a61f07085101a1a"}, @NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "245098a96e8286983cfd9d88284bc411e065031555a7e0341bba86595685544a132cc0fb3ff58a0420e8028cca4189d1274b24ba8dac740559da7989d272f2f5661eb46c684af0f4f780891a938d1d22d0047496cf747ac3dd06ccf9ea1bfa4fcdfe406784103523c8d94a3db6985d10d880f88a5f593a50b710fedc3973826fb0c043e2660d96abe3f632dfa97901fa4280047b3aa12d3e1b7b971ec94c4ee478503cce374e46ba65f00afcd759"}]}, {0x11b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "d9cd4ecea8795944130c9dd5be498f218300949ae1d3823ec989eff70f3b5fcb16ba4117cc3071ef94fb7554da9d7f949f55788d7d30d19088350dc489e6f236954ca0a8d6b3696a2ea260bfb3a46cb44e0fbed77898093356fe7cf60f09b6df4718b2ce70383121c7746d28736bfe8594d4cc135982a5c5e1a14bdf42b33494fb850be4de0a7c983ddaca941162b5cf89743b5d2b5bb6164ae36ac5825c04a220374b158ecb4a43ca151a1dd9bccd1d91f561ad2206ff3056d80788e4c7dd7f71227fe9"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x55, 0x1, "add0bf580d6bf2e0ab7ed6df2f4843d3634562d3572e1ea83f4b8bb16ba70c231d206615c74729b98db677c03d920476fd2e4ac811acd282baee6581f4b11f6274f0aae8a16a66882f5adf583bc64cb37c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}]}, @NFTA_DATA_VALUE={0x26, 0x1, "f415651172d4cd7df87a552be439692665d3e43086320aaec96a7c6f6c297303c324"}, @NFTA_DATA_VERDICT={0x4}]}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x101}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2d}]}], {0x14}}, 0x1780}, 0x1, 0x0, 0x0, 0x1}, 0x80) signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 07:20:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x40, 0x2, 0x99, {0x99, 0x6, "258ffce0dfab798abcc7032f33cc62f0e34b1bbe7512aa99c36d1a3c86d19c07073cf64c8f1076b9030aa198908fcad3540270205f3be5306523284ed212a58abd457181e31fddb1146ff7af721e8832d00797f6f919d09f925fbcd045e727073bd33123c0dc7f36f69f7006d272b790e894a5b3d5988af8fe7c80b99f85027489e408197ac35fc837f5dfd13ffdee96db9d49db2f0336"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "75091b949e8f3dbe980c342b447569266466c22b9c98434700b078b29211797cfc91d1805865ed9c33b95a880123ef78a15cb61cfdbe365668d49ba9c632375f301a0812f0bd928da01b9e3c72abb5a1a0bb06ee1685791307f5"}}, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "bb"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x3f, 0x1, {0x22, 0xc2b}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x0, 0x93, "449a218a5da12b4e4d82dfce691d7fe9172707ac8dea8e1ceb98ded016ff15120701bf7f48caa27101a14b4b90a135addd8a9933fdaac71ee1d687cede65ffc0f0713f749db0da2c448387e2a7d51d378b7a58b49e0343441363c350e6edbce4e1549484ff9f6c53a1e6037305b84546745873ebb35ee622fc7d2a2d1d43ce4d432e75b7f6f1dec38219072649cab1d89dba70"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000440)={0x20, 0x1, 0x23, "b182203df82e8d8c51165d77315d51fc26eb378b24f0174635efa96afc59ae6ef75f0b"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00d84d0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x2}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x40, 0x2, 0x99, {0x99, 0x6, "258ffce0dfab798abcc7032f33cc62f0e34b1bbe7512aa99c36d1a3c86d19c07073cf64c8f1076b9030aa198908fcad3540270205f3be5306523284ed212a58abd457181e31fddb1146ff7af721e8832d00797f6f919d09f925fbcd045e727073bd33123c0dc7f36f69f7006d272b790e894a5b3d5988af8fe7c80b99f85027489e408197ac35fc837f5dfd13ffdee96db9d49db2f0336"}}, &(0x7f00000001c0)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "75091b949e8f3dbe980c342b447569266466c22b9c98434700b078b29211797cfc91d1805865ed9c33b95a880123ef78a15cb61cfdbe365668d49ba9c632375f301a0812f0bd928da01b9e3c72abb5a1a0bb06ee1685791307f5"}}, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "bb"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x3f, 0x1, {0x22, 0xc2b}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x0, 0x93, "449a218a5da12b4e4d82dfce691d7fe9172707ac8dea8e1ceb98ded016ff15120701bf7f48caa27101a14b4b90a135addd8a9933fdaac71ee1d687cede65ffc0f0713f749db0da2c448387e2a7d51d378b7a58b49e0343441363c350e6edbce4e1549484ff9f6c53a1e6037305b84546745873ebb35ee622fc7d2a2d1d43ce4d432e75b7f6f1dec38219072649cab1d89dba70"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000440)={0x20, 0x1, 0x23, "b182203df82e8d8c51165d77315d51fc26eb378b24f0174635efa96afc59ae6ef75f0b"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x81}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00d84d0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x2}) (async) 07:20:21 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1776.492834][ T5084] usb 1-1: new high-speed USB device number 85 using dummy_hcd 07:20:21 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1776.601871][ T3461] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1776.612442][ T3461] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1776.665088][ T3463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1776.718534][ T3463] device team23 entered promiscuous mode [ 1776.725435][ T3463] 8021q: adding VLAN 0 to HW filter on device team23 [ 1776.893847][ T5084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.905470][ T5084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.917319][ T5084] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1776.922682][T32099] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1776.930830][ T5084] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1776.947438][ T5084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.208690][ T5084] usb 1-1: config 0 descriptor?? [ 1777.353042][T32099] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.364885][T32099] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1777.374370][T32099] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="0500a30b0000c6181649d05413e9327661370d"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@deltaction={0x18c, 0x31, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2c8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x771}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x100400c0}, 0x800) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket(0x18, 0x2, 0x8) open(&(0x7f00000005c0)='./file0\x00', 0x600c0, 0x11) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000440)={@mcast1, 0x0, r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000040)={@private0, 0x0, r6}) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001d0008002abd7000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0800000108000800", @ANYRES32=r6, @ANYBLOB="ecb7a46ed55d2cf1bf90168a7afba9ab8833522c47a51a322bc2abdce7366cad651a39246bef1e70d205b68d66a1ab193cca669139c29d6d8c4a3576daffca5a2d1c817fcd25e8b1f09c9b3a2f4ac826050eb8a0395d0efba2514a1af2a875f1ad7fb0a3162bf2bd1c074bfd159fd1de8102a154749f200055a24d88bb04cab16497d19852b68ab2aaecdace1d38c59649f7d4914756ae5f82daff2955c2abb994e0be37020b04307c3e1b69946e6a8f17eec7464a4bbabaae7a68f093bb8972e9ccf38c3df87081797da9122bf344b620686edd65259071dbf8666102053ef6f04b323cae9e2425bff66a751fda579e7330838a1c90a783cd"], 0x24}, 0x1, 0x0, 0x0, 0x50000}, 0x20000800) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1777.718341][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.723165][T32099] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1777.728337][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.739833][T32099] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1777.743242][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.743372][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.743494][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.743623][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.743747][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.752275][T32099] usb 4-1: Product: syz [ 1777.759732][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.759870][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.767349][T32099] usb 4-1: Manufacturer: syz [ 1777.774880][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.782331][T32099] usb 4-1: SerialNumber: syz [ 1777.789762][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.833879][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.841531][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.849260][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1777.857021][ T5084] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 07:20:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) (async, rerun: 32) r5 = accept$phonet_pipe(r4, 0x0, &(0x7f0000000100)) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x59, 0x8, "e350d3088eb0f8b79d77ac6a98764b474054bbca869feee1af9d03c6654f7c16f7323ec9a618196c71e9aac09493b5f62d361c3b84921ebf65a2499457020c91efa8371f5ab6a683989b788e0e3bf7f380f5572249"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x15a8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1550, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "5bbd57d005af93ee227614366fad00dc43fa7747baf2e4b168400c916461ecf3e067499da96784bcf8c8132085b638e2261e8b9fc023a2a13feed3ce42480f7caffda4ea0873696b53e1012e52e915e1cba9689dfea8762e8a41f6aa8cb8c88dc719add30cae6f67df28ffce431e5c9a33df4ceb1cef5a0e0565d3878d831da24a7b29a524731f40617058d2cc8ac96ad94e73bcd42d5bb1b4e1509f4c29307313827e1a9c80ab71f1b6100665edb076aefbb18ab969c1b02b2efd5c386b10aba0ad308200ad2772c5a0844d6442093f8b2867c2"}]}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "b797d8413301597ad4081f8c26c9562bf7d56eec4450532b6fdf26eff3e1654f176db721aed10c61f07f3b8eca3cf9e66f7f1b51eb86fbdcca0b5efaa7542e12a325d75179534be18ce9889bc337e8f9886b6e7684959ce879131b120b698c41224a240b8f833f9293897ea0c996a73b61727c4935e5611a572217d60d6513c7016011c9eae7727a1710e2317b6ad1f9650530ff12d4881b438ab53892573e5ce108fa21b0e09c8a9a1b29ccf3504f66bd9d2dc4bc0783411a73"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "19fc2d2aa9ce32f3d4c905f9024f7a61f07085101a1a"}, @NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "245098a96e8286983cfd9d88284bc411e065031555a7e0341bba86595685544a132cc0fb3ff58a0420e8028cca4189d1274b24ba8dac740559da7989d272f2f5661eb46c684af0f4f780891a938d1d22d0047496cf747ac3dd06ccf9ea1bfa4fcdfe406784103523c8d94a3db6985d10d880f88a5f593a50b710fedc3973826fb0c043e2660d96abe3f632dfa97901fa4280047b3aa12d3e1b7b971ec94c4ee478503cce374e46ba65f00afcd759"}]}, {0x11b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "d9cd4ecea8795944130c9dd5be498f218300949ae1d3823ec989eff70f3b5fcb16ba4117cc3071ef94fb7554da9d7f949f55788d7d30d19088350dc489e6f236954ca0a8d6b3696a2ea260bfb3a46cb44e0fbed77898093356fe7cf60f09b6df4718b2ce70383121c7746d28736bfe8594d4cc135982a5c5e1a14bdf42b33494fb850be4de0a7c983ddaca941162b5cf89743b5d2b5bb6164ae36ac5825c04a220374b158ecb4a43ca151a1dd9bccd1d91f561ad2206ff3056d80788e4c7dd7f71227fe9"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x55, 0x1, "add0bf580d6bf2e0ab7ed6df2f4843d3634562d3572e1ea83f4b8bb16ba70c231d206615c74729b98db677c03d920476fd2e4ac811acd282baee6581f4b11f6274f0aae8a16a66882f5adf583bc64cb37c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}]}, @NFTA_DATA_VALUE={0x26, 0x1, "f415651172d4cd7df87a552be439692665d3e43086320aaec96a7c6f6c297303c324"}, @NFTA_DATA_VERDICT={0x4}]}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x101}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2d}]}], {0x14}}, 0x1780}, 0x1, 0x0, 0x0, 0x1}, 0x80) signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async, rerun: 64) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (rerun: 64) [ 1777.919818][ T3448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.929981][ T3448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.029093][T32099] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1778.040199][T32099] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:23 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:23 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:23 executing program 0: syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1d91c0, 0x0) [ 1778.301123][ T5147] usb 4-1: USB disconnect, device number 11 [ 1778.844858][ T5084] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 1778.965284][ T5084] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1779.277498][ T5084] usb 1-1: USB disconnect, device number 85 [ 1779.319804][ T3484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1779.335914][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1779.437781][ T3490] device team23 entered promiscuous mode [ 1779.444856][ T3490] 8021q: adding VLAN 0 to HW filter on device team23 [ 1779.490557][ T3493] team0: Port device vlan12 added 07:20:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x2c) sendto$inet6(r3, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(r3) 07:20:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4004000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01f80000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xdc}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) r5 = accept$phonet_pipe(r4, 0x0, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x59, 0x8, "e350d3088eb0f8b79d77ac6a98764b474054bbca869feee1af9d03c6654f7c16f7323ec9a618196c71e9aac09493b5f62d361c3b84921ebf65a2499457020c91efa8371f5ab6a683989b788e0e3bf7f380f5572249"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x15a8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1550, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "5bbd57d005af93ee227614366fad00dc43fa7747baf2e4b168400c916461ecf3e067499da96784bcf8c8132085b638e2261e8b9fc023a2a13feed3ce42480f7caffda4ea0873696b53e1012e52e915e1cba9689dfea8762e8a41f6aa8cb8c88dc719add30cae6f67df28ffce431e5c9a33df4ceb1cef5a0e0565d3878d831da24a7b29a524731f40617058d2cc8ac96ad94e73bcd42d5bb1b4e1509f4c29307313827e1a9c80ab71f1b6100665edb076aefbb18ab969c1b02b2efd5c386b10aba0ad308200ad2772c5a0844d6442093f8b2867c2"}]}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "b797d8413301597ad4081f8c26c9562bf7d56eec4450532b6fdf26eff3e1654f176db721aed10c61f07f3b8eca3cf9e66f7f1b51eb86fbdcca0b5efaa7542e12a325d75179534be18ce9889bc337e8f9886b6e7684959ce879131b120b698c41224a240b8f833f9293897ea0c996a73b61727c4935e5611a572217d60d6513c7016011c9eae7727a1710e2317b6ad1f9650530ff12d4881b438ab53892573e5ce108fa21b0e09c8a9a1b29ccf3504f66bd9d2dc4bc0783411a73"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "19fc2d2aa9ce32f3d4c905f9024f7a61f07085101a1a"}, @NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "245098a96e8286983cfd9d88284bc411e065031555a7e0341bba86595685544a132cc0fb3ff58a0420e8028cca4189d1274b24ba8dac740559da7989d272f2f5661eb46c684af0f4f780891a938d1d22d0047496cf747ac3dd06ccf9ea1bfa4fcdfe406784103523c8d94a3db6985d10d880f88a5f593a50b710fedc3973826fb0c043e2660d96abe3f632dfa97901fa4280047b3aa12d3e1b7b971ec94c4ee478503cce374e46ba65f00afcd759"}]}, {0x11b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "d9cd4ecea8795944130c9dd5be498f218300949ae1d3823ec989eff70f3b5fcb16ba4117cc3071ef94fb7554da9d7f949f55788d7d30d19088350dc489e6f236954ca0a8d6b3696a2ea260bfb3a46cb44e0fbed77898093356fe7cf60f09b6df4718b2ce70383121c7746d28736bfe8594d4cc135982a5c5e1a14bdf42b33494fb850be4de0a7c983ddaca941162b5cf89743b5d2b5bb6164ae36ac5825c04a220374b158ecb4a43ca151a1dd9bccd1d91f561ad2206ff3056d80788e4c7dd7f71227fe9"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x55, 0x1, "add0bf580d6bf2e0ab7ed6df2f4843d3634562d3572e1ea83f4b8bb16ba70c231d206615c74729b98db677c03d920476fd2e4ac811acd282baee6581f4b11f6274f0aae8a16a66882f5adf583bc64cb37c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "f216f2004ebd48306eb81422a44e7fcb70465f70737c75dc6fd6f3794b95edfc2192273faa958352546ebc7f99dcfb9e7909eb826788cf4f10dee059f7f92d4b4fa42b7ce64175d0e30c50ac4fbfb865f05ebf59a12b498310266e304e581fbdfb51f4775376e87ab6f83633bf2b95ce928d05b0e00b3b6309bac103ae6716c48a8b7b6bf539b9dfbb732af44f8c09b4c34de67b8416f7761e791b12d0c8cfb585c8bb2df184e5ce6905a04902aae0abff016b4f1746cc7bab618551b7e26dc42d31638fd4bb69bbc6421405a6b6bd3cb5542341bd9114210d1e60a06b9101e957f7a9310fdf07df535b757f879648fa193d1fde6f7dcc0aa34040148d40bfddfc65851eb8268a94f42cd6a3e2b992ba9a3ca513834f51e212423a53ec2d3e76daaca62a862ebe8da99f47e20e470a41d7bf11bbdeff0d10d0853f4d07cee9bf275ffc2217b3287726c3474b879959edfff411e0caf6ff4d487c1683024e3cae75fa149ea1b9de18f3495890f8c2c6473066507a0b2743fbd4389dfb146177751146c199ab66171f4113365a408932abd5ec414bf56a74160b1729403f33f6ce371f51899cbb620c05eac45fdce5e3ec8e4295d8bfe6e593f17004d19fdab26990c6dfebc039c5b51562eb33dacff9f3e7beac12754184e77f9ddd34a51089162cb04f1ea5a7926b6c1b7a92a0ab9c06c77e1b332bc24ebcb29d1db8db225f269e8e0a28f551cb1db874ff9921f933a0897b3b644e00695df83a8fa9fa11d83af9e5c7577f2b5b750032a8501a3457f704902467671933358ad8ea0ff3ba1a8dfbc52493b08f1f7085c03028ef723571ee823f545dddffdbf48592f4406c754c03f1f4609d13276d055d9ebad28119adf5d46a881b16964deee7c3a325e5bee8d958a5fa0f8f7a976990b837d80f00f17ffcc828217bb527fe226c2d536ed5824f0169288c6a3a58235bc47900f798e62df679f2b5e63e7233741b12b8fba2de3e82bae84fa7619b8b27a4c4fc35a944f69577bff7fc9dcf70d7659a9af193837f632aa24b2e21405baa912cc0aec54c64122cd3359d1eb1e5882e4a5b6f6021ce83ac0db71191b8c253e61f62bcce5e270ade216fc1cd767f3ec5b77b8ebd60d1ec0a1020b7bc30a00c40355fb84d8d8e1c2685e8934c699360d313e11c1daeeeadc133466ef98690005871a63bb533ca1ba493107d9ac2b1c6d5be68ae5032d774a0f87ae872f408ca2874add2260f88a80577b0eff539af40b08be810f8f3599cfef1b7daa340ed35c9d1eb302795a8eb1483fa1da04a1da9ddc005c1cf28517b1ee0dc4af2dbeb456df4c7ad5bd47661e2341e8bb883d439dfc6c73da60ee042951aac94fe32bc8b0413d47e43d3448efcc50f92a235d42923b82674aaba8bb72f22250e1cdfe2a731a624cd9c6970c1ae1f0cc0452c5785ebd05fb67dfc6cb59cc98f97a9239ba9e70a303e5cee63635c6bf39da48229c62486fa15255e2506f59f5b3577e2d96b71a0867482a41e7dfe7f52a59f3ccd7e40e545e9cf793edd3bcc2c7bffb8850df373be7e22e52d0ae1edf5952bac23aeb83394066254c2d44499e5db9b5237b05ff6b79b4ed9ad13d9eff9e4466a2e97742285860d1ff4500084a30b64f66c5890cbbf3f08fd837d03660aea0f2d18d745bd8c05bd235bcc7ec413198e250b4dd1cc323b33beaa90cf7cbddb26e6607d39ad603cf95ec56ac2804745f9bee073f4b248e0ea9ce34bcab13043e1ed197f2f29f892671d2be9890c558a2a0cc58c60fbc8266529b753e0519ddb351a024ed58514f94fec6bdae93b8a471869881bfeecc8f89dabf3e5a852b0ce0add97b7bb9f06d31c9b711e4cab1355392fa9cd8b21bba4591bf39cc6ec9bf904e7ba3f050c921af80208481f4aae74e5fae75faa00940b35338c6ab170694a2de541b3574ee31f9ff168da1798ff864dedff0acd1bef6265895ea1f6b45ab2521a90fd67da8574fc1fc5b723faa6b614e6766ecdd4dad3149c3b1bd5e918ef75f7563f6c72e8ddeef7ab45b04ad40470a02d7048ebf94239873fff608f42addc3febe00b3a7b826d0a334b88496430d02fb188f2e780864c8207cbe2726f3d7fa9fe91fedcc240d34438e23c818bd483ce22e3511a5920280f083f6d8329f5d547b6a34c66bd974eb6a4d533bc9b90b6205f70439c3270cdc54e4d0e08c742caeca367e2c5296f077eed89ff55e6ae00c7689bca901e49a660296ee35c3eb68a0d58cd86b295665ee4d322bfecfab7d8e78eece529d92f8369c3b6672c0af4a03d80d2300ab71208a1e929334108136dc98e29be888c400e0355c5450b35a30877b42490c73015c18a90544051e9d1952b85019dee4f08191a9dc437769f45f3e264b65412bda94d527977e8026517a8fb0549b32bf00bc21b018c33a5df00b0944ee6a4dcf15b96fc5c8398466bddff13ef4ad7c2d5c95b1a1d0c3a822eaa9affc725ab786e8da540d2084f857ed433eb018f5cbe1ccb3e57c13c48476b9a029ca567a0de20174383dc8704809db81be095876f7ea1f156f9467452f198c277179e991ea3d92ccf932f11ce554dc001ab5f971a2aa6140ceac9b73a3098c79c1a4697c5c3238667d24ab37a39e668c25099b9c84ed8fa8f1638b3735dc830d2db356371fa22281bef43adf2f273225d29587ebef90355bdfb86927be30f13f005804ac8c55ba9db7f21a17059606ed3b2443f454c6c8a30b5275740db4beeb9506a8a0d3008470a2163bd0ee5ea8440da410fb7e91ef2dddabc2be7514d92fce9af5d98974a90fc2bf51924322c2dedaf9e1c02943f57e5f59d5238f3f9bdf78f1057255d37d2e920d24107e0384291106e94fa864c8229e15ca8f16774f4cc8a2a6d02449b0ac2e99d71861c4bdc3b300dee539a20599e83833d17462d79f706c1a1c1ea010ffc8944cfbeb62168f128a090819e2926aed75e11833e93cc69ff3c5e74dc6b795845cc0639c5041c96befd98b21fe34b966f12b837a42ebcb079f3e61f86e627b034eb6b6f0fed7e50314b7800a46bf0ed6a3d51b5b9343e0f01913b44e8690ad3aa8486e7629210da59a04adae70f020a05ee05fdae0feb7b2c7fcaf2dab2ca6f03d7e7443b9324d5473d50b4e65f8cb0ced8cbe919da8bc1c0ac711a6efc2694c603f06cf065bb5b8b126ee525d8589451f03b255ad634a4a1d42fe333a901e27649dda422c58fe87d91ae46746551ec86e409b8a6262b25f6c6c2a7b73099d4a35844aa567f1cefd1d4de98f34f5e26c375d017651cfb708916b2cb44f5b755fb071c8382242c8de751986397b45c2919967e51ec61bb67b94e4b08ef2bcf6781dfae970212c6b86b8f991c90a8a9d11981154da56006b93c269e77d23627cf72f71738d45d4a9c45006365c1783c21f7a93e5d08d26496efcb691cdad03a831c7b0ba7027a35e96f98ab65eafd75f59d62beb680292f2a21f0660efd6e76d455b8693fe417d23b15e54819cad542e0a7b64b440c6b65ff0babaf4bd70e7b7bf37bcbbd5c3b37b41a3f6b6b1dc3b9211b587fd47c0355c0dcd5db3340ceb3d8b5f3619486c8a9e6e8e1197b50bdd9b609cd8ab9ef107edf53089ede4ebb70735043f3eea32a660566057dacc5aa0d7491ce4096f7e97c069f2f6c75e3834c8a1cdd990343920aab0ea519460b9cdbadf34d3f0f7c3f1bbc9e3f76f59b699d7dfc5b9d5f892ff2ccd64d48d1547255b1c329d1150bf6de51e2d992deb89b6a926e8b083298819b37c62b7938982cd5aa52af0e5e654e54505ee6c24e66d074c665c767f47f70c38d367f4c0746007f12e22eff493acfe43526cd0d88d06455bbc2a49c84bb9cc0ed28baa385f14904e5e70def0e6da0c74b2ffc05cefff28677cc13265b328bbc974a84ac53b6c7fce5b8453084f29a4b3845558354d4289764a6a140e1678cddaf6026b0c34243d8b9c7bbf110a47144d566b3d3f42e1a2cdd8ef112c54c13e6c61da4bc853ddb6c3e4b1b2c0cc82eec26b2d81feca8eb3ed478823b30fbb24407190d14914d3c179e7b5702f3d97837ac7f3e894cf00c7e51f6d0f261d40c28984d4c85ea5bec56236205144485b554e89399f40002ee47f80a07d3279528e6b025c172852e16c12e073fa36e4f94f2254d78f6be2e4f82d0b16f33918292dc3ba1f74a5a02c3fa8e5de41853563bd87cdc82883c33156700f190c6015c01874fc5bfea9e307a366f3dd7f142e4c256fd14c63175bb191876ddfe45c46bb73d0d4c9261c6463c137d200b702f2d9621ab62b4a08624f14b1861c3ed33fe2784bad1f0bb6e51491d35c76557c00b96b7ffa0c735ad31b8172e7130fad62776ad5abaaecc9ec971fbd494d9351e31b112f271ccef9494b85660b917d9894800e306661e433db0620d592df757b734517220ddf54055600114cd91ddec88bc835f1f8d99bad90acac2871f808ae17253ec7ca0ec2ad4a6cb5fa76656f4b76eecbabaee1145baaa0f63d9c74b9dcb10112f85df913755087aa1de0ba142e701593f01ca66bf025a09fd751ef17eb0d19e4e7a7b18ede5c49f40f6e9fb43a2824807aeca2554ddaf88c72a29c2a6d1f73b526a29579da2399a0ca4fb45098ac480f91c288dffc9a190c46b26eb5cab12bf089cf40fe0c796bb02794487fff09ff124582bafbce687a3032e47600d2703e25daa87de788cd3a704dfd964ea135dcc84dfb9434c26f6359efe3b613e6876efc1dc56bf7dcb914fe8c8e7bb3568a9ed495d761d1fa55c909e0ea6ea9bcb249339285cea73176548c6b4fb6dd9bf431200d3478db8829838badc8882ed90f90158c5d3618de9f436a750793146d6f5591909205d7168af1309abc29362bde55a136d930efdeea5e9e3db5c027b997d55194993f42285911f181c350d941c5f3805bf3f54b3af0ed85bf346105253bcf9379cc6000348d21ac3a3fbfd3fc957d7319a47be2556ccf681d232fdea3bfadeeb772c9bdcccb9fbc814e39fb3581eb6a546951f4b2e19236075da597ddf3deefbaa933f69e38a91495f5d5ddb552b786e00dab4eceffceea4f5bf0d616a298b32226a717da806091741b6cba6ced5b3c998a6eab807400fac7bfd8025aa20b4fd0e6eb786c408a5cd09d358ea63ffcb99ab1117a44497a8a9ffd2931d9af3a84d0b191759c561837d8e19532ee556fb11a09a7c3bea3bb0672c0c82581507a75b1374a000575af00b3b2aaf4f7788084b8bd50ff106200573c3c29c1cabbec961798bd64bae50b34211d3b4b9afeaf076f73ed3498286a6ecaaf92295519fbe589358fa2ebd79d0607b74d0f1c5a7a876d889f0d4a91431c22af9f0b5adb5129120ab8d78d0662fd0481dd0c8fb4d2a64cb0963f0e4465ad9d3b52686b5b15eb770ad5421a63816987e6759094e7d8c6876c280252d82cb87335ba1ff5e9e322738262f919b78c419cdb765df59a57cf55b7a0714b64313ad1287bf556b4fced0f226a6b35a97047bd2675a2c38692950f11d4f7f1c7f0a1e1191d3488a542323c55bcdfd2be79ad6f160e0bb207d5153d5ea92a42c6c656257f203668cb1dbdacae3e6a3321fd9afa28d4bebcf04c983b2d3f16c91a743b8f2f65f17f965d166c1a9f5b54d96bf141aad5e67403ef8f1bd63feeeb1f617673e7ead73fdc1ebc4be85f656e2bb4182752de7b38f52f8842bf5e6e323f42121d9adbaa6e71ec0b29635fa5983bd1ddd85bd5bad9b08c87f252ea97b1eb9490a2c4a986946506673f7bf2be882045f770fe14a42e6edb71ef7c560042f7f9309df8e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}]}, @NFTA_DATA_VALUE={0x26, 0x1, "f415651172d4cd7df87a552be439692665d3e43086320aaec96a7c6f6c297303c324"}, @NFTA_DATA_VERDICT={0x4}]}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x101}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2d}]}], {0x14}}, 0x1780}, 0x1, 0x0, 0x0, 0x1}, 0x80) signalfd(r5, &(0x7f0000000140)={[0x1]}, 0x8) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 07:20:24 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1779.866305][ T3497] team0: Port device vlan12 removed 07:20:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="0500a30b0000c6181649d05413e9327661370d"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async, rerun: 32) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@deltaction={0x18c, 0x31, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2c8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x771}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x100400c0}, 0x800) (async, rerun: 64) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) r7 = socket(0x18, 0x2, 0x8) (async, rerun: 32) open(&(0x7f00000005c0)='./file0\x00', 0x600c0, 0x11) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000440)={@mcast1, 0x0, r10}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) (async) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000040)={@private0, 0x0, r6}) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001d0008002abd7000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0800000108000800", @ANYRES32=r6, @ANYBLOB="ecb7a46ed55d2cf1bf90168a7afba9ab8833522c47a51a322bc2abdce7366cad651a39246bef1e70d205b68d66a1ab193cca669139c29d6d8c4a3576daffca5a2d1c817fcd25e8b1f09c9b3a2f4ac826050eb8a0395d0efba2514a1af2a875f1ad7fb0a3162bf2bd1c074bfd159fd1de8102a154749f200055a24d88bb04cab16497d19852b68ab2aaecdace1d38c59649f7d4914756ae5f82daff2955c2abb994e0be37020b04307c3e1b69946e6a8f17eec7464a4bbabaae7a68f093bb8972e9ccf38c3df87081797da9122bf344b620686edd65259071dbf8666102053ef6f04b323cae9e2425bff66a751fda579e7330838a1c90a783cd"], 0x24}, 0x1, 0x0, 0x0, 0x50000}, 0x20000800) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 07:20:25 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) getdents(r0, 0x0, 0x0) [ 1780.262543][ T5147] usb 4-1: new high-speed USB device number 12 using dummy_hcd 07:20:25 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1780.622868][ T5147] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.634407][ T5147] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1780.643852][ T5147] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:25 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:25 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) getdents(r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4800) (async) getdents(r0, 0x0, 0x0) (async) [ 1781.006863][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1781.032786][ T5147] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1781.042296][ T5147] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1781.051116][ T5147] usb 4-1: Product: syz [ 1781.055566][ T3522] device team23 entered promiscuous mode [ 1781.056553][ T3522] 8021q: adding VLAN 0 to HW filter on device team23 [ 1781.070571][ T5147] usb 4-1: Manufacturer: syz [ 1781.075627][ T5147] usb 4-1: SerialNumber: syz 07:20:26 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000020002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="0500a30b0000c6181649d05413e9327661370d"], 0x44}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@deltaction={0x18c, 0x31, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2c8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x771}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x100400c0}, 0x800) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket(0x18, 0x2, 0x8) (async) open(&(0x7f00000005c0)='./file0\x00', 0x600c0, 0x11) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000440)={@mcast1, 0x0, r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) (async) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000040)={@private0, 0x0, r6}) (async) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001d0008002abd7000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0800000108000800", @ANYRES32=r6, @ANYBLOB="ecb7a46ed55d2cf1bf90168a7afba9ab8833522c47a51a322bc2abdce7366cad651a39246bef1e70d205b68d66a1ab193cca669139c29d6d8c4a3576daffca5a2d1c817fcd25e8b1f09c9b3a2f4ac826050eb8a0395d0efba2514a1af2a875f1ad7fb0a3162bf2bd1c074bfd159fd1de8102a154749f200055a24d88bb04cab16497d19852b68ab2aaecdace1d38c59649f7d4914756ae5f82daff2955c2abb994e0be37020b04307c3e1b69946e6a8f17eec7464a4bbabaae7a68f093bb8972e9ccf38c3df87081797da9122bf344b620686edd65259071dbf8666102053ef6f04b323cae9e2425bff66a751fda579e7330838a1c90a783cd"], 0x24}, 0x1, 0x0, 0x0, 0x50000}, 0x20000800) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 1781.250533][ T5147] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1781.256874][ T5147] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:26 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) getdents(r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4800) (async) getdents(r0, 0x0, 0x0) (async) [ 1781.510678][ T5147] usb 4-1: USB disconnect, device number 12 [ 1781.674682][ T3522] team0: Port device vlan12 added [ 1781.996653][ T3531] team0: Port device vlan12 removed 07:20:29 executing program 0: syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1d91c0, 0x0) 07:20:29 executing program 1: unshare(0x6c060000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x202, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty=0xfe000000}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gre0\x00', 0x0, 0x0, 0xb77}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000400)="1a003c9e000002000000", 0xa) r3 = socket(0x2, 0x2, 0x4000004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[], 0x2bb98205) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000200)=0x80000001, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x82, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {r8, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYBLOB="0900ee008375c96cc2fc0cfb193281e26a9f572bd794f5543eb880dff10255c19e45a3e7ae84f882bf4491b1f064162edeb33e3454210100008000000000e882dde1924f45201903c09fe5e1e0d45f83378669520c2ddf379333bbdec6252f79069b1bace1c4bb8fda1a9e73736f210027c30c01b0cd5eba54c2441cb56056e592a607b44aa841747827b345a41d8184dd379b93fdbd2f0285abb179b2a59e6c325d9ee25dabbd402e4059c9464238dc6aa21991dfe77b68469fbf6b093ad1358a46ef3b90196f36c560551e2afea7e2fb24c9860e8c718a5676"], 0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 07:20:29 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:29 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x6013fb82782520b7}, 0x4000080) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x132, 0xffffffffffffffff, 0x8000000) socket$unix(0x1, 0x0, 0x0) 07:20:29 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:29 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1784.902615][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1784.953425][ T3546] device team23 entered promiscuous mode [ 1784.960101][ T3546] 8021q: adding VLAN 0 to HW filter on device team23 [ 1785.149308][ T3546] team0: Port device vlan12 added 07:20:30 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x6013fb82782520b7}, 0x4000080) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x132, 0xffffffffffffffff, 0x8000000) socket$unix(0x1, 0x0, 0x0) [ 1785.172876][ T5100] usb 4-1: new high-speed USB device number 13 using dummy_hcd 07:20:30 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:30 executing program 0: syz_clone(0x60002000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1d91c0, 0x0) [ 1785.503549][ T3546] team0: Port device vlan12 removed [ 1785.552907][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.564480][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1785.573811][ T5100] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:30 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x6013fb82782520b7}, 0x4000080) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x132, 0xffffffffffffffff, 0x8000000) (async) socket$unix(0x1, 0x0, 0x0) [ 1785.813443][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1785.825042][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1785.833967][ T5100] usb 4-1: Product: syz [ 1785.838341][ T5100] usb 4-1: Manufacturer: syz [ 1785.843248][ T5100] usb 4-1: SerialNumber: syz 07:20:31 executing program 1: unshare(0x6c060000) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x202, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty=0xfe000000}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gre0\x00', 0x0, 0x0, 0xb77}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000400)="1a003c9e000002000000", 0xa) r3 = socket(0x2, 0x2, 0x4000004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r7 = socket$inet(0x2, 0x80001, 0x84) (async) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000200)=0x80000001, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x82, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {r8, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYBLOB="0900ee008375c96cc2fc0cfb193281e26a9f572bd794f5543eb880dff10255c19e45a3e7ae84f882bf4491b1f064162edeb33e3454210100008000000000e882dde1924f45201903c09fe5e1e0d45f83378669520c2ddf379333bbdec6252f79069b1bace1c4bb8fda1a9e73736f210027c30c01b0cd5eba54c2441cb56056e592a607b44aa841747827b345a41d8184dd379b93fdbd2f0285abb179b2a59e6c325d9ee25dabbd402e4059c9464238dc6aa21991dfe77b68469fbf6b093ad1358a46ef3b90196f36c560551e2afea7e2fb24c9860e8c718a5676"], 0xf6) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 07:20:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x0, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:31 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1786.176078][ T5100] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1786.183195][ T5100] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000e00)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r1) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xd8, {0xd8, 0xd, "8af8aedfaf4c0619d91e9eb1d660bebb13efa463b0140408973a1dcb4f3bc5eed2d4a461c579a48a79fdec88587bf189ce192acffe26f5a0d959ad536c1916b0ff9d3b25f1371d54d0d87a0e4697a948b0c5a89e938b48eb1d8ae8283ee0645a986b3cb7b42115ead5a6cb1adac8af8e5114ab8c47d2d75010265d98dd5f47069955b772468f3d7e0bcde354ca8e44de3f3a5cfda1f094b1c6556cf199922e2b022086dc3061ce57e1dda2274ee936e198637cec857537d5d3f6a9c01ee18029b1f0e8a77b076fef3fdd57d2308702569059399be7b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x76, "6e83edfd5239982e59b95edcabca3fe60f1abd08446777cba8dcb26ef358b80e3330877556c2a506e7acc61df30f025fae45dd736cb37b3119d58e67a841f17cda4e05133881d9706b30fae2472caa3fb92c8f2db8dae947550242c4fbbbd11a50144c1e6c2e4b3cd61f7a0d3c54f215dc54966e5854"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1786.417628][ T5091] usb 4-1: USB disconnect, device number 13 [ 1786.474331][ T3583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1786.540887][ T3583] device team23 entered promiscuous mode [ 1786.547793][ T3583] 8021q: adding VLAN 0 to HW filter on device team23 07:20:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600000000fe6180ff1d2b000c8c859d0b39ef80a76ac01bd643cfb152a48697963f9151bf0d1a705a816c21a77deafc685f9c1c859e938bd1d6ed31afbd2b065b7ef1c523b84880e97c8f2d0b0f16e318cdf11ba8984ef03749", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64001a00000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket(0x18, 0x2, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000440)={@mcast1, 0x0, r10}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delchain={0x2c, 0x65, 0x903, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {0xf, 0x2}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x5840) [ 1786.686461][ T3578] team0: Port device vlan12 added 07:20:31 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1786.732512][ T5147] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1787.077532][ T3583] team0: Port device vlan12 removed [ 1787.133122][ T5147] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 1787.142869][ T5147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.184650][ T5147] usb 6-1: config 0 descriptor?? [ 1787.236145][ T5147] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 1787.407201][ T3591] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 07:20:32 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x0, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1787.682976][ T5147] cpia1 6-1:0.0: unexpected state after lo power cmd: 01 [ 1787.786010][ T3599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1787.838232][ T3599] device team23 entered promiscuous mode [ 1787.845078][ T3599] 8021q: adding VLAN 0 to HW filter on device team23 07:20:32 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:32 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002"], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600000000fe6180ff1d2b000c8c859d0b39ef80a76ac01bd643cfb152a48697963f9151bf0d1a705a816c21a77deafc685f9c1c859e938bd1d6ed31afbd2b065b7ef1c523b84880e97c8f2d0b0f16e318cdf11ba8984ef03749", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64001a00000c0002000800010001"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket(0x18, 0x2, 0x8) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) (async, rerun: 32) r9 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000440)={@mcast1, 0x0, r10}) (async, rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delchain={0x2c, 0x65, 0x903, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {0xf, 0x2}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x5840) [ 1788.030066][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1788.046103][ T3603] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 07:20:33 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002"], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1788.317466][ T3608] team0: Port device vlan12 added [ 1788.329595][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.342476][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:20:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600000000fe6180ff1d2b000c8c859d0b39ef80a76ac01bd643cfb152a48697963f9151bf0d1a705a816c21a77deafc685f9c1c859e938bd1d6ed31afbd2b065b7ef1c523b84880e97c8f2d0b0f16e318cdf11ba8984ef03749", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64001a00000c0002000800010001"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket(0x18, 0x2, 0x8) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000440)={@mcast1, 0x0, r10}) (async, rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delchain={0x2c, 0x65, 0x903, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x10}, {0xf, 0x2}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x5840) [ 1788.563140][T32099] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1788.662139][ T3599] team0: Port device vlan12 removed [ 1788.815769][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1788.822992][ T5147] cpia1 6-1:0.0: unexpected state after lo power cmd: 1a [ 1788.832495][ T5147] cpia1 6-1:0.0: unexpected systemstate: 1a [ 1788.934743][ T3616] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1788.963046][T32099] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.974097][T32099] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1788.983618][T32099] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.067880][ T5147] usb 6-1: USB disconnect, device number 15 [ 1789.294795][T32099] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1789.308864][T32099] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1789.318134][T32099] usb 4-1: Product: syz [ 1789.322631][T32099] usb 4-1: Manufacturer: syz [ 1789.327425][T32099] usb 4-1: SerialNumber: syz [ 1789.392241][T32099] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1789.398482][T32099] cdc_wdm 4-1:21.0: Unknown control protocol [ 1789.751898][ T5147] usb 4-1: USB disconnect, device number 14 [ 1789.752290][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1789.765255][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1789.771825][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1789.781853][ T3610] cdc_wdm 4-1:21.0: Tx URB error: -19 07:20:35 executing program 1: unshare(0x6c060000) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x202, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty=0xfe000000}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gre0\x00', 0x0, 0x0, 0xb77}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000400)="1a003c9e000002000000", 0xa) (async) r3 = socket(0x2, 0x2, 0x4000004) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000200)=ANY=[], 0x2bb98205) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r7 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000200)=0x80000001, 0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x82, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {r8, @in6={{0xa, 0x0, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYBLOB="0900ee008375c96cc2fc0cfb193281e26a9f572bd794f5543eb880dff10255c19e45a3e7ae84f882bf4491b1f064162edeb33e3454210100008000000000e882dde1924f45201903c09fe5e1e0d45f83378669520c2ddf379333bbdec6252f79069b1bace1c4bb8fda1a9e73736f210027c30c01b0cd5eba54c2441cb56056e592a607b44aa841747827b345a41d8184dd379b93fdbd2f0285abb179b2a59e6c325d9ee25dabbd402e4059c9464238dc6aa21991dfe77b68469fbf6b093ad1358a46ef3b90196f36c560551e2afea7e2fb24c9860e8c718a5676"], 0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 07:20:35 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x0, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:35 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002"], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:35 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x18, {0x18, 0x0, "c012a23e16eba561f137f371d322cd9067a54f3a92c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 07:20:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000e00)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r1) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xd8, {0xd8, 0xd, "8af8aedfaf4c0619d91e9eb1d660bebb13efa463b0140408973a1dcb4f3bc5eed2d4a461c579a48a79fdec88587bf189ce192acffe26f5a0d959ad536c1916b0ff9d3b25f1371d54d0d87a0e4697a948b0c5a89e938b48eb1d8ae8283ee0645a986b3cb7b42115ead5a6cb1adac8af8e5114ab8c47d2d75010265d98dd5f47069955b772468f3d7e0bcde354ca8e44de3f3a5cfda1f094b1c6556cf199922e2b022086dc3061ce57e1dda2274ee936e198637cec857537d5d3f6a9c01ee18029b1f0e8a77b076fef3fdd57d2308702569059399be7b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x76, "6e83edfd5239982e59b95edcabca3fe60f1abd08446777cba8dcb26ef358b80e3330877556c2a506e7acc61df30f025fae45dd736cb37b3119d58e67a841f17cda4e05133881d9706b30fae2472caa3fb92c8f2db8dae947550242c4fbbbd11a50144c1e6c2e4b3cd61f7a0d3c54f215dc54966e5854"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000e00)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xd8, {0xd8, 0xd, "8af8aedfaf4c0619d91e9eb1d660bebb13efa463b0140408973a1dcb4f3bc5eed2d4a461c579a48a79fdec88587bf189ce192acffe26f5a0d959ad536c1916b0ff9d3b25f1371d54d0d87a0e4697a948b0c5a89e938b48eb1d8ae8283ee0645a986b3cb7b42115ead5a6cb1adac8af8e5114ab8c47d2d75010265d98dd5f47069955b772468f3d7e0bcde354ca8e44de3f3a5cfda1f094b1c6556cf199922e2b022086dc3061ce57e1dda2274ee936e198637cec857537d5d3f6a9c01ee18029b1f0e8a77b076fef3fdd57d2308702569059399be7b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x76, "6e83edfd5239982e59b95edcabca3fe60f1abd08446777cba8dcb26ef358b80e3330877556c2a506e7acc61df30f025fae45dd736cb37b3119d58e67a841f17cda4e05133881d9706b30fae2472caa3fb92c8f2db8dae947550242c4fbbbd11a50144c1e6c2e4b3cd61f7a0d3c54f215dc54966e5854"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 1791.030750][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1791.055075][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1791.198212][ T3630] device team23 entered promiscuous mode [ 1791.205111][ T3630] 8021q: adding VLAN 0 to HW filter on device team23 07:20:36 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1791.238671][T32099] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1791.302443][ T5100] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1791.433046][ T3633] team0: Port device vlan12 added 07:20:36 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1791.683561][T32099] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 1791.683632][ T5100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.693122][T32099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.703893][ T5100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.704079][ T5100] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1791.723878][ T5147] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1791.731338][ T5100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.777284][ T3630] team0: Port device vlan12 removed [ 1791.809338][ T5100] usb 1-1: config 0 descriptor?? [ 1791.839821][T32099] usb 6-1: config 0 descriptor?? [ 1791.920397][T32099] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 1791.958912][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:37 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x0, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:37 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1792.143281][ T5147] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.154009][ T5147] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1792.163946][ T5147] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.248299][ T3647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1792.301743][ T5100] itetech 0003:258A:6A88.0031: unknown main item tag 0x0 [ 1792.309308][ T5100] itetech 0003:258A:6A88.0031: collection stack underflow [ 1792.317135][ T5100] itetech 0003:258A:6A88.0031: item 0 0 0 12 parsing failed [ 1792.323575][T32099] cpia1 6-1:0.0: unexpected state after lo power cmd: 01 [ 1792.343551][ T5147] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1792.353476][ T5147] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1792.362978][ T5147] usb 4-1: Product: syz [ 1792.367521][ T5147] usb 4-1: Manufacturer: syz [ 1792.377100][ T5147] usb 4-1: SerialNumber: syz [ 1792.422651][ T5100] itetech: probe of 0003:258A:6A88.0031 failed with error -22 [ 1792.474145][ T3647] device team23 entered promiscuous mode [ 1792.481083][ T3647] 8021q: adding VLAN 0 to HW filter on device team23 [ 1792.496669][ T5147] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1792.502998][ T5147] cdc_wdm 4-1:21.0: Unknown control protocol [ 1792.553711][ T5100] usb 1-1: USB disconnect, device number 86 [ 1792.686889][ T3649] team0: Port device vlan12 added [ 1792.695319][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1792.784007][ T5091] usb 4-1: USB disconnect, device number 15 [ 1792.979658][ T3631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.990659][ T3631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:20:38 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:38 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x18, {0x18, 0x0, "c012a23e16eba561f137f371d322cd9067a54f3a92c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1793.229380][ T3653] team0: Port device vlan12 removed [ 1793.464962][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1793.573150][T32099] cpia1 6-1:0.0: unexpected state after lo power cmd: 1a [ 1793.580406][T32099] cpia1 6-1:0.0: unexpected systemstate: 1a 07:20:38 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x0, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1793.614649][ T5091] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1793.830953][ T3631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.840693][ T3631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.895618][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1793.946563][ T3666] device team23 entered promiscuous mode [ 1793.953456][ T3666] 8021q: adding VLAN 0 to HW filter on device team23 [ 1794.043028][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.054493][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1794.064727][ T5091] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1794.074116][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.130341][T32099] usb 6-1: USB disconnect, device number 16 [ 1794.194929][ T3666] team0: Port device vlan12 added [ 1794.265008][ T5091] usb 1-1: config 0 descriptor?? [ 1794.499660][ T3667] team0: Port device vlan12 removed [ 1794.561756][ T5091] itetech 0003:258A:6A88.0032: unknown main item tag 0x0 [ 1794.569537][ T5091] itetech 0003:258A:6A88.0032: collection stack underflow [ 1794.581874][ T5091] itetech 0003:258A:6A88.0032: item 0 0 0 12 parsing failed [ 1794.661023][ T5091] itetech: probe of 0003:258A:6A88.0032 failed with error -22 [ 1794.801606][T26356] usb 1-1: USB disconnect, device number 87 07:20:40 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:40 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:40 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa, 0xe1, 0xfe, 0x40, 0x553, 0x2, 0xb011, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0xad, 0x80}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000023c0)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000e00)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r1) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x0, 0x21, 0xd8, {0xd8, 0xd, "8af8aedfaf4c0619d91e9eb1d660bebb13efa463b0140408973a1dcb4f3bc5eed2d4a461c579a48a79fdec88587bf189ce192acffe26f5a0d959ad536c1916b0ff9d3b25f1371d54d0d87a0e4697a948b0c5a89e938b48eb1d8ae8283ee0645a986b3cb7b42115ead5a6cb1adac8af8e5114ab8c47d2d75010265d98dd5f47069955b772468f3d7e0bcde354ca8e44de3f3a5cfda1f094b1c6556cf199922e2b022086dc3061ce57e1dda2274ee936e198637cec857537d5d3f6a9c01ee18029b1f0e8a77b076fef3fdd57d2308702569059399be7b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x76, "6e83edfd5239982e59b95edcabca3fe60f1abd08446777cba8dcb26ef358b80e3330877556c2a506e7acc61df30f025fae45dd736cb37b3119d58e67a841f17cda4e05133881d9706b30fae2472caa3fb92c8f2db8dae947550242c4fbbbd11a50144c1e6c2e4b3cd61f7a0d3c54f215dc54966e5854"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:20:40 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:40 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x0, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:40 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x18, {0x18, 0x0, "c012a23e16eba561f137f371d322cd9067a54f3a92c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1795.902519][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1796.036386][ T3673] device team23 entered promiscuous mode [ 1796.043341][ T3673] 8021q: adding VLAN 0 to HW filter on device team23 [ 1796.101813][ T3679] team0: Port device vlan12 added 07:20:41 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1796.172979][T26356] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1796.192588][ T5147] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1796.200949][ T5091] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1796.382806][ T3681] team0: Port device vlan12 removed [ 1796.413011][T32099] usb 2-1: new high-speed USB device number 113 using dummy_hcd 07:20:41 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1796.536200][T26356] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice=b0.11 [ 1796.546971][T26356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.565681][ T5147] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.576225][ T5147] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 07:20:41 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1796.585580][ T5147] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.602320][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.613565][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.623777][ T5091] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1796.633189][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.698542][T26356] usb 6-1: config 0 descriptor?? [ 1796.737459][ T5091] usb 1-1: config 0 descriptor?? [ 1796.751942][T26356] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 1796.813271][T32099] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.824247][T32099] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1796.834083][T32099] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.874028][ T5147] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1796.888611][ T5147] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1796.892555][ T3689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1796.897981][ T5147] usb 4-1: Product: syz [ 1796.910939][ T5147] usb 4-1: Manufacturer: syz [ 1796.915828][ T5147] usb 4-1: SerialNumber: syz [ 1796.948345][ T3689] device team23 entered promiscuous mode [ 1796.955190][ T3689] 8021q: adding VLAN 0 to HW filter on device team23 [ 1796.993616][T26356] cpia1 6-1:0.0: unexpected state after lo power cmd: 01 07:20:42 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1797.075484][ T3691] team0: Port device vlan12 added [ 1797.088058][ T5091] itetech 0003:258A:6A88.0033: unknown main item tag 0x0 [ 1797.097011][ T5091] itetech 0003:258A:6A88.0033: collection stack underflow [ 1797.104508][ T5091] itetech 0003:258A:6A88.0033: item 0 0 0 12 parsing failed [ 1797.143855][ T5147] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1797.150192][ T5147] cdc_wdm 4-1:21.0: Unknown control protocol [ 1797.163096][T32099] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1797.173170][T32099] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1797.181847][T32099] usb 2-1: Product: syz [ 1797.191222][T32099] usb 2-1: Manufacturer: syz [ 1797.196721][T32099] usb 2-1: SerialNumber: syz [ 1797.214244][ T3692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.224231][ T3692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.241368][ T5091] itetech: probe of 0003:258A:6A88.0033 failed with error -22 [ 1797.307826][ T5091] usb 1-1: USB disconnect, device number 88 [ 1797.342709][ T5147] usb 4-1: USB disconnect, device number 16 [ 1797.383701][T32099] cdc_wdm 2-1:21.0: cdc-wdm1: USB WDM device [ 1797.389954][T32099] cdc_wdm 2-1:21.0: Unknown control protocol 07:20:42 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1797.479295][ T3689] team0: Port device vlan12 removed [ 1797.497873][T26356] gspca_cpia1: usb_control_msg 02, error -71 [ 1797.528354][T26356] gspca_cpia1: usb_control_msg 05, error -71 [ 1797.535025][T26356] cpia1 6-1:0.0: unexpected systemstate: 01 [ 1797.716746][ T5102] usb 2-1: USB disconnect, device number 113 [ 1797.737924][T26356] usb 6-1: USB disconnect, device number 17 07:20:43 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1798.132737][T26356] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1798.229398][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1798.301846][ T3702] device team23 entered promiscuous mode [ 1798.315344][ T3702] 8021q: adding VLAN 0 to HW filter on device team23 [ 1798.345688][ T3703] team0: Port device vlan12 added [ 1798.504130][T26356] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.519658][T26356] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1798.530337][T26356] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.558612][ T3702] team0: Port device vlan12 removed [ 1798.703306][T26356] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1798.713171][T26356] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1798.726525][T26356] usb 6-1: Product: syz [ 1798.730910][T26356] usb 6-1: Manufacturer: syz [ 1798.740435][T26356] usb 6-1: SerialNumber: syz [ 1798.808389][T26356] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1798.817272][T26356] cdc_wdm 6-1:21.0: Unknown control protocol 07:20:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@can_delroute={0x5c, 0x19, 0x20, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x3}, [@CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "153203bb5e20e580"}, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "3e986e726fe26310"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x200400d4) close_range(r0, 0xffffffffffffffff, 0x0) 07:20:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:44 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:44 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1799.164787][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1799.252240][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1799.257084][ T5084] usb 6-1: USB disconnect, device number 18 [ 1799.259515][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1799.272253][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 07:20:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@can_delroute={0x5c, 0x19, 0x20, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x3}, [@CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "153203bb5e20e580"}, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "3e986e726fe26310"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x200400d4) close_range(r0, 0xffffffffffffffff, 0x0) [ 1799.299098][ T3700] cdc_wdm 6-1:21.0: Tx URB error: -19 [ 1799.316796][ T3705] cdc_wdm 6-1:21.0: Tx URB error: -19 [ 1799.375698][ T3709] device team23 entered promiscuous mode [ 1799.382718][ T3709] 8021q: adding VLAN 0 to HW filter on device team23 07:20:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1799.491498][ T3718] team0: Port device vlan12 added [ 1799.524748][ T5102] usb 4-1: new high-speed USB device number 17 using dummy_hcd 07:20:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="87", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@can_delroute={0x5c, 0x19, 0x20, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x3}, [@CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "153203bb5e20e580"}, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "3e986e726fe26310"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x200400d4) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) [ 1799.683034][T26356] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1799.756310][ T3719] team0: Port device vlan12 removed 07:20:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x12c0, 0x10e8, 0x5002004a, 0x0, 0x0, 0x0, 0x1228, 0x3c8, 0x3c8, 0x1228, 0x3c8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'caif0\x00', 'ip6gre0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x976, 0x5, 0x8, 'pptp\x00', {0x6d}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [], 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1320) [ 1799.943534][ T5102] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.956365][ T5102] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1799.966469][ T5102] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.056727][T26356] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.067464][T26356] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1800.076877][T26356] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.173320][ T3732] xt_cgroup: xt_cgroup: no path or classid specified [ 1800.203957][ T5102] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1800.213469][ T5102] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1800.222334][ T5102] usb 4-1: Product: syz [ 1800.226724][ T5102] usb 4-1: Manufacturer: syz [ 1800.231550][ T5102] usb 4-1: SerialNumber: syz [ 1800.264769][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1800.333656][T26356] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1800.343319][T26356] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1800.352312][T26356] usb 2-1: Product: syz [ 1800.361402][T26356] usb 2-1: Manufacturer: syz [ 1800.367255][T26356] usb 2-1: SerialNumber: syz [ 1800.369813][ T5102] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1800.378803][ T5102] cdc_wdm 4-1:21.0: Unknown control protocol [ 1800.515542][T26356] cdc_wdm 2-1:21.0: cdc-wdm1: USB WDM device [ 1800.521784][T26356] cdc_wdm 2-1:21.0: Unknown control protocol [ 1800.609068][T26356] usb 4-1: USB disconnect, device number 17 07:20:45 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:45 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1800.807140][ T5102] usb 2-1: USB disconnect, device number 114 [ 1800.881475][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1801.232556][ T5100] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1801.602780][ T5100] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.613482][ T5100] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1801.622866][ T5100] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.812947][ T5100] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1801.822433][ T5100] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1801.831107][ T5100] usb 6-1: Product: syz [ 1801.835658][ T5100] usb 6-1: Manufacturer: syz [ 1801.840462][ T5100] usb 6-1: SerialNumber: syz [ 1801.895938][ T5100] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1801.903116][ T5100] cdc_wdm 6-1:21.0: Unknown control protocol [ 1802.282286][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.289405][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.302196][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.309339][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.322197][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 07:20:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x12c0, 0x10e8, 0x5002004a, 0x0, 0x0, 0x0, 0x1228, 0x3c8, 0x3c8, 0x1228, 0x3c8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'caif0\x00', 'ip6gre0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x976, 0x5, 0x8, 'pptp\x00', {0x6d}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [], 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1320) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x12c0, 0x10e8, 0x5002004a, 0x0, 0x0, 0x0, 0x1228, 0x3c8, 0x3c8, 0x1228, 0x3c8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'caif0\x00', 'ip6gre0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x976, 0x5, 0x8, 'pptp\x00', {0x6d}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [], 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1320) (async) 07:20:47 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:47 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:47 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1802.329297][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.342181][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.349348][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.366569][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.373717][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.424835][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.431970][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.445120][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.452208][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.475463][ C1] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1802.482569][ C1] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1802.492077][T26356] usb 6-1: USB disconnect, device number 19 [ 1802.532575][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1802.571375][ T3748] xt_cgroup: xt_cgroup: no path or classid specified [ 1802.585346][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1802.667745][ T3755] xt_cgroup: xt_cgroup: no path or classid specified 07:20:47 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x12c0, 0x10e8, 0x5002004a, 0x0, 0x0, 0x0, 0x1228, 0x3c8, 0x3c8, 0x1228, 0x3c8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'caif0\x00', 'ip6gre0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x976, 0x5, 0x8, 'pptp\x00', {0x6d}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [], 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1320) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x12c0, 0x10e8, 0x5002004a, 0x0, 0x0, 0x0, 0x1228, 0x3c8, 0x3c8, 0x1228, 0x3c8, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'caif0\x00', 'ip6gre0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x976, 0x5, 0x8, 'pptp\x00', {0x6d}}}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [], 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1320) (async) [ 1802.793535][ T5100] usb 4-1: new high-speed USB device number 18 using dummy_hcd 07:20:47 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1802.903479][ T5091] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1802.966387][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1803.048724][ T3760] xt_cgroup: xt_cgroup: no path or classid specified 07:20:48 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1803.109376][ T3760] xt_cgroup: xt_cgroup: no path or classid specified [ 1803.112772][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1803.193698][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.204351][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1803.214456][ T5100] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:48 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7", @ANYRESDEC, @ANYRESHEX, @ANYBLOB="1a787bc40aa0ca728a86c58c4eeb7ff853f97578c7e0348dd6fe8971b53c09411ffb3843ce24ed620601b198295ed0e8940b6120fca479b506ac62be7690943cd587003d300c7604699e336e095700ab470a65d0d06be043f63c313ca0f421d3c498d05061418e99eef59cb669898e0bdfe010de55c771f5b528a41b351bf82a9c90e68eb875ef3e6ade4fb618fbef78a2e02413ca0f4b41ed52c45b0adadaf5cf5e59543405b06da87027e72a78f46d06589d067a7a87c982a6db75ca4e7b9adf84b4ae3255fe74e5edefbb36142bdfe3ebfb6305918237d9ddcb3e10fa6c34d4a3cd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x30, 0xed, {0xed, 0xf, "f34f56b7dec2b4fa3eb2808dc03c2e8a9d522114dd8d8dc8728c0691b6f45ca802bc56305d7e73d2b3b074b6b4334b7708de105013a8fb59800bb65a52d716d849830f990398703434d2107182006970af02e1229b819e76573f3fc9634c13b9e59c3fa9fa19d55453d8bc9ef8c6c9132bc37191e6ec964f0f94164b7188ab75d1b56b6562e0895fe9e399688f1106aaf3731fb86e8cbfa2d5aae16f63404f54733109b95c8d1819f3ec048be3a07071a32ace8b304e119ec7d620d6ab5508dbad84f0b50bdc1de6e273ee8ec4d190b68682a5fc50d45f0419badfca864a28dee610e34d8853f3bd372363"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x14, 0x95, "f581fb604c048f12a328ccd621cbb177fdd92f1dc6b8ad7e2457dfe4f33f236f751bdbf061740db54448f37417f2110642d2d8de119f96aecd3c77a00711b6b3791e65ee845c038a327756e6d979a0bffe1f42cf2a34408aa7156ee756b929174e4a8c358da033e33988a6afe96d1d6eaa39b5412b2c4746bc9ac81aaf56de9572d4f5e2c7ebb67531c52329104a6637a3a0776c6e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x101, 0x9, 0x6, 0x6, 0x2, 0x66, 0x101, 0x3f, 0x1, 0x4, 0x6}}, &(0x7f0000000340)={0x20, 0x85, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x3, "8d553d"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1803.293675][ T5091] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.304835][ T5091] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1803.314263][ T5091] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.372869][ T3766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1803.458244][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1803.467740][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1803.476536][ T5100] usb 4-1: Product: syz [ 1803.480909][ T5100] usb 4-1: Manufacturer: syz [ 1803.485831][ T5100] usb 4-1: SerialNumber: syz [ 1803.561347][ T5091] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1803.571189][ T5091] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1803.580524][ T5091] usb 2-1: Product: syz [ 1803.585038][ T5091] usb 2-1: Manufacturer: syz [ 1803.589828][ T5091] usb 2-1: SerialNumber: syz [ 1803.628527][ T5100] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1803.637115][ T5100] cdc_wdm 4-1:21.0: Unknown control protocol [ 1803.750360][ T5091] cdc_wdm 2-1:21.0: cdc-wdm1: USB WDM device [ 1803.757136][ T5091] cdc_wdm 2-1:21.0: Unknown control protocol [ 1803.932315][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1803.939457][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1803.972784][ T5102] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1803.987092][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1803.994233][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1804.012158][ T5100] usb 4-1: USB disconnect, device number 18 07:20:49 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:49 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1804.023026][ T3769] cdc_wdm 4-1:21.0: Tx URB error: -19 [ 1804.089636][ T5091] usb 2-1: USB disconnect, device number 115 [ 1804.138969][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1804.363592][ T5102] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 52, changing to 9 [ 1804.375079][ T5102] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8241, setting to 1024 [ 1804.386753][ T5102] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1804.396216][ T5102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.562628][ T5100] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1804.932721][ T5100] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.943616][ T5100] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1804.953067][ T5100] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1805.180554][ T5100] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1805.189925][ T5100] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1805.198850][ T5100] usb 6-1: Product: syz [ 1805.203392][ T5100] usb 6-1: Manufacturer: syz [ 1805.208180][ T5100] usb 6-1: SerialNumber: syz [ 1805.277223][ T5100] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1805.283649][ T5100] cdc_wdm 6-1:21.0: Unknown control protocol 07:20:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:50 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:20:50 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1805.679855][ T5091] usb 6-1: USB disconnect, device number 20 [ 1805.692354][ C0] cdc_wdm 6-1:21.0: nonzero urb status received: -71 [ 1805.699459][ C0] cdc_wdm 6-1:21.0: wdm_int_callback - 0 bytes [ 1805.705999][ C0] cdc_wdm 6-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1805.724057][ T3776] cdc_wdm 6-1:21.0: Tx URB error: -19 [ 1805.739634][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1805.881307][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:20:51 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1805.943466][ T5102] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1805.953928][ T5102] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input78 [ 1805.966479][ T5100] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1806.069753][ T5102] usb 1-1: USB disconnect, device number 89 [ 1806.144703][ T5084] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1806.219118][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:20:51 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1806.333567][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.344467][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1806.353822][ T5100] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.543469][ T5084] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.553410][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1806.554252][ T5084] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1806.572699][ T5084] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:51 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7", @ANYRESDEC, @ANYRESHEX, @ANYBLOB="1a787bc40aa0ca728a86c58c4eeb7ff853f97578c7e0348dd6fe8971b53c09411ffb3843ce24ed620601b198295ed0e8940b6120fca479b506ac62be7690943cd587003d300c7604699e336e095700ab470a65d0d06be043f63c313ca0f421d3c498d05061418e99eef59cb669898e0bdfe010de55c771f5b528a41b351bf82a9c90e68eb875ef3e6ade4fb618fbef78a2e02413ca0f4b41ed52c45b0adadaf5cf5e59543405b06da87027e72a78f46d06589d067a7a87c982a6db75ca4e7b9adf84b4ae3255fe74e5edefbb36142bdfe3ebfb6305918237d9ddcb3e10fa6c34d4a3cd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x30, 0xed, {0xed, 0xf, "f34f56b7dec2b4fa3eb2808dc03c2e8a9d522114dd8d8dc8728c0691b6f45ca802bc56305d7e73d2b3b074b6b4334b7708de105013a8fb59800bb65a52d716d849830f990398703434d2107182006970af02e1229b819e76573f3fc9634c13b9e59c3fa9fa19d55453d8bc9ef8c6c9132bc37191e6ec964f0f94164b7188ab75d1b56b6562e0895fe9e399688f1106aaf3731fb86e8cbfa2d5aae16f63404f54733109b95c8d1819f3ec048be3a07071a32ace8b304e119ec7d620d6ab5508dbad84f0b50bdc1de6e273ee8ec4d190b68682a5fc50d45f0419badfca864a28dee610e34d8853f3bd372363"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x14, 0x95, "f581fb604c048f12a328ccd621cbb177fdd92f1dc6b8ad7e2457dfe4f33f236f751bdbf061740db54448f37417f2110642d2d8de119f96aecd3c77a00711b6b3791e65ee845c038a327756e6d979a0bffe1f42cf2a34408aa7156ee756b929174e4a8c358da033e33988a6afe96d1d6eaa39b5412b2c4746bc9ac81aaf56de9572d4f5e2c7ebb67531c52329104a6637a3a0776c6e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x101, 0x9, 0x6, 0x6, 0x2, 0x66, 0x101, 0x3f, 0x1, 0x4, 0x6}}, &(0x7f0000000340)={0x20, 0x85, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x3, "8d553d"}, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) [ 1806.602707][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1806.614285][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1806.623172][ T5100] usb 4-1: Product: syz [ 1806.627544][ T5100] usb 4-1: Manufacturer: syz [ 1806.632504][ T5100] usb 4-1: SerialNumber: syz [ 1806.666791][ T3796] device team32 entered promiscuous mode [ 1806.673946][ T3796] 8021q: adding VLAN 0 to HW filter on device team32 [ 1806.770353][ T5100] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1806.777076][ T5100] cdc_wdm 4-1:21.0: Unknown control protocol 07:20:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:51 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1806.844771][ T5084] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1806.854516][ T5084] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1806.863375][ T5084] usb 2-1: Product: syz [ 1806.867747][ T5084] usb 2-1: Manufacturer: syz [ 1806.872673][ T5084] usb 2-1: SerialNumber: syz [ 1807.075337][ T5084] cdc_wdm 2-1:21.0: cdc-wdm1: USB WDM device [ 1807.081576][ T5084] cdc_wdm 2-1:21.0: Unknown control protocol [ 1807.122196][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1807.129335][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1807.152262][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1807.159422][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1807.182203][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1807.182454][ T5091] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1807.189248][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1807.222204][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1807.229317][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1807.250619][ T5102] usb 4-1: USB disconnect, device number 19 [ 1807.257116][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1807.257224][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1807.257317][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1807.313960][ T5084] usb 2-1: USB disconnect, device number 116 07:20:52 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) 07:20:52 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1807.573978][ T5091] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 52, changing to 9 [ 1807.585634][ T5091] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8241, setting to 1024 [ 1807.597469][ T5091] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1807.606937][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.679244][ T3809] __nla_validate_parse: 3 callbacks suppressed [ 1807.679312][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1807.873216][ T5100] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1808.053107][ T5091] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1808.063634][ T5091] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input79 07:20:53 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:53 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:53 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:53 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:53 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001b5699b0009058bd7", @ANYRESDEC, @ANYRESHEX, @ANYBLOB="1a787bc40aa0ca728a86c58c4eeb7ff853f97578c7e0348dd6fe8971b53c09411ffb3843ce24ed620601b198295ed0e8940b6120fca479b506ac62be7690943cd587003d300c7604699e336e095700ab470a65d0d06be043f63c313ca0f421d3c498d05061418e99eef59cb669898e0bdfe010de55c771f5b528a41b351bf82a9c90e68eb875ef3e6ade4fb618fbef78a2e02413ca0f4b41ed52c45b0adadaf5cf5e59543405b06da87027e72a78f46d06589d067a7a87c982a6db75ca4e7b9adf84b4ae3255fe74e5edefbb36142bdfe3ebfb6305918237d9ddcb3e10fa6c34d4a3cd"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x30, 0xed, {0xed, 0xf, "f34f56b7dec2b4fa3eb2808dc03c2e8a9d522114dd8d8dc8728c0691b6f45ca802bc56305d7e73d2b3b074b6b4334b7708de105013a8fb59800bb65a52d716d849830f990398703434d2107182006970af02e1229b819e76573f3fc9634c13b9e59c3fa9fa19d55453d8bc9ef8c6c9132bc37191e6ec964f0f94164b7188ab75d1b56b6562e0895fe9e399688f1106aaf3731fb86e8cbfa2d5aae16f63404f54733109b95c8d1819f3ec048be3a07071a32ace8b304e119ec7d620d6ab5508dbad84f0b50bdc1de6e273ee8ec4d190b68682a5fc50d45f0419badfca864a28dee610e34d8853f3bd372363"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x14, 0x95, "f581fb604c048f12a328ccd621cbb177fdd92f1dc6b8ad7e2457dfe4f33f236f751bdbf061740db54448f37417f2110642d2d8de119f96aecd3c77a00711b6b3791e65ee845c038a327756e6d979a0bffe1f42cf2a34408aa7156ee756b929174e4a8c358da033e33988a6afe96d1d6eaa39b5412b2c4746bc9ac81aaf56de9572d4f5e2c7ebb67531c52329104a6637a3a0776c6e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x101, 0x9, 0x6, 0x6, 0x2, 0x66, 0x101, 0x3f, 0x1, 0x4, 0x6}}, &(0x7f0000000340)={0x20, 0x85, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x3, "8d553d"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1808.230960][ T5091] usb 1-1: USB disconnect, device number 90 [ 1808.237402][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1808.265536][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1808.292299][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1808.292629][ T5100] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.312357][ T5100] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1808.321658][ T5100] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.351661][ T3819] device team33 entered promiscuous mode [ 1808.358543][ T3819] 8021q: adding VLAN 0 to HW filter on device team33 07:20:53 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:20:53 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1808.623816][ T5100] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1808.633236][ T5100] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1808.641916][ T5100] usb 6-1: Product: syz [ 1808.646414][ T5100] usb 6-1: Manufacturer: syz [ 1808.651224][ T5100] usb 6-1: SerialNumber: syz [ 1808.657611][ T5102] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1808.723088][ T5100] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1808.729342][ T5100] cdc_wdm 6-1:21.0: Unknown control protocol [ 1808.839191][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1808.878620][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1808.933023][ T5091] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1808.944609][T26254] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1808.981206][ T5100] usb 6-1: USB disconnect, device number 21 [ 1809.022842][ T5102] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.033456][ T5102] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1809.043040][ T5102] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:54 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1809.264806][ T5102] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1809.276189][ T5102] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1809.285478][ T5102] usb 4-1: Product: syz [ 1809.289859][ T5102] usb 4-1: Manufacturer: syz [ 1809.293482][ T5091] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 52, changing to 9 [ 1809.294711][ T5102] usb 4-1: SerialNumber: syz 07:20:54 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1809.305987][ T5091] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8241, setting to 1024 [ 1809.322259][ T5091] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1809.331579][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.342605][T26254] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.353605][T26254] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1809.362972][T26254] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.502963][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1809.529057][ T5102] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1809.535899][ T5102] cdc_wdm 4-1:21.0: Unknown control protocol [ 1809.605518][T26254] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1809.615087][T26254] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1809.623874][T26254] usb 2-1: Product: syz [ 1809.628233][T26254] usb 2-1: Manufacturer: syz [ 1809.633124][T26254] usb 2-1: SerialNumber: syz 07:20:54 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x0, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1809.741571][ T5102] usb 4-1: USB disconnect, device number 20 [ 1809.803366][T26254] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1809.809596][T26254] cdc_wdm 2-1:21.0: Unknown control protocol [ 1809.911391][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1809.964513][ T3839] device team34 entered promiscuous mode [ 1809.971328][ T3839] 8021q: adding VLAN 0 to HW filter on device team34 [ 1810.129210][ T5102] usb 2-1: USB disconnect, device number 117 [ 1810.135521][ C0] cdc_wdm 2-1:21.0: nonzero urb status received: -71 [ 1810.135633][ C0] cdc_wdm 2-1:21.0: wdm_int_callback - 0 bytes [ 1810.135726][ C0] cdc_wdm 2-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1810.162464][ T3824] cdc_wdm 2-1:21.0: Tx URB error: -19 [ 1810.201507][ T3842] cdc_wdm 2-1:21.0: Tx URB error: -19 07:20:55 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) 07:20:55 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1810.843373][ T5091] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1810.855043][ T5091] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input80 [ 1810.951581][ T5091] usb 1-1: USB disconnect, device number 91 07:20:56 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:56 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x0, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:56 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:56 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1811.033013][T26356] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1811.166579][ T3853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1811.229158][ T3853] device team35 entered promiscuous mode [ 1811.236095][ T3853] 8021q: adding VLAN 0 to HW filter on device team35 [ 1811.422625][T26356] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.422665][ T5102] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1811.441386][T26356] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1811.450893][T26356] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:56 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:20:56 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1811.630959][ T5147] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1811.663309][T26356] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1811.673083][T26356] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1811.681762][T26356] usb 6-1: Product: syz [ 1811.686382][T26356] usb 6-1: Manufacturer: syz [ 1811.691191][T26356] usb 6-1: SerialNumber: syz [ 1811.814083][ T5102] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.825278][ T5102] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1811.834604][ T5102] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.848160][T26356] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1811.854786][T26356] cdc_wdm 6-1:21.0: Unknown control protocol 07:20:57 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1812.036146][ T5147] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.046860][ T5147] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1812.056287][ T5147] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.093985][ T5102] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1812.101396][T16817] usb 6-1: USB disconnect, device number 22 [ 1812.103634][ T5102] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1812.103757][ T5102] usb 4-1: Product: syz [ 1812.103847][ T5102] usb 4-1: Manufacturer: syz [ 1812.103945][ T5102] usb 4-1: SerialNumber: syz 07:20:57 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x0, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1812.123051][T26254] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1812.290577][ T5102] cdc_wdm 4-1:21.0: cdc-wdm1: USB WDM device [ 1812.297680][ T5102] cdc_wdm 4-1:21.0: Unknown control protocol [ 1812.334331][ T5147] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1812.349230][ T5147] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1812.358493][ T5147] usb 2-1: Product: syz [ 1812.362942][ T5147] usb 2-1: Manufacturer: syz [ 1812.367923][ T5147] usb 2-1: SerialNumber: syz [ 1812.404660][ T5102] usb 4-1: USB disconnect, device number 21 [ 1812.407956][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1812.502854][T26254] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.513672][T26254] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1812.523083][T26254] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.583496][ T5147] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1812.589721][ T5147] cdc_wdm 2-1:21.0: Unknown control protocol 07:20:57 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1812.744000][T26254] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1812.755035][T26254] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1812.764807][T26254] usb 1-1: Product: syz [ 1812.769188][T26254] usb 1-1: Manufacturer: syz [ 1812.774076][T26254] usb 1-1: SerialNumber: syz [ 1812.818626][ T3866] device team36 entered promiscuous mode [ 1812.825654][ T3866] 8021q: adding VLAN 0 to HW filter on device team36 [ 1812.879234][T26356] usb 2-1: USB disconnect, device number 118 [ 1812.984069][T26254] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1812.990318][T26254] cdc_wdm 1-1:21.0: Unknown control protocol 07:20:58 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1813.198804][T26254] usb 1-1: USB disconnect, device number 92 07:20:58 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) 07:20:58 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:20:58 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:20:58 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1813.742414][ T5102] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1813.900935][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:20:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1813.995592][ T3879] device team37 entered promiscuous mode [ 1814.002489][ T3879] 8021q: adding VLAN 0 to HW filter on device team37 07:20:59 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1814.136052][ T5102] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.146695][ T5102] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1814.156093][ T5102] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:59 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1814.203767][T26356] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1814.213294][ T5147] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1814.359518][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1814.393013][ T5102] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1814.402559][ T5102] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1814.411315][ T5102] usb 4-1: Product: syz [ 1814.416013][ T5102] usb 4-1: Manufacturer: syz [ 1814.420819][ T5102] usb 4-1: SerialNumber: syz [ 1814.472886][T16817] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1814.520317][ T5102] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1814.526699][ T5102] cdc_wdm 4-1:21.0: Unknown control protocol [ 1814.586191][ T3889] device team38 entered promiscuous mode [ 1814.593034][ T3889] 8021q: adding VLAN 0 to HW filter on device team38 [ 1814.611910][T26356] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.622596][T26356] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1814.631839][T26356] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.643884][ T5147] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.654390][ T5147] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1814.663688][ T5147] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:20:59 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1814.731475][ T5091] usb 4-1: USB disconnect, device number 22 [ 1814.823556][T26356] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1814.833467][T26356] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1814.842373][T26356] usb 2-1: Product: syz [ 1814.846740][T26356] usb 2-1: Manufacturer: syz [ 1814.851543][T26356] usb 2-1: SerialNumber: syz [ 1814.858254][ T5147] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 07:20:59 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1814.867701][ T5147] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1814.876517][ T5147] usb 6-1: Product: syz [ 1814.880884][ T5147] usb 6-1: Manufacturer: syz [ 1814.886290][ T5147] usb 6-1: SerialNumber: syz [ 1814.973385][T16817] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.983922][T16817] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1814.993294][T16817] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.110912][T26356] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1815.117736][T26356] cdc_wdm 2-1:21.0: Unknown control protocol [ 1815.141434][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1815.145023][ T5147] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1815.157406][ T5147] cdc_wdm 6-1:21.0: Unknown control protocol 07:21:00 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1815.220165][ T3895] device team39 entered promiscuous mode [ 1815.227016][ T3895] 8021q: adding VLAN 0 to HW filter on device team39 [ 1815.239543][T16817] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1815.249092][T16817] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1815.257912][T16817] usb 1-1: Product: syz [ 1815.262358][T16817] usb 1-1: Manufacturer: syz [ 1815.267160][T16817] usb 1-1: SerialNumber: syz [ 1815.356984][T26356] usb 2-1: USB disconnect, device number 119 [ 1815.405601][ T5102] usb 6-1: USB disconnect, device number 23 [ 1815.474659][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 1815.481296][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 1815.519039][T16817] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1815.526166][T16817] cdc_wdm 1-1:21.0: Unknown control protocol 07:21:00 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:00 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1815.842183][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.849411][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.862182][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.869270][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.882177][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.889257][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.902245][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.909329][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.926604][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.933678][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.945868][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.952913][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.969526][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.976579][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1815.983624][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1815.990649][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1816.006563][T16817] usb 1-1: USB disconnect, device number 93 [ 1816.012794][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1816.012896][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1816.012993][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1816.041965][ T3905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1816.199138][ T3905] device team40 entered promiscuous mode [ 1816.206134][ T3905] 8021q: adding VLAN 0 to HW filter on device team40 [ 1816.337378][T26356] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1816.702685][T26356] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.713524][T26356] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1816.723119][T26356] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:01 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syncfs(0xffffffffffffffff) 07:21:01 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:21:01 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:01 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1816.892839][T26356] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1816.902556][T26356] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1816.911235][T26356] usb 4-1: Product: syz [ 1816.915841][T26356] usb 4-1: Manufacturer: syz [ 1816.920641][T26356] usb 4-1: SerialNumber: syz [ 1817.060209][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1817.181415][T26356] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1817.189066][T26356] cdc_wdm 4-1:21.0: Unknown control protocol [ 1817.194368][ T3912] device team41 entered promiscuous mode [ 1817.201845][ T3912] 8021q: adding VLAN 0 to HW filter on device team41 07:21:02 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1817.313953][T26254] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1817.344066][T16817] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1817.407858][ T5100] usb 4-1: USB disconnect, device number 23 [ 1817.414184][ C0] cdc_wdm 4-1:21.0: nonzero urb status received: -71 [ 1817.414291][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - 0 bytes [ 1817.414389][ C0] cdc_wdm 4-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1817.434366][ T3904] cdc_wdm 4-1:21.0: Tx URB error: -19 [ 1817.440919][ T5102] usb 6-1: new high-speed USB device number 24 using dummy_hcd 07:21:02 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1817.606866][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1817.680916][ T3922] device team42 entered promiscuous mode [ 1817.687795][ T3922] 8021q: adding VLAN 0 to HW filter on device team42 [ 1817.703924][T26254] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.714617][T26254] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1817.724998][T26254] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:02 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1817.757116][T16817] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.772715][T16817] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1817.782941][T16817] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.843264][ T5102] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.854605][ T5102] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1817.863952][ T5102] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:03 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1818.074252][T26254] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1818.083848][T26254] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1818.092905][T26254] usb 2-1: Product: syz [ 1818.097262][T26254] usb 2-1: Manufacturer: syz [ 1818.102182][T26254] usb 2-1: SerialNumber: syz [ 1818.114176][T16817] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1818.124080][T16817] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1818.132951][T16817] usb 1-1: Product: syz [ 1818.137328][T16817] usb 1-1: Manufacturer: syz [ 1818.142501][T16817] usb 1-1: SerialNumber: syz [ 1818.144011][ T5102] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1818.156654][ T5102] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1818.165478][ T5102] usb 6-1: Product: syz [ 1818.169860][ T5102] usb 6-1: Manufacturer: syz [ 1818.176536][ T5102] usb 6-1: SerialNumber: syz [ 1818.201448][ T3926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:03 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1818.299923][T26254] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1818.306547][T26254] cdc_wdm 2-1:21.0: Unknown control protocol [ 1818.401152][ T5102] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1818.407505][ T5102] cdc_wdm 6-1:21.0: Unknown control protocol [ 1818.463174][T16817] cdc_wdm 1-1:21.0: cdc-wdm2: USB WDM device [ 1818.469416][T16817] cdc_wdm 1-1:21.0: Unknown control protocol [ 1818.514757][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1818.550242][T26254] usb 2-1: USB disconnect, device number 120 07:21:03 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1818.675510][T26356] usb 1-1: USB disconnect, device number 94 [ 1818.882475][ T3928] device team43 entered promiscuous mode [ 1818.889187][ T3928] 8021q: adding VLAN 0 to HW filter on device team43 [ 1819.052804][ T5100] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1819.091293][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:04 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1819.473419][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.484728][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1819.494256][ T5100] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.515026][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1819.570482][ T3937] device team44 entered promiscuous mode [ 1819.577299][ T3937] 8021q: adding VLAN 0 to HW filter on device team44 [ 1819.813238][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1819.822701][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1819.831368][ T5100] usb 4-1: Product: syz [ 1819.835874][ T5100] usb 4-1: Manufacturer: syz [ 1819.840676][ T5100] usb 4-1: SerialNumber: syz [ 1819.972529][T26356] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1820.035965][ T5100] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1820.042375][ T5100] cdc_wdm 4-1:21.0: Unknown control protocol 07:21:05 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syncfs(0xffffffffffffffff) 07:21:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:21:05 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) 07:21:05 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1820.150214][T26254] usb 6-1: USB disconnect, device number 24 [ 1820.283435][ T5100] usb 4-1: USB disconnect, device number 24 [ 1820.336539][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1820.343414][T26356] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.356607][T26356] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1820.366004][T26356] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.388896][ T3942] device team45 entered promiscuous mode [ 1820.395816][ T3942] 8021q: adding VLAN 0 to HW filter on device team45 [ 1820.462792][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:05 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1820.673576][T26356] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1820.683290][T26356] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1820.692577][T26356] usb 2-1: Product: syz [ 1820.696961][T26356] usb 2-1: Manufacturer: syz [ 1820.701761][T26356] usb 2-1: SerialNumber: syz [ 1820.710873][T16817] usb 1-1: new high-speed USB device number 95 using dummy_hcd 07:21:05 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1820.880787][T26356] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1820.887308][T26356] cdc_wdm 2-1:21.0: Unknown control protocol [ 1820.892543][T26254] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1820.927277][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:06 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1821.038274][ T3955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1821.103139][T16817] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.114321][T16817] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1821.123712][T16817] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.156494][T26356] usb 2-1: USB disconnect, device number 121 07:21:06 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1821.273371][T26254] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.284030][T26254] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1821.286040][ T3955] device team46 entered promiscuous mode [ 1821.293759][T26254] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.299855][ T3955] 8021q: adding VLAN 0 to HW filter on device team46 07:21:06 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1821.459770][T16817] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1821.469321][T16817] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1821.478570][T16817] usb 1-1: Product: syz [ 1821.483174][T16817] usb 1-1: Manufacturer: syz [ 1821.487980][T16817] usb 1-1: SerialNumber: syz [ 1821.541667][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1821.564653][T26254] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1821.574214][T26254] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1821.583363][T26254] usb 6-1: Product: syz [ 1821.587725][T26254] usb 6-1: Manufacturer: syz [ 1821.592813][T26254] usb 6-1: SerialNumber: syz [ 1821.682810][ T5147] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1821.701819][T16817] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1821.708470][T16817] cdc_wdm 1-1:21.0: Unknown control protocol [ 1821.779204][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1821.825512][T26254] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1821.831734][T26254] cdc_wdm 6-1:21.0: Unknown control protocol [ 1821.877814][T16817] usb 1-1: USB disconnect, device number 95 07:21:07 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:21:07 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1822.032529][ T3962] device team47 entered promiscuous mode [ 1822.039261][ T3962] 8021q: adding VLAN 0 to HW filter on device team47 [ 1822.044071][ T5147] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.056595][ T5147] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1822.070967][ T5147] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.287163][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1822.343712][ T5147] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1822.353141][ T5147] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1822.361802][ T5147] usb 4-1: Product: syz [ 1822.366339][ T5147] usb 4-1: Manufacturer: syz [ 1822.371156][ T5147] usb 4-1: SerialNumber: syz 07:21:07 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1822.599327][ T5147] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1822.605737][ T5147] cdc_wdm 4-1:21.0: Unknown control protocol [ 1822.652863][T16817] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1822.779126][T26254] usb 4-1: USB disconnect, device number 25 [ 1823.012772][T16817] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.023367][T16817] usb 2-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1823.033048][T16817] usb 2-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.202872][T16817] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1823.212696][T16817] usb 2-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1823.221326][T16817] usb 2-1: Product: syz [ 1823.225858][T16817] usb 2-1: Manufacturer: syz [ 1823.230661][T16817] usb 2-1: SerialNumber: syz [ 1823.288874][T16817] cdc_wdm 2-1:21.0: cdc-wdm0: USB WDM device [ 1823.302659][T16817] cdc_wdm 2-1:21.0: Unknown control protocol 07:21:08 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syncfs(0xffffffffffffffff) [ 1823.491273][T26254] usb 6-1: USB disconnect, device number 25 07:21:08 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) 07:21:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1823.598265][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1823.651566][ T3972] device team48 entered promiscuous mode [ 1823.658415][ T3972] 8021q: adding VLAN 0 to HW filter on device team48 [ 1823.727098][T16817] usb 2-1: USB disconnect, device number 122 [ 1823.749348][ T3968] cdc_wdm 2-1:21.0: Tx URB error: -19 07:21:08 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1823.912994][ T5102] usb 1-1: new high-speed USB device number 96 using dummy_hcd 07:21:09 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:09 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1824.133096][ T5100] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1824.166577][T26254] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1824.282790][ T5102] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.293897][ T5102] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1824.303352][ T5102] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:09 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1824.463254][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1824.532177][ T3988] device team49 entered promiscuous mode [ 1824.538906][ T3988] 8021q: adding VLAN 0 to HW filter on device team49 [ 1824.550427][ T5102] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1824.559805][ T5102] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1824.568610][ T5102] usb 1-1: Product: syz [ 1824.573037][ T5102] usb 1-1: Manufacturer: syz [ 1824.577913][ T5102] usb 1-1: SerialNumber: syz [ 1824.586608][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.597117][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1824.606705][ T5100] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.663269][T26254] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.674072][T26254] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1824.683435][T26254] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) [ 1824.710163][ T5102] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1824.716911][ T5102] cdc_wdm 1-1:21.0: Unknown control protocol 07:21:09 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1824.823637][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1824.834691][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1824.843652][ T5100] usb 4-1: Product: syz [ 1824.848030][ T5100] usb 4-1: Manufacturer: syz [ 1824.852897][ T5100] usb 4-1: SerialNumber: syz [ 1824.927123][ T5084] usb 1-1: USB disconnect, device number 96 [ 1824.993137][T26254] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1825.003020][T26254] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1825.011722][T26254] usb 6-1: Product: syz [ 1825.016247][T26254] usb 6-1: Manufacturer: syz [ 1825.021037][T26254] usb 6-1: SerialNumber: syz [ 1825.105599][ T5100] cdc_wdm 4-1:21.0: cdc-wdm0: USB WDM device [ 1825.111829][ T5100] cdc_wdm 4-1:21.0: Unknown control protocol [ 1825.134556][T26254] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1825.142844][T26254] cdc_wdm 6-1:21.0: Unknown control protocol 07:21:10 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1825.309422][ T5084] usb 4-1: USB disconnect, device number 26 [ 1825.329513][ T3980] cdc_wdm 4-1:21.0: Error submitting int urb - -19 [ 1825.569806][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1825.648929][ T4000] device team50 entered promiscuous mode [ 1825.657390][ T4000] 8021q: adding VLAN 0 to HW filter on device team50 07:21:11 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:11 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0xfffffffffffffc75) 07:21:11 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) 07:21:11 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:11 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1826.747418][ T5084] usb 6-1: USB disconnect, device number 26 [ 1826.902462][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1826.955011][ T4010] device team51 entered promiscuous mode [ 1826.961712][ T4010] 8021q: adding VLAN 0 to HW filter on device team51 [ 1826.980358][ T4011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:12 executing program 1: getrandom(&(0x7f00000001c0)=""/4096, 0x1000, 0x0) getrandom(&(0x7f0000000000)=""/197, 0xfffffffffffffebf, 0x0) getrandom(0x0, 0x0, 0x0) 07:21:12 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1827.173117][ T5147] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1827.183263][ T5100] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1827.403141][ T5084] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1827.414197][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1827.543026][ T5147] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.554163][ T5147] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1827.563713][ T5147] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.613844][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.625501][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1827.634922][ T5100] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:12 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:12 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1827.814774][ T5084] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.826055][ T5084] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1827.835459][ T5084] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.847576][ T5147] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1827.859721][ T5147] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1827.868576][ T5147] usb 1-1: Product: syz [ 1827.873021][ T5147] usb 1-1: Manufacturer: syz [ 1827.877809][ T5147] usb 1-1: SerialNumber: syz [ 1827.895253][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1827.904779][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1827.913571][ T5100] usb 4-1: Product: syz [ 1827.917942][ T5100] usb 4-1: Manufacturer: syz [ 1827.922900][ T5100] usb 4-1: SerialNumber: syz [ 1828.064785][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1828.081741][ T5147] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1828.088227][ T5147] cdc_wdm 1-1:21.0: Unknown control protocol [ 1828.133707][ T5100] cdc_wdm 4-1:21.0: cdc-wdm1: USB WDM device [ 1828.140036][ T5100] cdc_wdm 4-1:21.0: Unknown control protocol [ 1828.193406][ T5084] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1828.200141][ T4027] device team52 entered promiscuous mode [ 1828.202752][ T5084] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1828.209343][ T4027] 8021q: adding VLAN 0 to HW filter on device team52 [ 1828.218504][ T5084] usb 6-1: Product: syz [ 1828.228694][ T5084] usb 6-1: Manufacturer: syz [ 1828.233561][ T5084] usb 6-1: SerialNumber: syz [ 1828.246610][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1828.318885][ T5100] usb 4-1: USB disconnect, device number 27 [ 1828.336263][ T5147] usb 1-1: USB disconnect, device number 97 [ 1828.384385][ T2707] udevd[2707]: setting owner of /dev/bus/usb/004/027 to uid=0, gid=0 failed: No such file or directory 07:21:13 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:13 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x61a283, 0x0) [ 1828.544850][ T5084] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1828.551093][ T5084] cdc_wdm 6-1:21.0: Unknown control protocol [ 1828.711489][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1828.828980][T16817] usb 6-1: USB disconnect, device number 27 07:21:15 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:15 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:15 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000002280)=[{0x5}, {0x6}]}) 07:21:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syncfs(0xffffffffffffffff) [ 1830.190817][ T24] audit: type=1326 audit(1676445675.235:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4038 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25d788c0f9 code=0x0 [ 1830.195396][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1830.268132][ T4043] device team53 entered promiscuous mode [ 1830.275002][ T4043] 8021q: adding VLAN 0 to HW filter on device team53 [ 1830.290044][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:15 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x9}, &(0x7f0000000280)) 07:21:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1830.444095][ T5084] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1830.452743][T16817] usb 4-1: new high-speed USB device number 28 using dummy_hcd 07:21:15 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1830.572360][ T5100] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1830.607353][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1830.823732][ T4050] device team54 entered promiscuous mode [ 1830.830549][ T4050] 8021q: adding VLAN 0 to HW filter on device team54 [ 1830.850214][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1830.864667][T16817] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.873396][ T5084] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.880181][T16817] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1830.885547][ T5084] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1830.885692][ T5084] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000022c0)={0x2, &(0x7f0000002280)=[{0x100a}, {0x6}]}) [ 1830.894841][T16817] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.033578][ T5100] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.044293][ T5100] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1831.053988][ T5100] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.073509][ T5084] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 07:21:16 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1831.084678][ T5084] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1831.093705][ T5084] usb 1-1: Product: syz [ 1831.098097][ T5084] usb 1-1: Manufacturer: syz [ 1831.102986][ T5084] usb 1-1: SerialNumber: syz 07:21:16 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1831.143580][T16817] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1831.153884][T16817] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1831.162790][T16817] usb 4-1: Product: syz [ 1831.167176][T16817] usb 4-1: Manufacturer: syz [ 1831.171972][T16817] usb 4-1: SerialNumber: syz [ 1831.251718][ T5084] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1831.259134][ T5084] cdc_wdm 1-1:21.0: Unknown control protocol [ 1831.353749][ T5100] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1831.363432][ T5100] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1831.372274][ T5100] usb 6-1: Product: syz [ 1831.373192][T16817] cdc_wdm 4-1:21.0: cdc-wdm1: USB WDM device [ 1831.376556][ T5100] usb 6-1: Manufacturer: syz [ 1831.382758][T16817] cdc_wdm 4-1:21.0: Unknown control protocol [ 1831.388808][ T5100] usb 6-1: SerialNumber: syz [ 1831.428147][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1831.455676][ T5084] usb 1-1: USB disconnect, device number 98 [ 1831.560173][ T4061] device team23 entered promiscuous mode [ 1831.567182][ T4061] 8021q: adding VLAN 0 to HW filter on device team23 [ 1831.608646][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1831.634187][ T5147] usb 4-1: USB disconnect, device number 28 [ 1831.651519][ T5100] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1831.659012][ T5100] cdc_wdm 6-1:21.0: Unknown control protocol [ 1831.713444][ T4064] device team55 entered promiscuous mode [ 1831.720261][ T4064] 8021q: adding VLAN 0 to HW filter on device team55 [ 1832.028196][ T5084] usb 6-1: USB disconnect, device number 28 [ 1832.053465][ T4047] cdc_wdm 6-1:21.0: Tx URB error: -19 [ 1832.073817][ T4066] cdc_wdm 6-1:21.0: Tx URB error: -19 07:21:18 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:18 executing program 1: set_mempolicy(0x0, &(0x7f00000001c0), 0x201) 07:21:18 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:18 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syncfs(0xffffffffffffffff) 07:21:18 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:18 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syncfs(0xffffffffffffffff) [ 1833.403566][ T4076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1833.418711][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:18 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ftruncate(r0, 0x0) [ 1833.478345][ T4078] device team56 entered promiscuous mode [ 1833.485291][ T4078] 8021q: adding VLAN 0 to HW filter on device team56 07:21:18 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1833.693201][T16817] usb 1-1: new high-speed USB device number 99 using dummy_hcd 07:21:18 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1833.792788][ T5084] usb 6-1: new high-speed USB device number 29 using dummy_hcd 07:21:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tcp_mem(r0, 0x0, 0x0) [ 1833.883730][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1833.988144][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:19 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1834.063436][T16817] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.074145][T16817] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1834.083799][T16817] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.183483][ T5084] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.194609][ T5084] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1834.204046][ T5084] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:19 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syncfs(0xffffffffffffffff) [ 1834.248470][ T4087] device team57 entered promiscuous mode [ 1834.257460][ T4087] 8021q: adding VLAN 0 to HW filter on device team57 [ 1834.383368][T16817] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1834.392930][T16817] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1834.401581][T16817] usb 1-1: Product: syz [ 1834.406191][T16817] usb 1-1: Manufacturer: syz [ 1834.410989][T16817] usb 1-1: SerialNumber: syz [ 1834.414774][ T4092] device team24 entered promiscuous mode [ 1834.422819][ T4092] 8021q: adding VLAN 0 to HW filter on device team24 [ 1834.524061][ T5084] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1834.533761][ T5084] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1834.542624][ T5084] usb 6-1: Product: syz [ 1834.546994][ T5084] usb 6-1: Manufacturer: syz [ 1834.551825][ T5084] usb 6-1: SerialNumber: syz [ 1834.594220][T16817] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1834.600449][T16817] cdc_wdm 1-1:21.0: Unknown control protocol [ 1834.642591][ T5084] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1834.648816][ T5084] cdc_wdm 6-1:21.0: Unknown control protocol [ 1834.786384][T16817] usb 1-1: USB disconnect, device number 99 [ 1834.930747][ T5100] usb 6-1: USB disconnect, device number 29 07:21:21 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:21 executing program 1: inotify_init1(0x0) select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x9}, &(0x7f0000000280)) 07:21:21 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 07:21:21 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:21 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syncfs(0xffffffffffffffff) 07:21:21 executing program 3: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syncfs(0xffffffffffffffff) 07:21:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000022c0)={0x2, &(0x7f0000002280)=[{0x2}, {0x6}]}) [ 1836.611800][ T4105] __nla_validate_parse: 1 callbacks suppressed [ 1836.611872][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1836.670339][ T4105] device team58 entered promiscuous mode [ 1836.677195][ T4105] 8021q: adding VLAN 0 to HW filter on device team58 [ 1836.724783][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1836.853027][ T24] audit: type=1326 audit(1676445681.895:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25d788c0f9 code=0x0 [ 1836.883985][ T5100] usb 1-1: new high-speed USB device number 100 using dummy_hcd 07:21:22 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ftruncate(r0, 0x23) 07:21:22 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:22 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) [ 1837.023307][ T5147] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1837.214319][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000000c0)='.', 0x1}], 0x2}, 0x0) [ 1837.270985][ T4115] device team59 entered promiscuous mode [ 1837.277957][ T4115] 8021q: adding VLAN 0 to HW filter on device team59 [ 1837.294159][ T5100] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.304963][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1837.314534][ T5100] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1837.325219][ T5100] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:22 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1837.423302][ T5147] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.439018][ T5147] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1837.450506][ T5147] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.564684][ T5100] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1837.574255][ T5100] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1837.583038][ T5100] usb 1-1: Product: syz [ 1837.587492][ T5100] usb 1-1: Manufacturer: syz [ 1837.592378][ T5100] usb 1-1: SerialNumber: syz [ 1837.713293][ T5147] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1837.723257][ T5147] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1837.731942][ T5147] usb 6-1: Product: syz [ 1837.741178][ T5147] usb 6-1: Manufacturer: syz [ 1837.746608][ T5147] usb 6-1: SerialNumber: syz [ 1837.820027][ T5100] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1837.827269][ T5100] cdc_wdm 1-1:21.0: Unknown control protocol [ 1837.829859][ T5147] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1837.847084][ T5147] cdc_wdm 6-1:21.0: Unknown control protocol [ 1838.024156][ T5100] usb 1-1: USB disconnect, device number 100 [ 1838.096803][ T5084] usb 6-1: USB disconnect, device number 30 07:21:24 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:24 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:24 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 07:21:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00'}) 07:21:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:24 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1839.891259][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1839.964300][ T4134] device team60 entered promiscuous mode [ 1839.971205][ T4134] 8021q: adding VLAN 0 to HW filter on device team60 [ 1839.997740][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1840.050983][ T4131] device team25 entered promiscuous mode [ 1840.057856][ T4131] 8021q: adding VLAN 0 to HW filter on device team25 [ 1840.178842][ T4131] team0: Port device vlan12 added [ 1840.223778][ T5084] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1840.363258][ T5102] usb 6-1: new high-speed USB device number 31 using dummy_hcd 07:21:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000540)=""/209, 0x1a, 0xd1, 0x1}, 0x20) 07:21:25 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 07:21:25 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1840.652996][ T5084] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.663698][ T5084] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1840.673238][ T5084] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:25 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1840.785698][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1}]}}, &(0x7f0000000540)=""/209, 0x2a, 0xd1, 0x1}, 0x20) [ 1840.839254][ T4147] device team61 entered promiscuous mode [ 1840.846130][ T4147] 8021q: adding VLAN 0 to HW filter on device team61 [ 1840.857377][ T5102] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.867872][ T5102] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1840.877197][ T5102] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.043468][ T5084] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1841.053018][ T5084] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1841.061676][ T5084] usb 1-1: Product: syz [ 1841.066228][ T5084] usb 1-1: Manufacturer: syz [ 1841.071023][ T5084] usb 1-1: SerialNumber: syz [ 1841.086885][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1841.142345][ T4152] device team26 entered promiscuous mode [ 1841.149099][ T4152] 8021q: adding VLAN 0 to HW filter on device team26 [ 1841.193152][ T5102] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1841.202932][ T5102] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1841.211595][ T5102] usb 6-1: Product: syz [ 1841.217627][ T5102] usb 6-1: Manufacturer: syz [ 1841.223054][ T5102] usb 6-1: SerialNumber: syz 07:21:26 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1841.306184][ T5084] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1841.312806][ T5084] cdc_wdm 1-1:21.0: Unknown control protocol [ 1841.413684][ T5102] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1841.422271][ T5102] cdc_wdm 6-1:21.0: Unknown control protocol [ 1841.429853][ T4152] team0: Port device vlan13 added [ 1841.549791][ T5084] usb 1-1: USB disconnect, device number 101 [ 1841.646053][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1841.710286][ T5147] usb 6-1: USB disconnect, device number 31 [ 1841.821752][ T4160] device team62 entered promiscuous mode [ 1841.830743][ T4160] 8021q: adding VLAN 0 to HW filter on device team62 07:21:28 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:28 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)="8f", 0x1}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x0) 07:21:28 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:28 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 07:21:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1843.090211][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="a3d8f1d33a9bd859f1c0245796b185e5973e74b590d64aaca267623471ff8a241224f3c9598edd92e4bf0de82ff92b6c49d4aadb93e21a5478eb8ceaa9a8a7207ab3da27af3dfbfb84e5c53c5ad9ec0b9710df874e7eebb64b8c0a4058e330a16406a19c41df0a8ced6be8ac6a9cd438cb7ed99a801fd61af32c684351fb7b16bef2412c90637ede6beb0f96d52aab618110687e44", 0x95}, {&(0x7f00000000c0)="e2de090bd11de1cc9ae5b63815a7ef1201227d27728b", 0x16}, {&(0x7f0000000100)="3c2ee773e6766dd59f41b3e871c552e4eea903f24e568f1c3664ecad9f6bb0e8d789f8cc055850be23af77b96cf25e69cdc3a39d3cb29ce996956bd5acf0176526a21db2bbb589f9e0d2c5ac401a61c9706d2ee0abcd1e342899f4be6f3d2f0c4b876e24e5fb19e7871af76fdecbc2d1311cb95932595722afd4f6bcb5fb1061346df90d5b02ee449c2bccd23d566dbff5f3f19973658120cbfa46d8b0da3209bc45b5b198", 0xa5}, {&(0x7f00000001c0)="ec051c941a5edffc9a01418ba75c239919ac386c65dae81bd3790636f40b897e0c566b77a87907a6becf8d721b370fa50743237a393ec5e37f5cef4e21196e3d12e06f42ceb7bddbc59461083cb8993e19167597c7b8d324f012e00f9fbbb5064c3e084b3e4c716cff8d0707aec872c1187f75b739a0610d412577fa05605d204e4a709c78f270229bc723b81de025cb6d591fc71941015439fc45636a915e0f299854510c264411eff2515ee863f73c2160e1a54511bacad2431411fe7e201e65d98e25830e8c42b30025", 0xcb}, {&(0x7f00000002c0)="2ca96a12671c94d7fd878bbcad1c9e22099d5279102abc7012940c8201b375b20a0229949db963418236959a48837cfdffe1a918147dee467e0afb8f80508af2a8b1f0449ccd1a00f61d704f9217d654ff8bfc4d1e37f78aed0d0f9dd3951486ef498cf48565a315c3db5099626f8c70b0fa32f2eccc225ab879bea70c2d4a1c9e54034e3b492fd94fcdba4ce2e0f4f2042549596f58c8691cdac58c53c01a2ba821eff8a8a41f7617f045990e26dec8bb9f295bd170334f5f544e6eb6db79e3cb492fe4209a47d974818b190cc0f933c204d5792b3ca9e5dce70a7212ec527d93808d500be0", 0xe6}, {&(0x7f00000003c0)="8040d76538d45539967ed449526b97f5a974d63562678d9a578251872e9134f764ccabcc2b2f4aa45059e1cbd30ff240cb4a2e5aeace3a0ca032bd4ebc1ad4d538372934bc68ffacead5ef40ded3c40bf3a3c47af3519a31277b9dd684ba1d52ca9169b4654ba4da2fcce7b47a98ddd1273a2aa9c4712e76ae5ff30ad33208ec217a09ab2f9702cb8c7459c6c2bc10d4b8cf4232d6d40e907bf579cb9da7556474be7359a4e43be88a591fe356a70fd6eacffbd88a3c188c1dd181c6d433b185f053ccc248cba3aab4785b", 0xcb}, {&(0x7f00000004c0)="261dd6bfd20b295eed6ec3e24dd60baef833dfb13ebcd7f4e720de299f", 0x2}, {&(0x7f0000000500)="04b43915ed2248799372db1b4a11f3f47d09ccfaea81b1a80883dfbf959b492d9a3bca0e47de130047165116f38c82f3cca436ceecd13ac3c5aee8a1f3edff200256922cef64ea0b551612a978a9e5151047", 0x52}, {&(0x7f0000000580)="92c57b2d4a3539870f5be25fe5c52b89871d205f3bcd4bb79485ef8e8fde36b8d5797171b997010ac35a93475f05cab741ae4b784d44423404485196645ce4e74647e77bcbc828701dc744459cf8a47cbc20e2a105f520111329043f476a5317c5aed3d3ef399409f6b9e325605f043ec3e3978decd8cff5ecfd569e2c46396113aede3ba3886befb9be5f20be958d", 0x8f}, {&(0x7f0000000640)="cfbaed36a9fdc11366e0016e6f224298990ee7a0b5cf1af9656671f186bd6b06f4923b232c64e857c8a1d26f86f7cd173b7db8bb358aa3da5c1157cf584eab9cdd502a73d8683ababf458a81641c6ebddcbce640ade863bfd25220f3a484c74a1e8f0edecdc18e35d89583e2ac38af5e1ecd5aec8bd4b453caf1f852ebdb7ce5420eaed7854467382aaedf259c90c15c7259f6b9a29409ff1ce53803b46b1a3d070cc83ce88838558e8aac2cb196e270f8f0c8a6250d08133a9262af8b3ed11581f31bfe86772d379b1a7ed322d83924208e8cdae461", 0xd6}], 0xa, &(0x7f0000000800)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_ttl, @ip_tos_int={{0x14}}], 0xc8}, 0x0) [ 1843.352519][ T5147] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1843.353801][ T4172] device team63 entered promiscuous mode [ 1843.368805][ T4172] 8021q: adding VLAN 0 to HW filter on device team63 [ 1843.385122][ T5084] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1843.393667][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:28 executing program 1: mknod$loop(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) [ 1843.542402][ T5147] usb 4-1: device descriptor read/64, error 18 [ 1843.545703][ T4175] device team27 entered promiscuous mode [ 1843.555747][ T4175] 8021q: adding VLAN 0 to HW filter on device team27 [ 1843.556541][ T5091] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1843.750196][ T4181] team0: Port device vlan14 added 07:21:28 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 1843.803841][ T5084] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.812384][ T5147] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1843.814465][ T5084] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1843.831186][ T5084] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 1843.973311][ T5091] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.988844][ T5091] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1843.998963][ T5091] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.016926][ T5147] usb 4-1: device descriptor read/64, error 18 [ 1844.070410][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:29 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1844.133373][ T5084] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1844.143010][ T5084] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1844.144118][ T5147] usb usb4-port1: attempt power cycle [ 1844.151790][ T5084] usb 1-1: Product: syz [ 1844.161946][ T5084] usb 1-1: Manufacturer: syz [ 1844.166871][ T5084] usb 1-1: SerialNumber: syz [ 1844.243817][ T5091] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1844.253605][ T5091] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1844.262509][ T5091] usb 6-1: Product: syz [ 1844.266890][ T5091] usb 6-1: Manufacturer: syz [ 1844.271693][ T5091] usb 6-1: SerialNumber: syz 07:21:29 executing program 1: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1013, 0xffffffffffffffff, 0x0) [ 1844.416253][ T5084] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1844.422900][ T5084] cdc_wdm 1-1:21.0: Unknown control protocol [ 1844.437043][ T5091] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1844.445290][ T5091] cdc_wdm 6-1:21.0: Unknown control protocol [ 1844.511875][ T4187] device team64 entered promiscuous mode [ 1844.518765][ T4187] 8021q: adding VLAN 0 to HW filter on device team64 [ 1844.533546][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1844.630609][T16817] usb 1-1: USB disconnect, device number 102 [ 1844.670275][ T5084] usb 6-1: USB disconnect, device number 32 [ 1844.672485][ T5147] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1844.737834][ T4193] device team28 entered promiscuous mode [ 1844.744796][ T4193] 8021q: adding VLAN 0 to HW filter on device team28 [ 1844.852403][ T4194] team0: Port device vlan15 added [ 1844.873951][ T5147] usb 4-1: device descriptor read/8, error -61 [ 1845.142334][ T5147] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1845.315093][ T5147] usb 4-1: device descriptor read/8, error -61 [ 1845.432778][ T5147] usb usb4-port1: unable to enumerate USB device 07:21:31 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:31 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 07:21:31 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 07:21:31 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:31 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1846.322284][ T4201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:31 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @val, {@ipv6}}, 0x0) [ 1846.529022][ T4201] device team29 entered promiscuous mode [ 1846.536756][ T4201] 8021q: adding VLAN 0 to HW filter on device team29 [ 1846.553419][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1846.596046][ T5147] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1846.668231][ T4207] device team65 entered promiscuous mode [ 1846.675127][ T4207] 8021q: adding VLAN 0 to HW filter on device team65 [ 1846.683742][ T5084] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1846.716193][ T4212] team0: Port device vlan16 added [ 1846.782372][ T5102] usb 6-1: new high-speed USB device number 33 using dummy_hcd 07:21:31 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x0, 0x0) 07:21:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1846.885660][ T5084] usb 4-1: device descriptor read/64, error 18 07:21:32 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 1847.003218][ T5147] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.014436][ T5147] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1847.023888][ T5147] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.163392][ T5102] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.174488][ T5102] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1847.183997][ T5102] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.196178][ T5084] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1847.210778][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:32 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) [ 1847.273337][ T5147] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1847.283137][ T5147] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1847.291830][ T5147] usb 1-1: Product: syz [ 1847.296561][ T5147] usb 1-1: Manufacturer: syz [ 1847.301367][ T5147] usb 1-1: SerialNumber: syz [ 1847.386690][ T4219] device team30 entered promiscuous mode [ 1847.393606][ T4219] 8021q: adding VLAN 0 to HW filter on device team30 [ 1847.413785][ T5084] usb 4-1: device descriptor read/64, error 18 [ 1847.443116][ T5102] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1847.452668][ T5102] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1847.453930][ T4221] team0: Port device vlan17 added [ 1847.462918][ T5102] usb 6-1: Product: syz [ 1847.463019][ T5102] usb 6-1: Manufacturer: syz [ 1847.463109][ T5102] usb 6-1: SerialNumber: syz [ 1847.494852][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1847.546336][ T5147] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1847.548543][ T4222] device team66 entered promiscuous mode [ 1847.552778][ T5147] cdc_wdm 1-1:21.0: Unknown control protocol [ 1847.559261][ T4222] 8021q: adding VLAN 0 to HW filter on device team66 [ 1847.585978][ T5084] usb usb4-port1: attempt power cycle 07:21:32 executing program 1: select(0x4, 0x0, &(0x7f0000000040)={0x500}, &(0x7f0000000080), &(0x7f0000000140)) [ 1847.654258][ T5102] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1847.660496][ T5102] cdc_wdm 6-1:21.0: Unknown control protocol [ 1847.740040][T26254] usb 1-1: USB disconnect, device number 103 [ 1847.915218][ T5091] usb 6-1: USB disconnect, device number 33 [ 1848.002919][ T5084] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1848.204219][ T5084] usb 4-1: device descriptor read/8, error -61 [ 1848.472738][ T5084] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1848.682602][ T5084] usb 4-1: device descriptor read/8, error -61 [ 1848.814044][ T5084] usb usb4-port1: unable to enumerate USB device 07:21:34 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:34 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:21:34 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:34 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x20007605, 0x0) 07:21:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1849.583782][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1849.722201][ T4234] device team31 entered promiscuous mode [ 1849.728977][ T4234] 8021q: adding VLAN 0 to HW filter on device team31 [ 1849.742861][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:34 executing program 1: select(0x40, &(0x7f0000000200)={0x7}, &(0x7f0000000240)={0x6}, 0x0, 0x0) [ 1849.797643][ T4241] device team67 entered promiscuous mode [ 1849.804560][ T4241] 8021q: adding VLAN 0 to HW filter on device team67 [ 1849.842948][ T4243] team0: Port device vlan18 added [ 1849.902577][T26254] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1849.932744][ T5091] usb 6-1: new high-speed USB device number 34 using dummy_hcd 07:21:35 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1850.012973][ T5084] usb 1-1: new high-speed USB device number 104 using dummy_hcd 07:21:35 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) [ 1850.102512][T26254] usb 4-1: device descriptor read/64, error 18 07:21:35 executing program 1: symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') [ 1850.293645][ T5091] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.304413][ T5091] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1850.313888][ T5091] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.355626][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1850.394276][T26254] usb 4-1: new high-speed USB device number 38 using dummy_hcd 07:21:35 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) [ 1850.444341][ T5084] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.454965][ T5084] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1850.463759][ T4251] device team32 entered promiscuous mode [ 1850.464300][ T5084] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.470683][ T4251] 8021q: adding VLAN 0 to HW filter on device team32 [ 1850.520631][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1850.553863][ T5091] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1850.563735][ T5091] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1850.572705][ T5091] usb 6-1: Product: syz [ 1850.577098][ T5091] usb 6-1: Manufacturer: syz [ 1850.581907][ T5091] usb 6-1: SerialNumber: syz [ 1850.623092][T26254] usb 4-1: device descriptor read/64, error 18 [ 1850.727241][ T4253] device team68 entered promiscuous mode [ 1850.734306][ T4253] 8021q: adding VLAN 0 to HW filter on device team68 [ 1850.753500][ T5084] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1850.762878][ T5084] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1850.768354][ T5091] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1850.771445][ T5084] usb 1-1: Product: syz [ 1850.777620][ T5091] cdc_wdm 6-1:21.0: Unknown control protocol [ 1850.781724][ T5084] usb 1-1: Manufacturer: syz [ 1850.792814][ T5084] usb 1-1: SerialNumber: syz [ 1850.811174][T26254] usb usb4-port1: attempt power cycle 07:21:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000100), 0x10) [ 1850.835811][ T4255] team0: Port device vlan19 added [ 1850.980821][ T5084] cdc_wdm 1-1:21.0: cdc-wdm1: USB WDM device [ 1850.987233][ T5084] cdc_wdm 1-1:21.0: Unknown control protocol [ 1851.021270][ T5147] usb 6-1: USB disconnect, device number 34 [ 1851.197646][ T5091] usb 1-1: USB disconnect, device number 104 [ 1851.242465][T26254] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1851.443302][T26254] usb 4-1: device descriptor read/8, error -61 [ 1851.712243][T26254] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1851.912738][T26254] usb 4-1: device descriptor read/8, error -61 [ 1852.033103][T26254] usb usb4-port1: unable to enumerate USB device 07:21:37 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:37 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 07:21:37 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 07:21:37 executing program 1: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 07:21:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1852.781984][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:38 executing program 1: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x8) [ 1852.918791][ T4267] device team33 entered promiscuous mode [ 1852.925606][ T4267] 8021q: adding VLAN 0 to HW filter on device team33 [ 1852.938566][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1853.073413][ T5091] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1853.098062][ T4273] device team69 entered promiscuous mode [ 1853.104904][ T4273] 8021q: adding VLAN 0 to HW filter on device team69 [ 1853.120343][T26254] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1853.136600][ T4274] team0: Port device vlan20 added [ 1853.164818][T16817] usb 6-1: new high-speed USB device number 35 using dummy_hcd 07:21:38 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file1\x00', 0x200, 0x0) 07:21:38 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 07:21:38 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0) [ 1853.332735][T26254] usb 4-1: device descriptor read/64, error 18 [ 1853.443728][ T5091] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.454653][ T5091] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1853.464204][ T5091] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.539662][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1853.552957][T16817] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.563776][T16817] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1853.573127][T16817] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:38 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/91, 0x5a}, {&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/55, 0x37}], 0x10000000000002dc}, 0x0) [ 1853.593975][ T4282] device team70 entered promiscuous mode [ 1853.600811][ T4282] 8021q: adding VLAN 0 to HW filter on device team70 [ 1853.663457][ T5091] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1853.670281][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1853.673103][ T5091] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1853.691401][ T5091] usb 1-1: Product: syz [ 1853.696044][ T5091] usb 1-1: Manufacturer: syz [ 1853.700826][ T5091] usb 1-1: SerialNumber: syz [ 1853.735590][ T4284] device team34 entered promiscuous mode [ 1853.742465][ T4284] 8021q: adding VLAN 0 to HW filter on device team34 [ 1853.754371][T26254] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1853.854498][ T5091] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1853.860725][ T5091] cdc_wdm 1-1:21.0: Unknown control protocol [ 1853.872766][T16817] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1853.882328][T16817] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1853.890992][T16817] usb 6-1: Product: syz [ 1853.895705][T16817] usb 6-1: Manufacturer: syz [ 1853.900510][T16817] usb 6-1: SerialNumber: syz [ 1853.953587][T26254] usb 4-1: device descriptor read/64, error 18 [ 1853.988376][ T4284] team0: Port device vlan21 added 07:21:39 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) [ 1854.007020][ T5147] usb 1-1: USB disconnect, device number 105 [ 1854.030122][T16817] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1854.036629][T16817] cdc_wdm 6-1:21.0: Unknown control protocol [ 1854.084928][T26254] usb usb4-port1: attempt power cycle [ 1854.185049][ T5091] usb 6-1: USB disconnect, device number 35 [ 1854.290259][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1854.410933][ T4289] device team71 entered promiscuous mode [ 1854.418234][ T4289] 8021q: adding VLAN 0 to HW filter on device team71 [ 1854.533538][T26254] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1854.703595][T26254] usb 4-1: device descriptor read/8, error -61 07:21:40 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:40 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0) 07:21:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0xd1) renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00') 07:21:40 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 07:21:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1854.997663][T26254] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1855.030687][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1855.129766][ T4293] device team72 entered promiscuous mode [ 1855.136774][ T4293] 8021q: adding VLAN 0 to HW filter on device team72 [ 1855.176983][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1855.230879][ T4300] device team35 entered promiscuous mode [ 1855.237787][ T4300] 8021q: adding VLAN 0 to HW filter on device team35 [ 1855.283155][T26254] usb 4-1: device descriptor read/8, error -61 [ 1855.370255][ T4298] team0: Port device vlan22 added [ 1855.418482][T26254] usb usb4-port1: unable to enumerate USB device [ 1855.425818][ T5091] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1855.592952][T16817] usb 6-1: new high-speed USB device number 36 using dummy_hcd 07:21:40 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 07:21:40 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 07:21:40 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0) [ 1855.823756][ T5091] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.834782][ T5091] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1855.844292][ T5091] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.897324][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1855.951074][ T4309] device team73 entered promiscuous mode [ 1855.957912][ T4309] 8021q: adding VLAN 0 to HW filter on device team73 [ 1855.976146][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:41 executing program 1: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{}, {0x0, 0xffffffffffffffff}}, 0x0) [ 1855.993402][T16817] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.003998][T16817] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1856.014905][T16817] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1856.028532][ T4307] device team36 entered promiscuous mode [ 1856.035444][ T4307] 8021q: adding VLAN 0 to HW filter on device team36 [ 1856.073474][ T5091] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1856.083539][ T5091] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1856.092336][ T5091] usb 1-1: Product: syz [ 1856.096755][ T5091] usb 1-1: Manufacturer: syz [ 1856.101619][ T5091] usb 1-1: SerialNumber: syz [ 1856.221396][ T4314] team0: Port device vlan23 added [ 1856.258677][ T5091] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1856.265037][ T5091] cdc_wdm 1-1:21.0: Unknown control protocol [ 1856.289328][T16817] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1856.298837][T16817] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1856.307799][T16817] usb 6-1: Product: syz [ 1856.312292][T16817] usb 6-1: Manufacturer: syz [ 1856.317100][T16817] usb 6-1: SerialNumber: syz 07:21:41 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) [ 1856.402991][T26254] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1856.411504][T16817] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1856.418139][T16817] cdc_wdm 6-1:21.0: Unknown control protocol [ 1856.449647][ T5091] usb 1-1: USB disconnect, device number 106 07:21:41 executing program 1: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) [ 1856.629179][T16817] usb 6-1: USB disconnect, device number 36 [ 1856.643403][T26254] usb 4-1: device descriptor read/64, error 18 [ 1856.656426][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1856.784097][ T4320] device team74 entered promiscuous mode [ 1856.790874][ T4320] 8021q: adding VLAN 0 to HW filter on device team74 [ 1856.922493][T26254] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1857.128049][T26254] usb 4-1: device descriptor read/64, error 18 [ 1857.255096][T26254] usb usb4-port1: attempt power cycle 07:21:42 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:42 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:42 executing program 1: open$dir(&(0x7f0000000040)='.\x00', 0x1, 0x0) 07:21:42 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 07:21:42 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1857.538829][ T4336] device team75 entered promiscuous mode [ 1857.545751][ T4336] 8021q: adding VLAN 0 to HW filter on device team75 [ 1857.622289][ T4337] device team37 entered promiscuous mode [ 1857.629015][ T4337] 8021q: adding VLAN 0 to HW filter on device team37 [ 1857.722686][T26254] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1857.730312][ T4337] team0: Port device vlan24 added [ 1857.762593][ T5084] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1857.813767][ T5100] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1857.903523][T26254] usb 4-1: device descriptor read/8, error -61 [ 1858.162782][ T5084] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.173662][ T5084] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1858.183063][ T5084] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.197189][T26254] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1858.256674][ T5100] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.267317][ T5100] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1858.277026][ T5100] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.377068][ T5084] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1858.386753][ T5084] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1858.395821][ T5084] usb 1-1: Product: syz [ 1858.400200][ T5084] usb 1-1: Manufacturer: syz [ 1858.405110][ T5084] usb 1-1: SerialNumber: syz [ 1858.412810][T26254] usb 4-1: device descriptor read/8, error -61 [ 1858.488424][ T5084] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1858.495220][ T5084] cdc_wdm 1-1:21.0: Unknown control protocol [ 1858.508737][ T5100] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1858.518096][ T5100] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1858.528204][ T5100] usb 6-1: Product: syz [ 1858.532946][ T5100] usb 6-1: Manufacturer: syz [ 1858.537742][ T5100] usb 6-1: SerialNumber: syz [ 1858.549010][T26254] usb usb4-port1: unable to enumerate USB device [ 1858.620085][ T5100] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1858.629541][ T5100] cdc_wdm 6-1:21.0: Unknown control protocol [ 1858.792297][ C0] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1858.799374][ C0] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1858.813017][ T5100] usb 1-1: USB disconnect, device number 107 [ 1858.833952][ T4341] cdc_wdm 1-1:21.0: Tx URB error: -19 [ 1858.857931][ T5084] usb 6-1: USB disconnect, device number 37 07:21:44 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:44 executing program 1: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5) 07:21:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 07:21:44 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1859.211965][ T4345] __nla_validate_parse: 2 callbacks suppressed [ 1859.219172][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1859.278811][ T4345] device team38 entered promiscuous mode [ 1859.285679][ T4345] 8021q: adding VLAN 0 to HW filter on device team38 [ 1859.303638][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:44 executing program 1: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 1859.358228][ T4350] device team76 entered promiscuous mode [ 1859.365043][ T4350] 8021q: adding VLAN 0 to HW filter on device team76 07:21:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1859.555693][ T4354] team0: Port device vlan25 added 07:21:44 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b46ef9c8d41", @empty, @val, {@ipv4}}, 0x0) [ 1859.662725][ T5147] usb 4-1: new high-speed USB device number 49 using dummy_hcd 07:21:44 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:44 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) 07:21:44 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1859.862700][ T5147] usb 4-1: device descriptor read/64, error 18 [ 1859.959072][ T4367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:45 executing program 1: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) [ 1860.013039][ T4367] device team77 entered promiscuous mode [ 1860.019806][ T4367] 8021q: adding VLAN 0 to HW filter on device team77 07:21:45 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) [ 1860.103533][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1860.133094][ T5147] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1860.190850][ T4370] device team39 entered promiscuous mode [ 1860.197805][ T4370] 8021q: adding VLAN 0 to HW filter on device team39 [ 1860.214526][ T5100] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1860.296826][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1860.322899][ T5147] usb 4-1: device descriptor read/64, error 18 [ 1860.398761][ T4378] device team78 entered promiscuous mode [ 1860.406522][ T4378] 8021q: adding VLAN 0 to HW filter on device team78 [ 1860.439191][ T4370] team0: Port device vlan26 added [ 1860.444495][ T5147] usb usb4-port1: attempt power cycle [ 1860.452896][ T5084] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1860.642774][ T5100] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.653511][ T5100] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1860.663527][ T5100] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.843993][ T5084] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.853608][ T5147] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1860.855029][ T5084] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1860.871283][ T5084] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.884795][ T5100] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1860.894524][ T5100] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1860.903357][ T5100] usb 1-1: Product: syz [ 1860.907720][ T5100] usb 1-1: Manufacturer: syz [ 1860.912577][ T5100] usb 1-1: SerialNumber: syz [ 1861.032889][ T5147] usb 4-1: device descriptor read/8, error -61 [ 1861.040823][ T5100] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1861.048631][ T5100] cdc_wdm 1-1:21.0: Unknown control protocol [ 1861.103538][ T5084] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1861.113671][ T5084] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1861.122589][ T5084] usb 6-1: Product: syz [ 1861.126958][ T5084] usb 6-1: Manufacturer: syz [ 1861.131761][ T5084] usb 6-1: SerialNumber: syz [ 1861.233762][ T5084] cdc_wdm 6-1:21.0: cdc-wdm1: USB WDM device [ 1861.240003][ T5084] cdc_wdm 6-1:21.0: Unknown control protocol [ 1861.302774][ T5147] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1861.351766][ T5091] usb 1-1: USB disconnect, device number 108 [ 1861.358284][ C1] cdc_wdm 1-1:21.0: nonzero urb status received: -71 [ 1861.358389][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - 0 bytes [ 1861.358487][ C1] cdc_wdm 1-1:21.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1861.394031][ T4362] cdc_wdm 1-1:21.0: Tx URB error: -19 [ 1861.400949][ T4380] cdc_wdm 1-1:21.0: Tx URB error: -19 [ 1861.444786][ T5084] usb 6-1: USB disconnect, device number 38 [ 1861.523910][ T5147] usb 4-1: device descriptor read/8, error -61 [ 1861.649838][ T5147] usb usb4-port1: unable to enumerate USB device 07:21:47 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:47 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) 07:21:47 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:47 executing program 1: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ff8000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 07:21:47 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:47 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) [ 1862.454903][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:47 executing program 1: mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 1862.671269][ T4388] device team40 entered promiscuous mode [ 1862.678295][ T4388] 8021q: adding VLAN 0 to HW filter on device team40 [ 1862.690791][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1862.724828][ T5084] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1862.751930][ T4393] device team79 entered promiscuous mode [ 1862.758748][ T4393] 8021q: adding VLAN 0 to HW filter on device team79 [ 1862.842784][ T5100] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1862.853770][ T5147] usb 6-1: new high-speed USB device number 39 using dummy_hcd 07:21:48 executing program 1: socketpair(0x1, 0x3, 0x7f, 0x0) [ 1863.104902][ T5084] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.115586][ T5084] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1863.124987][ T5084] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:48 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 1863.222893][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.234937][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1863.237603][ T5147] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.244615][ T5100] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1863.269550][ T5147] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1863.279237][ T5147] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), 0x4) [ 1863.385320][ T5084] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1863.394733][ T5084] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1863.403533][ T5084] usb 1-1: Product: syz [ 1863.407989][ T5084] usb 1-1: Manufacturer: syz [ 1863.412942][ T5084] usb 1-1: SerialNumber: syz 07:21:48 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1863.432756][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1863.443793][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1863.452785][ T5100] usb 4-1: Product: syz [ 1863.457163][ T5100] usb 4-1: Manufacturer: syz [ 1863.462073][ T5100] usb 4-1: SerialNumber: syz [ 1863.497470][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1863.526516][ T5084] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1863.533030][ T5084] cdc_wdm 1-1:21.0: Unknown control protocol [ 1863.635185][ T5100] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 1863.691842][ T4405] device team80 entered promiscuous mode [ 1863.698703][ T4405] 8021q: adding VLAN 0 to HW filter on device team80 [ 1863.713563][ T5147] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1863.723431][ T5147] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1863.732390][ T5147] usb 6-1: Product: syz [ 1863.736753][ T5147] usb 6-1: Manufacturer: syz [ 1863.741635][ T5147] usb 6-1: SerialNumber: syz 07:21:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1863.764087][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1863.794629][ T5084] usb 1-1: USB disconnect, device number 109 [ 1863.879969][ T5100] usb 4-1: USB disconnect, device number 53 [ 1863.942505][ T4410] device team40 entered promiscuous mode [ 1863.950886][ T4410] 8021q: adding VLAN 0 to HW filter on device team40 [ 1863.974586][ T5147] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1863.980890][ T5147] cdc_wdm 6-1:21.0: Unknown control protocol [ 1864.094625][ T5147] usb 6-1: USB disconnect, device number 39 07:21:49 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 07:21:49 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 07:21:49 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:49 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1864.806405][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:21:49 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:49 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000053c0)=ANY=[@ANYBLOB="58000000000000001600000000080000de28607b892144e40899081e5dfd4ebd63c217b210ad6558b3466512a83a1fc0ca12afd5803cc415ebf4ec56f5b9257be1bfc0ca27c404a28c20bb338a070cf9e37e5b048cb60000c8000000000000000d01000047"], 0x120}}], 0x2, 0x0) [ 1864.967551][ T4421] device team81 entered promiscuous mode [ 1864.974435][ T4421] 8021q: adding VLAN 0 to HW filter on device team81 [ 1865.090173][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1865.142622][T26254] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1865.150906][ T5100] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1865.180051][ T4430] device team40 entered promiscuous mode 07:21:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) [ 1865.186879][ T4430] 8021q: adding VLAN 0 to HW filter on device team40 [ 1865.352744][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1865.416935][ T4436] device team82 entered promiscuous mode [ 1865.423861][ T4436] 8021q: adding VLAN 0 to HW filter on device team82 [ 1865.435203][ T5147] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1865.543881][T26254] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.554493][T26254] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1865.563965][T26254] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1865.577885][ T5100] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.589724][ T5100] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1865.599541][ T5100] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.803597][ T5147] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.814433][ T5147] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1865.823824][ T5147] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.865928][T26254] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1865.875717][T26254] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1865.884673][T26254] usb 4-1: Product: syz [ 1865.889037][T26254] usb 4-1: Manufacturer: syz [ 1865.895336][T26254] usb 4-1: SerialNumber: syz [ 1865.907467][ T5100] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1865.916906][ T5100] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1865.925628][ T5100] usb 1-1: Product: syz [ 1865.929995][ T5100] usb 1-1: Manufacturer: syz [ 1865.934855][ T5100] usb 1-1: SerialNumber: syz [ 1866.029114][ T5100] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1866.037745][ T5100] cdc_wdm 1-1:21.0: Unknown control protocol [ 1866.050837][T26254] cdc_wdm: probe of 4-1:21.0 failed with error -22 07:21:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:51 executing program 1: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000008c0), 0x13f}}, 0x20) [ 1866.174828][ T5147] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1866.184379][ T5147] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1866.193529][ T5147] usb 6-1: Product: syz [ 1866.197918][ T5147] usb 6-1: Manufacturer: syz [ 1866.207525][ T5147] usb 6-1: SerialNumber: syz [ 1866.283005][T26254] usb 1-1: USB disconnect, device number 110 [ 1866.285860][T16817] usb 4-1: USB disconnect, device number 54 [ 1866.439931][ T5147] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1866.446650][ T5147] cdc_wdm 6-1:21.0: Unknown control protocol [ 1866.564378][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:21:51 executing program 1: syz_open_dev$audion(0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000980)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 07:21:51 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) [ 1866.702551][T16817] usb 6-1: USB disconnect, device number 40 [ 1866.783930][ T4442] device team40 entered promiscuous mode [ 1866.790716][ T4442] 8021q: adding VLAN 0 to HW filter on device team40 07:21:52 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) 07:21:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:52 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_setup(0xffff, &(0x7f0000000000)) 07:21:52 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000500)=0x200, 0x4) 07:21:52 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:52 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1867.602319][T26254] usb 1-1: new high-speed USB device number 111 using dummy_hcd 07:21:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0}, 0x20) [ 1867.643779][ T5100] usb 4-1: new high-speed USB device number 55 using dummy_hcd 07:21:52 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000001180), 0xffffffffffffffff) [ 1867.795705][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1867.854828][ T4462] device team40 entered promiscuous mode [ 1867.861554][ T4462] 8021q: adding VLAN 0 to HW filter on device team40 [ 1868.023632][ T5100] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.024803][T16817] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1868.034981][ T5100] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1868.052525][ T5100] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 07:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) [ 1868.067229][T26254] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.077808][T26254] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1868.087071][T26254] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:53 executing program 1: r0 = memfd_secret(0x0) read$eventfd(r0, 0x0, 0x0) [ 1868.374814][T26254] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1868.384613][T26254] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1868.393482][T26254] usb 1-1: Product: syz [ 1868.397941][T26254] usb 1-1: Manufacturer: syz [ 1868.402906][T26254] usb 1-1: SerialNumber: syz [ 1868.443590][ T5100] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1868.454880][ T5100] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1868.464068][ T5100] usb 4-1: Product: syz [ 1868.468443][ T5100] usb 4-1: Manufacturer: syz [ 1868.473298][ T5100] usb 4-1: SerialNumber: syz [ 1868.492711][T16817] usb 6-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.503339][T16817] usb 6-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1868.512716][T16817] usb 6-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:21:53 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:53 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) memfd_secret(0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) [ 1868.675113][T26254] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1868.681341][T26254] cdc_wdm 1-1:21.0: Unknown control protocol [ 1868.731561][ T5100] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 1868.841922][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1868.868336][ T5100] usb 1-1: USB disconnect, device number 111 [ 1868.883080][T16817] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1868.892743][T16817] usb 6-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1868.901402][T16817] usb 6-1: Product: syz [ 1868.905977][T16817] usb 6-1: Manufacturer: syz [ 1868.910858][T16817] usb 6-1: SerialNumber: syz [ 1868.912238][T26254] usb 4-1: USB disconnect, device number 55 [ 1869.035712][ T4476] device team40 entered promiscuous mode [ 1869.042715][ T4476] 8021q: adding VLAN 0 to HW filter on device team40 [ 1869.087626][T16817] cdc_wdm 6-1:21.0: cdc-wdm0: USB WDM device [ 1869.094171][T16817] cdc_wdm 6-1:21.0: Unknown control protocol [ 1869.351307][T26254] usb 6-1: USB disconnect, device number 41 [ 1869.362646][T16817] usb 2-1: new high-speed USB device number 123 using dummy_hcd 07:21:54 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:54 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 07:21:54 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f0300000080"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="5ddf5f9cd8f05aa98193df8bc0771d679e6eaa00f8a0db04d49efa9cb563798dab5a9475cfb20726fdd2f60c31dd82c531c0eac4a603a3d9cb9585e3adb0f62ad7ee2c2e", 0x35) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008800, 0x0, 0x0) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:54 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1869.891422][T16817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.901072][T16817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.910174][T16817] usb 2-1: Product: syz [ 1869.914640][T16817] usb 2-1: Manufacturer: syz [ 1869.919459][T16817] usb 2-1: SerialNumber: syz [ 1870.111760][T16817] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1870.155565][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1870.246006][ T4490] device team40 entered promiscuous mode [ 1870.253866][ T4490] 8021q: adding VLAN 0 to HW filter on device team40 [ 1870.322953][T16817] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1870.331218][ T5091] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1870.704632][ T5091] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.720086][ T5091] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1870.730218][ T5091] usb 4-1: config 21 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1870.744000][T16817] usb 1-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config 07:21:55 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000403505a1a440b7aa24e80109025c000215000000090400000102090000052406000105240f00000d240f030000008000000014000624fd000000090581030002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x2bb98205) pipe(&(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_disconnect(r0) syncfs(0xffffffffffffffff) 07:21:55 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) [ 1870.754537][T16817] usb 1-1: config 21 has 1 interface, different from the descriptor's value: 2 [ 1870.763851][T16817] usb 1-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.781068][ T5147] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1871.005487][T16817] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 [ 1871.019915][T16817] usb 1-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1871.029579][T16817] usb 1-1: Product: syz [ 1871.034053][T16817] usb 1-1: Manufacturer: syz [ 1871.038951][T16817] usb 1-1: SerialNumber: syz [ 1871.046266][ T5091] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a1, bcdDevice=b7.40 07:21:56 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010477ca753157400000005e4a44", @ANYRES32, @ANYBLOB="0d01140000000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @can, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn={0x22, 0x1, 0x3, 0x9a, 0x6c}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='veth0_to_batadv\x00', 0x200, 0x5, 0xec}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket(0x18, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@mcast1}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x5ccccbbb, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:21:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1871.055797][ T5091] usb 4-1: New USB device strings: Mfr=170, Product=36, SerialNumber=232 [ 1871.064631][ T5091] usb 4-1: Product: syz [ 1871.069017][ T5091] usb 4-1: Manufacturer: syz [ 1871.074008][ T5091] usb 4-1: SerialNumber: syz [ 1871.137779][ T5100] usb 2-1: USB disconnect, device number 123 [ 1871.246092][ T5091] cdc_wdm: probe of 4-1:21.0 failed with error -22 [ 1871.294848][T16817] cdc_wdm 1-1:21.0: cdc-wdm0: USB WDM device [ 1871.301086][T16817] cdc_wdm 1-1:21.0: Unknown control protocol [ 1871.349606][ T4499] hsr0: VLAN not yet supported [ 1871.349703][ T4499] =====================================================