8] Bluetooth: hci7: command 0x1001 tx timeout [ 3181.602952][T19541] Bluetooth: hci7: Frame reassembly failed (-84) [ 3181.611135][T19541] Bluetooth: hci7: Frame reassembly failed (-84) [ 3182.875150][T18025] Bluetooth: hci6: command 0x1009 tx timeout [ 3183.675506][T24458] Bluetooth: hci7: command 0x1009 tx timeout [ 3185.984893][T26526] Bluetooth: hci5: command 0x0406 tx timeout 10:14:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(0x0) 10:14:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x0, 0xa, 0x800, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x4, 0x0, 0x0, 0x9, 0x0, @mcast2, @mcast2, 0x1, 0x700, 0x7f}}) 10:14:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x108, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @dev}, @dev, [], [], 'batadv0\x00', 'batadv0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x906b, 0x0, 0x0, 0x3}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast1, @private1, [], [], 'macsec0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "aa20"}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 10:14:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @multicast1}, @dev, [], [], 'batadv0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@mcast1, @private2, [], [], 'macsec0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 10:14:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xf, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:14:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x5360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3187.817931][T31827] x_tables: duplicate underflow at hook 2 [ 3187.827081][T31826] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3187.879123][T31832] x_tables: duplicate underflow at hook 2 10:14:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(0x0) [ 3187.946607][T24669] Bluetooth: hci6: Frame reassembly failed (-84) [ 3187.954968][T31832] x_tables: duplicate underflow at hook 2 [ 3188.007468][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:14:27 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00'}) 10:14:27 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) [ 3188.265215][T24669] Bluetooth: hci7: Frame reassembly failed (-84) [ 3188.336862][T31865] bond282: (slave vlan203): making interface the new active one 10:14:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r0, 0x1, 0x2, &(0x7f00000004c0)="9f3ac6bd", 0x4) [ 3188.382465][T31865] bond282: (slave vlan203): Enslaving as an active interface with an up link [ 3188.406771][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3188.432876][T31826] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:14:27 executing program 4: syz_emit_ethernet(0x9b, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa81001c0008004c"], 0x0) 10:14:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x10, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3188.612815][T31938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3188.756681][T31938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3189.984731][ T3881] Bluetooth: hci6: command 0x1003 tx timeout [ 3189.992692][T31723] Bluetooth: hci6: sending frame failed (-49) [ 3190.314923][T26526] Bluetooth: hci7: command 0x1003 tx timeout [ 3190.322664][T31723] Bluetooth: hci7: sending frame failed (-49) [ 3192.074740][T24458] Bluetooth: hci6: command 0x1001 tx timeout [ 3192.081270][T31723] Bluetooth: hci6: sending frame failed (-49) [ 3192.384577][T24458] Bluetooth: hci7: command 0x1001 tx timeout [ 3192.390714][T31723] Bluetooth: hci7: sending frame failed (-49) [ 3194.160243][T24458] Bluetooth: hci6: command 0x1009 tx timeout [ 3194.464287][T26526] Bluetooth: hci7: command 0x1009 tx timeout 10:14:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(0x0) 10:14:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:14:37 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x1000, 0x0) 10:14:37 executing program 4: perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82941, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:14:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xc0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3198.108120][T31987] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:14:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7f, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) [ 3198.275772][T31989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3198.436602][T32017] bond283: (slave vlan204): making interface the new active one [ 3198.450544][T32017] bond283: (slave vlan204): Enslaving as an active interface with an up link [ 3198.470841][T31989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3198.510768][T31987] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:14:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(0x0) 10:14:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 10:14:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xec0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:14:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(0x0) 10:14:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}]}, 0x18}}, 0x0) 10:14:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x6360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3198.770621][T32092] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3198.817264][T17628] Bluetooth: hci6: Frame reassembly failed (-84) 10:14:37 executing program 4: pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={0xff}, &(0x7f0000000480)={0x0, 0x989680}, 0x0) [ 3198.964245][ T279] Bluetooth: hci7: Frame reassembly failed (-84) 10:14:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, 0x0, 0x0) [ 3199.025887][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:14:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, 0x0, 0x701) 10:14:38 executing program 0: socket$inet(0x2, 0xa, 0x6) 10:14:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x4, 0x0, 0x7f}, 0x40) 10:14:38 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) [ 3199.368381][T32125] bond284: (slave vlan205): making interface the new active one [ 3199.385962][T32125] bond284: (slave vlan205): Enslaving as an active interface with an up link [ 3199.400827][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3199.419295][T32100] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3200.863306][ T3881] Bluetooth: hci6: command 0x1003 tx timeout [ 3200.871182][T31723] Bluetooth: hci6: sending frame failed (-49) [ 3201.023090][T26526] Bluetooth: hci7: command 0x1003 tx timeout [ 3201.029331][T31723] Bluetooth: hci7: sending frame failed (-49) [ 3202.953763][T26526] Bluetooth: hci6: command 0x1001 tx timeout [ 3202.960390][T31723] Bluetooth: hci6: sending frame failed (-49) [ 3203.113697][T26526] Bluetooth: hci7: command 0x1001 tx timeout [ 3203.119814][T31723] Bluetooth: hci7: sending frame failed (-49) [ 3205.033834][T24458] Bluetooth: hci6: command 0x1009 tx timeout [ 3205.193368][T24458] Bluetooth: hci7: command 0x1009 tx timeout 10:14:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x33fe0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3209.004885][T32206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3209.143597][T32206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:14:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(0x0) 10:14:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="8301ec6cda35e956ff19ae929fb20fbb3f0e826843f2a038c4267b9cdb600923117fe3f34f1bc593eb41d21d512ba4248fa35664026f87de71d3ae177e425cb27bc7549b3eeb77ea206508d35ee1bca27bd604270010e9027f50b8b2ca233584f9276e95141c78457e7bf876e3727704845524fe906fbe9cdf8d3ed73f8e48bb7b91426472d07499554887489ba795f988", 0x91}, {&(0x7f00000000c0)="9a5ae97ba6025814fcb8e5b58d21e08443", 0x11}, {&(0x7f0000000100)="16dfb29abc1a22e059c28bebcef5507932bc94835d91c38a01a2a66c048a60e7bed118559515972345ed8d7fe38e12b5c7", 0x31}, {&(0x7f0000000140)="fee964b7d10530ae6a1e0b01ac552cc727c0b91619b6a8becbaf7a873328622e5ac571ee7b349e746add1aeb9a3164a0a56202d381a1aed0f847b40eb65c093862d9e6a8a8898d97c2eeefe644bb28f550c57be1be9fb5d431591a4187d31489f8a85b9cbd9be5dca5cc5b896dbd229b634443c8017d878565549b986c4d543ad01d207e2c8b42929b7e77a6db4cb3f26e985f50b197411cb13b0fed2f40d9bed9a706c6ffcd4db15b141dd1e311dc23f9d8cb8cecee17c4013df4b14c5b5f619a0f60396ad477b63fbdfc68566d59c26329ac26336cfaf04243aa663c02ef55d6d5394a4d4e85", 0xe7}, {&(0x7f0000000240)="4d6622384d16086a52e667665fe35e1795802b671fa5b5b3b0f36a6e9a8b5c10285eb53dc19ef7554c71f57ba3f927d5317446bb60f7f19e540f713ad7ae3703223b89a5e61549a419f9d6f06eaffdd52ffd3011dc52ec2a5d469e81d0cc8a8577b72f5b52ebfe25729262d2d5afea4ca6a0097d57213354404f5079b49c0006b345c3fb3832f5347a7ccd7710b0b857e7e2eeea91128033d6c6caeee961bb4eab9bb11be0f3ece0d85f8caef486843cb6", 0xb1}, {&(0x7f0000000300)="e98f5277bb71d0948b903776cffb2e015d2aea7ecb966a56314f20e3f28fa592295a66558a4754408a55b079281517542fbd4356b1dc0f6ffc78c629c07bb80e1f24e599ada64ea2010e0cbb8829e23579d3c84ddabe", 0x56}], 0x6}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000d00)="b1ebc9b3afbb4c4aad39f3ec7f35e5468bcf600d51bd57dc0bda92d5ffe79b30064853f8561c11137eaed1fc26a6a4887c55f81d2944a70d2f1a9c7c5c723a5ebdedcf49667168844da3342c00b35b9c3b3fc62d4351d562dc439792813fcdf54d52f535447fe1ec6b5905f9377f4b7a8ee76d262a93f86622f5b16bec7a8dd2438113538b37748206576778bee2a8705d61f7ba5342cdd38881e91a46b6747422fbf7f54c3954ce597a118568bdea52b757ce438b56d3451a89314f33d71c7c6c604dc72d8c9fa91e8cc4dbc6efaa4c1194636b8f00da63d4de67510197f63ecf9bc76c018ebc45ea5e3e8fbeb24a1ca9b769bbf3537bce14d98ced23a82ae10a313fd085096570dd11bc8e6ecc10a784fe47281449cbad83170e6ba3bff2e1afe13dbacfb5e704033f468cc5422a4697434a434e2cf14b5dcbfc5750a057f1ee9e8d453431aef9f39681fb60bb8ad0dee855eeee1c241977b711ceb75cc484faf07c87cc3aa622d4d2be3b8ca914ff6a940d552d351d36fcdc94dda76f826db6188c543b74381160f9e5201be950bdd07493f0a67861d2c9a5d8384548671f278dbd4aa651674065eb53bec930021a142c784f16808e941da9f4c52168c49d977b520776808a4dc2e8004100eb2f045e5b4bded9aec07670e97aae3c823d56e7c3af435f7be0b3c3618d5bd886d3ad7a9cf2b1fb540678b7baf2c920f6291917d8b9c7e5ddd146647f30bd3c448b1d71afc3682beb5ef0b7325146e41e4538bd9b5276e6589f7c8993870ae36ae8b25c68f05ddfb54f94aa51e1489bd2feb36f7978c416167acb09fd3d496d14d8a51ee3009dd2d982d4c76b404ccd138e3bbca89b05aa3b66d1526ba491049ca34f545bfece452417b1fc66a7be2227d91b47bd8c64723e499ce4ced9ba834bf7ffc3ae35b598e281672cfc75429255470dab9fbdfa610efcae75fdd1d8eba1e5a35eedbb019b7bb44483fc7ed4fe9726506d0962bdcef86dfaee22a22b456de3538405a17d9a6ee7ac437453ecbc8ebe728572aed6154e30c7ced8623990e4f29bb8df7e03852d4f6934ad7bd3124cfbf6a871913fea50225ff3c83f5a870a48e170e51c451db823ecd096ce649559c0f87dbe76f1f4cb957d7c7c0d18358f6b57cd2007e176c0bb745bf0e588a1daa8b74e24d4f1eb9bfb39f3e9e19ffbe5efa76bd9346c1791e48fa595ea61f297f5e2d65eb385a6374960e583faae18ddbb133903d0b04f75e8eae960d64750f67e52309116ce842c281af143f36d014d6d705e9200da91638aa768e125295ada3de69e51f46ae747dc75fdadf8d5fe1d2626f5018eac168628736687cc8935b025e094da75873b429e881642380a7e139690e47b5f8ff2ec2e69d782ff4a9ac7db996b115addf2d38048a529946ed60c4b8ee61962544e7621f96da610a782f8041a2875292455ed6db454886c440414670f2321c1a8bf79e53f09e78e61c34ba8e05cc3ec92c6a806e5d4d0d8cf4fc45d1f54c89c509fb5410566f72b4a9a73e5531a7d63665d56747fd5e84cbd0f7588235341d5d045f214b2f3e6b3019524ff067f24a01a4ae9d8490ed65327a67eb4669299c6df700527019337cadecd5e1678af8c79b608eff2727d706bbab238a9dbbb20eef584d3c1d36cd28b8e40ff00dde9d65717f10c2f94a4a62b923e327f5cc99eefc6436a1ba3e13ef9c5e98d58e2ce910638e77d587bdf0a19d026d9ff793b92a9baac52f49aefbe015b32572edd4e71dfd1ce3b891237b03c829692c79e48a0c6f3c0743aac451b6b27c41d19f72da414c3634a2597f73f7ffc49679c6207e376c4a00a32f1b1d25d6adb2b65d41985de90a02d73d361ac13d3cea69e2de6fe418701ae55495a28bd945d0d36e391029fb29fd07c0fddc831bc2f8c0f9d329881e993acbfa92c50bc5e0a0a6c3095e580c0206752087b33413a0cde0570ec9c6abed36dd6a8e0dd3ae88166773225098bbbaa0683a47ea14f006e39b5e498b66eef77c4634e6363f90d955bf0f7ff8f12da91800cb4bc4d7187742fa76bb61e436fa9d59bd5298f071d29331556ba7d2395fe8ccb0127dbec12a3a4a092e59f4155aed06842dcb55269c7a42c300a52612de7d46de5dee32b02a8a0c88d704f4c703558e3f1f35cda975dd37865f03d0aad3a9cea37593df16a44eb440ff8bc502a4a8bbe8b1fc3c8b5ac6e47303d7d6bb2063e934833e9dddb7e72bb4a4f7814d17cce964a5661f6ad9ba940093e40db335a82f7fa73ef9793a1a99c1dfcf357ed29c1c9e9b6ed70b3b433a637135bbcd6d7016114319895c173721a9052568e403906a75bef09940485b4be6234d82e3166da53aa79b8ac8aadde86cbfac25a2a70ec0bea9ca9ebe974538ccf61fc1dcc46ec433836af2009821d7e4438d56057cca633009a6f4f07ab7335279057388d58811faaac7db6ae9cde9aa8f0815c949b258e5e38f1baba70ba1d4f1f5f564944a043e6b2477004a2707fe751f948e500a8a7d9b76a716c02a87db164c7663d7d65ec87971eef18cadd304103df044e17563fcb765303dbf79dcd13a0fef438a8a2069d963893ee8eabe883c3e6371704fad9820734450f32ad500abc2f4ae20d06e1cefa92e48c3f624889aa04349ba7942e3c16de165bb1baa0cac210b7ba384e58c02836e9b91a5096ae1b8a205de109f212e78e0371ecd947331530e62f6dacd9090702dd63ab23e1a460756030e0bb24add3364d0998e4c217ce9a74fafbedfbe8b3cd661b7683f1be67e3e6b07906956f89f30e2a14ef4e142ab89581bf1faeae33dbaa5be5b0e322c3fa150cfa2e2aff88e76638151410bfb17b3c079a1fca0dff87f229f3259eb6068d4fcd0da7eea649ac54055f93677f7763d4da650d5d632629f1e59baa1334d0a7361013193b16179f3c184ce033ebbe267502dbe35767a76265a6809730b3b2e154a20910e4e253e8a25a93bbdcf2d524141eeb71dfb7653337edb0fa3ac05909a07f3af0f7d42bd52a4160b8c738c6b4b26f3891cc887908495b46f5c99886133b0146f6da7883f1eb96286281d32b863c279b745225fcc46981e3a82397ac290163fd03f6306afeb0780deb2c1fe53ca9bbb3d7b6979c6acaeeb23402bf0b25879dbbc4d7b2d623801b4f1dba041a24b9beb2da1bc7071fb4819d2e7fa06ab8f9ce87667a9eb8c8e02f10a31217faf22c7ce64ed9a4b7347113169bdf0b810ba6acf3a50966b6eb71667c7ff400b3235995ba50e0255669b6d722ded7a054d7bba180980df8d376309c59d1d1a38b09348f9133c3e793ce4dd9f7e688236c1abb102869418f58621dd5619de74f12082b98434cf6972ac3ed45cb13a22dec1e0915c7924b9721d79f39962dac9e88c0471de527788ff31aedf41e90f9ca18ca03cac5785d42db7ce340f814086a977a4be4a44d9470b017e07a4210e544ba639e412274f75a5a41d49c2e33b2dfc6f60c0f69dfd2f1c24e8bf0da5574d62419d8504fe113cd76b3c67ba853ffc4cfc2e0c0ec1485ffe8c0dd9b6ce5cbd68e3b829bc8a4ec02560a90a15ae46194d151e7667a616f82a1952c8b52f248738d5b230c380afcacda053e09f8d8b2aea5f606a19aef8ebc341c06e8e96e3e5ce399d4d39c50c06a196494cac670f20159e9587ac02f4741d47dd1164d3df3959ea1152fbdbc324bcefa0662ed08a63a9ea8225530f27641174b8b11faff53eddc61d6394032f33f447ec94cd832921991c0f86f2225f672c012bd3be3a9627d46bed05a36203d8f2f303239d4517cb7f18dccdead1ddf05a5402363d728c7bb4bec1d55f48830e859537273351e03bb68ce828ab2022b5d8d912e849768f40ce9677647ff61b3fdc7ed90eca8a18e3a8bd68810e21c6a8cd5bf0e0d7172ec85d70bc427b6c68c09f1d35606feedb9f75ccb621d0f1bcae8c6bf8b74497e7b0dbed3b5e5697191da81520d39767f122eb03616d6e4eea19916a4f3f13efa98bdd42d94c16671a165e0b5385505a47359819d5786adb717c889cee631f846115cba52b7e0e13bceff09b4ace2ba6054ee88cb1efb7d9660ea803f0e1cfdcd132846455515fb39592d2c89b10891efff061036f7908a21584aa9fa55ec2bb0d2e7f14c617808301dc9e8f1af170cb54dee867b4d628efa08d15d7c092a205d75e8d2ac9ef547eead3767c3158401bf77dac3778561a2eb205aab46983d87d74cf0d972e34a1dfe994d342dcbc4b244077ccc30845c6e77f1a717b4e1ae7da26ca6058ea04e883f5f4509b9ff062179dd840023ef69754b363d21d14e9816e331735afb0c84920675242a9b5cbaa7fb5e4204cbe21fc43c6354280c42e88feb563647888666b8f7bb174cdc209c443ebe6880b5ed80d6eb718926be51a43bd07a01940338202a99ba6dd3196f401659dbe3aea2b8324150bd6f953540ffd402d4e149abd8560579433befbe4906f5af7bb91e4ce6ef048af58e4a33719b76cf4be3a0e50994e14a8b72af3dc41c5d1db12cd049c722a84f71f147ba07fc54004bec909baa0b1fc146d6cb63dff732c6971390f402cee7be2fc583f3d4108455ad543c9ab0c594952a64d97593717019f1ddb0d1e1066f13705a5ff268af6e14c14e3b9d8bbb7cac0720d84aeeb600f95a5e34d26c4d6c674404862d1dd72fe93529701e78e4f1a5339091934484b71a9e9a42dd85bf86be6303b6581ff4229b0847a97b12e18078392a41b8f8eb8a1e26e20dd0996982228491d65ae9910f30c3957345dca44663f4625d7cc44f91f4c8d7ccf621473bf482812d5f8eb8bf91679ab6638822a3d32b3fc1a26fb67fe63084176082bc44a61259e0e3af88008d6d4fe7b30d4c60a5efd64382897640e928cd80f86bb74cf8121440956fbc636e7a6c7e882aa85d764f7aa6f49cc15da8eed3b8ae9628a27facc616da80dcc546efdd59e50afd0741eb5c4e35fb65ff845cbe8b342b3ae7ecdfd35e2e61be214301e229124ae9368ddd584b0f097464bc0247c988ff19b5847e649ce1740e1375e12c0bd2c7b43c199facc79cb21e96a6c4f9a0f57f1acf1200dfd629d1cb5b030a780c2627a2bd1f0b9830811dd2382a18d4772dd78159722050df2367758df6c42b71ad1f22a9e1688e4bd5610b0becb4c4b863ae51f07da01533ab15db32c26822d3d97ab34eb019ad1c8a1935b41dd46b6598824d5e0727534b048bfea2d61d780c9ec63ab400bd5f36007ff4c6bef5ed04d433e438d12f15949426c447bbebbcd1b91895510666e52eafd685153e51280f36ba6cf91be6e4b0e6f370c4318a387f90049ca2e5bb9b8560e0768c41000e293fd50e88fdcf368fc0d072344b67fca395c80c85735f8f11224bbedbd36fd12cf035f238a77e2413520b5d74afa993e274941fdafb5b4ac87cd9a7d5ab8971210da0ae736bde229f9cac367443fb009351bb14affa76d9546a9b42e54de0bb49ed2d96b62d796b8a98308ce7f978537102e9532d6092f89acdda676ee755f9fddefb8b89eee6eebb68ad90f5401524e33047a0f7230d32a97830ccf5d15dab0058980072b2b3d0053c7e3cd1bc647de7777a03c69732690c44ef151cc8b82a49a608485d389294ba20928e248a546932e1797a472d338c9259e3b8b90f93b8b2f201538ad4879345bc6895167dd9088c97585e3f245aa7871f9d7357f4b5a298024d4942b53f9b7e34e8e004fa91e7c1378c35b478d312b81837115c5d18e8f50e4c140598879f2480deae2c563fed5a5699926988222518af146906638361", 0x1000}, {&(0x7f0000000440)="369e86c2712448589eedc489e2572c0ba8f05ec72d579b01abbbd0018734be8ba2008fced408b628bc85e62f0acd93d763239486c57a940c9549ea4142dc711c9ed8abc52fda0fdbeedd501460cbc49337a4299aae8a6d874337b939b51a634b17b2f703e45c7a448bcfff4969d227fb55207d4ae351230eb666ea91dcabbef9d475e6e7118d73ba7d0ce1f32ad868c8b12ac5c6dd6a1b2b9d7ad94e", 0x9c}, {&(0x7f0000000500)="3369f8e8426738a734167a223266912da64f04a481a31d5ef21cb3eae93ea10ee4b6666777a6ac121e3f49746dc2415e3c014a0014769cfe28af9ffae796bcf51bc507e38e68a7dfdd7ecd471ae9a20da39e1b6b7eb64ffb05f4ed7e7e4e2414c292ad4f6cd30c0c1fd89a919b03f246153f1c592247d104bfe5dfeed2b2222c3a93a5bf9557ed280d36f723cda41cfdcb11155f1edff65474048ff5b85bfb0286100ba2b9991886f28145f27d24b67090f69a33f58dabb4b6b19966c1366d6b7306a3834c3a4a36a4fb8733b9cd06d577fb1128d0584ef7bd29d8b0ba9357ff", 0xe0}, {&(0x7f0000000600)="9ae9d57b82b0f6b0df3d03de9412263508df82df67db296561daf108d4f4529f10b3824617ac21de8ffe323d14802a8c061aecdf68742ae8d8cd32bf292e1801b87487e09c9ac4d91768d0b61b12ab4e98d184ea9c273b08029fb66849a69a3add94ce962e8c4d39f3631a77356f63f23b6f20c18b97968e6000cddca3612e72a2ffc3", 0x83}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x50}}], 0x2, 0x0) 10:14:48 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xec4, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xe75, 0x1, "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"}]}, 0xec4}}, 0x0) 10:14:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:14:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x48}, 0x40) 10:14:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x2000034c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3209.590400][T32257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3209.637631][T32259] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:14:48 executing program 0: syz_emit_ethernet(0x19, &(0x7f0000000bc0)={@local, @dev, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, 'G'}}}}}, 0x0) [ 3209.725950][T32297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:14:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x10}}, &(0x7f0000000800)=""/132, 0x1a, 0x84, 0x1}, 0x20) [ 3209.776605][T32259] bond285: (slave vlan206): making interface the new active one [ 3209.789262][T32259] bond285: (slave vlan206): Enslaving as an active interface with an up link [ 3209.806424][T32299] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:14:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x42}}) 10:14:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x7ffff000, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3209.936037][T11504] Bluetooth: hci6: Frame reassembly failed (-84) 10:14:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x8, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:14:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x7360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3210.095856][T32354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3210.243944][T32368] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3210.385509][T32354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3210.533064][T32402] bond286: (slave vlan207): making interface the new active one [ 3210.568648][T32402] bond286: (slave vlan207): Enslaving as an active interface with an up link [ 3210.591447][T32368] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3211.982017][T24591] Bluetooth: hci6: command 0x1003 tx timeout [ 3211.989405][ T2052] Bluetooth: hci6: sending frame failed (-49) [ 3214.062159][T24591] Bluetooth: hci6: command 0x1001 tx timeout [ 3214.068583][ T2052] Bluetooth: hci6: sending frame failed (-49) [ 3216.141626][T10467] Bluetooth: hci6: command 0x1009 tx timeout 10:14:59 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x7a000000) 10:14:59 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10140) 10:14:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000400)=[@enter_looper, @acquire], 0x1100000000000000, 0x0, 0x0}) 10:14:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x2, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:14:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:14:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 3220.507393][T32453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3220.525627][T32455] binder: 32450:32455 ioctl c0306201 20000300 returned -14 10:14:59 executing program 2: shmget(0x0, 0x2000, 0x77ffffff, &(0x7f0000ffc000/0x2000)=nil) 10:14:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x68094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe3634, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3220.724230][T32456] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:14:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x82800, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x168, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xeefb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffb6a64fe7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ce9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x59}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe9d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffe00000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6494}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8010}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf255300000008000300", @ANYRES32=r6, @ANYBLOB="8d46eb2d42b0c17862d27b5bd8d8fe7a76d5ce2ec5d0dcbec0e8d05a00b520371174cae7ba17cf739c1d6514679f73a21c36a45ee12ed4f16e1c2cc6836f11090c1085dea8af159c42837ca7b3a3a336eb8248e47a374e627934"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe362e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3221.088563][T32465] bond287: (slave vlan208): making interface the new active one 10:15:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x68094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3221.162521][T32465] bond287: (slave vlan208): Enslaving as an active interface with an up link [ 3221.206971][T32510] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 10:15:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = geteuid() getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee01]) fchown(r3, r4, r5) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000002080)={0x65, 0x7d, 0x1, {{0x0, 0x4a, 0x0, 0x80000000, {0x20, 0x2, 0x2}, 0x64000000, 0x245, 0x2356dcb8, 0x7, 0x6, 'bond0\x00', 0x2, '-#', 0x9, '$+(%![+}:', 0x6, 'bond0\x00'}, 0x6, 'bond0\x00', r4, 0xffffffffffffffff, r6}}, 0x65) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in6=@local, 0x4e21, 0xaa, 0x4e23, 0xfff, 0x2, 0x20, 0x20, 0x67, 0x0, r4}, {0x6, 0x1, 0xc7, 0x7ff, 0x1000, 0x100}, {0x9f, 0xffffffff, 0xfd4, 0x101}, 0x101, 0x6e6bb6, 0x3, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d6, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x1, 0x2, 0x2, 0x3, 0x1, 0x800}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:15:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe3627, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3221.477541][T32543] bond1: (slave vlan2): making interface the new active one [ 3221.536972][T32543] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 3221.600191][T32453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3221.626051][T32552] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 10:15:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x3, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3221.927125][T32561] bond10: (slave vlan9): making interface the new active one 10:15:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x54020000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3222.079421][T32561] bond10: (slave vlan9): Enslaving as an active interface with an up link [ 3222.125032][T32456] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3222.145343][T32611] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 10:15:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x8360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe362e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3222.513364][T32615] bond5: (slave vlan4): making interface the new active one [ 3222.548014][T32615] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 3222.622946][T32695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3222.684582][T32703] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 10:15:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe3627, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3222.817100][T32702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3222.885864][T32704] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 3222.929280][T32654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4f570c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3222.974283][T32712] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:15:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x4, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3223.146886][T32713] bond11: (slave vlan10): making interface the new active one [ 3223.220101][T32713] bond11: (slave vlan10): Enslaving as an active interface with an up link 10:15:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe3617, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3223.287058][T32714] bond288: (slave vlan209): making interface the new active one [ 3223.301552][T32714] bond288: (slave vlan209): Enslaving as an active interface with an up link [ 3223.363136][T32754] bond1: (slave vlan2): making interface the new active one [ 3223.377619][T32754] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 3223.390208][ T310] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 10:15:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4c570c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3223.517783][ T364] bond6: (slave vlan5): making interface the new active one [ 3223.527986][ T364] bond6: (slave vlan5): Enslaving as an active interface with an up link [ 3223.548822][ T404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:02 executing program 0: syz_usb_connect(0x0, 0x4a, 0x0, 0x0) socket(0x10, 0x1, 0x1) r0 = dup(0xffffffffffffffff) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/36) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x176, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) dup2(r1, r2) getpid() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003e8aad4070272091ce3a000000010902120001000000000904000000bcfd71008a9ba1c72dee11af2c012ab693fc1a524aa63470a6d74b7fd7cbafa363164e22f8b360a76980f43342029f63d38285a0916ef3d48ded89a5bac185646d4e2122d2035ecb3c557c2cc4370b60a89f89b6ff91c676870204cbfc6d9a2efad3d3d49e2f0ea6c6d8babf05d0059fda429d6393d249e5b87d144b8d997b9bd2352c944346fc544505b1b893d294a1d924011ade417050e8962ddeae5994f3911ed2b98ee720f95480f9d732f833fbd6dcb01c20c515c5e650d79d53a69efe98b8e87a1889b967858f24a6af12327ef492e012ce0645075716b78c46c6bfd61128212d4e0d8e4e3242ac32045d532bb38641440e234ab15c42650880fa20d0c8e40c0b40f659cbbd850c488867dad59f7416ef2a620d16c58382d08baf0041d2fff46ed8b8e88b48b1c4a1cf5a7de1e1c7962e86c5775266002b9054838da4142c3ccf6f2e126d411ddf22fa23a6ea10f7c26aece7f31a2b0b044f4b580fbac26894cf541621ca35cbf370eeb66c4a0437f33ad29b91e6"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001a00)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) [ 3223.647269][ T405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3223.880803][T32702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3223.899284][ T413] bond3: (slave vlan4): Enslaving as an active interface with an up link 10:15:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:03 executing program 5: syz_usb_connect(0x0, 0x4a, 0x0, 0x0) socket(0x10, 0x1, 0x1) r0 = dup(0xffffffffffffffff) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/36) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x176, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) dup2(r1, r2) getpid() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001a00)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) [ 3224.774621][ T492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3224.827155][ T404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3224.901141][ T3881] usb 1-1: new high-speed USB device number 110 using dummy_hcd 10:15:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x5, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4c570c00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3225.087575][ T602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe3617, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x9360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3225.281350][ T3881] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=3a.ce [ 3225.327473][ T3881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3225.338155][ T604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3225.351363][T24458] usb 6-1: new high-speed USB device number 2 using dummy_hcd 10:15:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x6, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3225.424939][ T3881] usb 1-1: config 0 descriptor?? [ 3225.473924][ T3881] gspca_main: sq905-2.14.0 probing 2770:9120 [ 3226.069251][ T643] bond12: (slave vlan11): making interface the new active one [ 3226.087461][T24458] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=3a.ce [ 3226.097269][ T643] bond12: (slave vlan11): Enslaving as an active interface with an up link [ 3226.106701][T24458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3226.135064][ T3881] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 3226.153175][T24458] usb 6-1: config 0 descriptor?? [ 3226.167231][ T3881] sq905: probe of 1-1:0.0 failed with error -110 [ 3226.223892][ T721] bond290: (slave vlan210): making interface the new active one [ 3226.253623][T24458] gspca_main: sq905-2.14.0 probing 2770:9120 10:15:05 executing program 4: syz_usb_connect(0x0, 0x4a, 0x0, 0x0) socket(0x10, 0x1, 0x1) r0 = dup(0xffffffffffffffff) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/36) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x176, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) dup2(r1, r2) getpid() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001a00)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) [ 3226.277338][ T721] bond290: (slave vlan210): Enslaving as an active interface with an up link [ 3226.366250][ T722] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 3226.405415][ T747] __nla_validate_parse: 1 callbacks suppressed [ 3226.405438][ T747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3226.587133][ T673] validate_nla: 5 callbacks suppressed [ 3226.587153][ T673] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3226.618593][ T783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3226.638040][ T825] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:15:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x7, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3226.822313][T26526] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 3226.853158][ T864] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3227.024098][ T893] bond291: (slave vlan211): making interface the new active one [ 3227.036387][ T893] bond291: (slave vlan211): Enslaving as an active interface with an up link [ 3227.056780][ T894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3227.135338][ T864] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3227.153096][ T894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3227.211076][T26526] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=3a.ce [ 3227.220168][T26526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3227.231504][T24458] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 3227.251824][T26526] usb 5-1: config 0 descriptor?? 10:15:06 executing program 0 (fault-call:10 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:06 executing program 2 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3227.268762][T24591] usb 1-1: USB disconnect, device number 110 [ 3227.270797][T24458] sq905: probe of 6-1:0.0 failed with error -71 [ 3227.305043][T26526] gspca_main: sq905-2.14.0 probing 2770:9120 [ 3227.319128][T24458] usb 6-1: USB disconnect, device number 2 [ 3227.354617][ T963] FAULT_INJECTION: forcing a failure. [ 3227.354617][ T963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3227.376961][ T963] CPU: 1 PID: 963 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 3227.385270][ T963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3227.395474][ T963] Call Trace: [ 3227.398781][ T963] dump_stack+0x107/0x163 [ 3227.403149][ T963] should_fail.cold+0x5/0x1f [ 3227.407780][ T963] _copy_from_user+0x2c/0x180 [ 3227.412490][ T963] __x64_sys_mq_open+0x124/0x1e0 [ 3227.417458][ T963] ? do_mq_notify+0xf00/0xf00 [ 3227.422158][ T963] ? fput+0x2a/0x50 [ 3227.426004][ T963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3227.431933][ T963] do_syscall_64+0x2d/0x70 [ 3227.436380][ T963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3227.442304][ T963] RIP: 0033:0x45e149 [ 3227.446217][ T963] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3227.465851][ T963] RSP: 002b:00007f833e20fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 3227.474302][ T963] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3227.482298][ T963] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000000 [ 3227.490298][ T963] RBP: 00007f833e20fca0 R08: 0000000000000000 R09: 0000000000000000 [ 3227.498290][ T963] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 3227.506280][ T963] R13: 00000000016afb7f R14: 00007f833e2109c0 R15: 000000000119bf8c [ 3227.606730][ T971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3227.716015][ T976] FAULT_INJECTION: forcing a failure. [ 3227.716015][ T976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3227.791506][ T976] CPU: 1 PID: 976 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 3227.799801][ T976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3227.809899][ T976] Call Trace: [ 3227.813194][ T976] dump_stack+0x107/0x163 [ 3227.817560][ T976] should_fail.cold+0x5/0x1f [ 3227.822189][ T976] _copy_to_user+0x2c/0x150 [ 3227.826723][ T976] simple_read_from_buffer+0xcc/0x160 [ 3227.832128][ T976] proc_fail_nth_read+0x187/0x220 [ 3227.838064][ T976] ? proc_fault_inject_read+0x220/0x220 [ 3227.843633][ T976] ? security_file_permission+0x248/0x560 [ 3227.849393][ T976] ? proc_fault_inject_read+0x220/0x220 [ 3227.854973][ T976] vfs_read+0x1b5/0x570 [ 3227.859433][ T976] ksys_read+0x12d/0x250 [ 3227.863701][ T976] ? vfs_write+0xa80/0xa80 [ 3227.868829][ T976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3227.874757][ T976] do_syscall_64+0x2d/0x70 [ 3227.879198][ T976] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3227.885119][ T976] RIP: 0033:0x417a41 [ 3227.889030][ T976] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3227.909752][ T976] RSP: 002b:00007fd1b4438c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 3227.918200][ T976] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41 [ 3227.927370][ T976] RDX: 000000000000000f RSI: 00007fd1b4438cb0 RDI: 0000000000000007 10:15:07 executing program 5 (fault-call:4 fault-nth:0): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x8, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:07 executing program 2 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3227.935364][ T976] RBP: 00007fd1b4438ca0 R08: 0000000000000000 R09: 00000000000002ff [ 3227.943356][ T976] R10: 0000000004000002 R11: 0000000000000293 R12: 0000000000000000 [ 3227.951351][ T976] R13: 00000000016afb7f R14: 00007fd1b44399c0 R15: 000000000119c0dc 10:15:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3228.036992][ T979] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3228.159647][ T981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3228.206954][ T1024] FAULT_INJECTION: forcing a failure. [ 3228.206954][ T1024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3228.233521][T26526] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 3228.245161][T26526] sq905: probe of 5-1:0.0 failed with error -71 [ 3228.253295][ T984] FAULT_INJECTION: forcing a failure. [ 3228.253295][ T984] name failslab, interval 1, probability 0, space 0, times 0 [ 3228.266236][T26526] usb 5-1: USB disconnect, device number 86 [ 3228.318655][ T1024] CPU: 1 PID: 1024 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3228.329777][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3228.339855][ T1024] Call Trace: [ 3228.343156][ T1024] dump_stack+0x107/0x163 [ 3228.347694][ T1024] should_fail.cold+0x5/0x1f [ 3228.352313][ T1024] _copy_from_user+0x2c/0x180 [ 3228.357019][ T1024] __copy_msghdr_from_user+0x91/0x4b0 [ 3228.362421][ T1024] ? __ia32_sys_shutdown+0x70/0x70 [ 3228.367565][ T1024] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3228.373588][ T1024] sendmsg_copy_msghdr+0xa1/0x160 [ 3228.378643][ T1024] ? do_recvmmsg+0x6c0/0x6c0 [ 3228.383262][ T1024] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3228.389266][ T1024] ? _parse_integer+0x132/0x180 [ 3228.394136][ T1024] ___sys_sendmsg+0xc6/0x170 [ 3228.398861][ T1024] ? sendmsg_copy_msghdr+0x160/0x160 [ 3228.405885][ T1024] ? __fget_files+0x2c1/0x430 [ 3228.410588][ T1024] ? lock_downgrade+0x6d0/0x6d0 [ 3228.415472][ T1024] ? __fget_files+0x2e3/0x430 [ 3228.420180][ T1024] ? __fget_light+0xea/0x280 [ 3228.424788][ T1024] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3228.431054][ T1024] __sys_sendmsg+0xe5/0x1b0 [ 3228.435579][ T1024] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3228.440631][ T1024] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3228.446903][ T1024] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3228.453203][ T1024] ? fput+0x2a/0x50 [ 3228.457044][ T1024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3228.462974][ T1024] do_syscall_64+0x2d/0x70 [ 3228.467416][ T1024] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3228.473341][ T1024] RIP: 0033:0x45e149 [ 3228.477253][ T1024] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3228.497831][ T1024] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3228.507933][ T1024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3228.515923][ T1024] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3228.523915][ T1024] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3228.531903][ T1024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3228.539896][ T1024] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3228.547916][ T984] CPU: 0 PID: 984 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 3228.556192][ T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3228.566270][ T984] Call Trace: [ 3228.569568][ T984] dump_stack+0x107/0x163 [ 3228.573931][ T984] should_fail.cold+0x5/0x1f [ 3228.578550][ T984] ? getname_flags.part.0+0x50/0x4f0 [ 3228.583861][ T984] should_failslab+0x5/0x10 [ 3228.588389][ T984] kmem_cache_alloc+0x5b/0x350 [ 3228.593196][ T984] getname_flags.part.0+0x50/0x4f0 [ 3228.598345][ T984] getname+0x8e/0xd0 [ 3228.602275][ T984] do_mq_open+0x19e/0x960 [ 3228.606642][ T984] ? init_once+0x20/0x20 [ 3228.610929][ T984] __x64_sys_mq_open+0x14c/0x1e0 [ 3228.615900][ T984] ? do_mq_notify+0xf00/0xf00 [ 3228.620600][ T984] ? sched_clock+0x2a/0x40 [ 3228.625066][ T984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3228.630995][ T984] do_syscall_64+0x2d/0x70 [ 3228.635436][ T984] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3228.641353][ T984] RIP: 0033:0x45e149 [ 3228.645263][ T984] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3228.664976][ T984] RSP: 002b:00007f833e20fc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 3228.673395][ T984] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3228.681359][ T984] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000000 [ 3228.689323][ T984] RBP: 00007f833e20fca0 R08: 0000000000000000 R09: 0000000000000000 [ 3228.697283][ T984] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3228.705246][ T984] R13: 00000000016afb7f R14: 00007f833e2109c0 R15: 000000000119bf8c 10:15:07 executing program 5 (fault-call:4 fault-nth:1): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3228.761807][ T1020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3228.949760][ T1078] FAULT_INJECTION: forcing a failure. [ 3228.949760][ T1078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3228.979477][ T1021] bond292: (slave vlan212): making interface the new active one [ 3228.998298][ T1078] CPU: 0 PID: 1078 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3229.007821][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3229.017912][ T1078] Call Trace: [ 3229.021214][ T1078] dump_stack+0x107/0x163 [ 3229.025584][ T1078] should_fail.cold+0x5/0x1f [ 3229.030209][ T1078] _copy_from_user+0x2c/0x180 [ 3229.035053][ T1078] iovec_from_user+0x246/0x3c0 [ 3229.041121][ T1078] __import_iovec+0x65/0x500 10:15:08 executing program 4: syz_usb_connect(0x0, 0x4a, 0x0, 0x0) socket(0x10, 0x1, 0x1) r0 = dup(0xffffffffffffffff) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/36) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x176, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) dup2(r1, r2) getpid() ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001a00)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) 10:15:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3229.046846][ T1078] import_iovec+0x10c/0x150 [ 3229.051919][ T1078] sendmsg_copy_msghdr+0x12d/0x160 [ 3229.057693][ T1078] ? do_recvmmsg+0x6c0/0x6c0 [ 3229.062328][ T1078] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3229.068344][ T1078] ? _parse_integer+0x132/0x180 [ 3229.073238][ T1078] ___sys_sendmsg+0xc6/0x170 [ 3229.078470][ T1078] ? sendmsg_copy_msghdr+0x160/0x160 [ 3229.084267][ T1078] ? __fget_files+0x2c1/0x430 [ 3229.090709][ T1078] ? lock_downgrade+0x6d0/0x6d0 [ 3229.095938][ T1078] ? __fget_files+0x2e3/0x430 [ 3229.101153][ T1078] ? __fget_light+0xea/0x280 [ 3229.106277][ T1078] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3229.113678][ T1078] __sys_sendmsg+0xe5/0x1b0 [ 3229.118792][ T1078] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3229.123982][ T1078] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3229.131612][ T1078] ? fput+0x2a/0x50 [ 3229.136696][ T1078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3229.143993][ T1078] do_syscall_64+0x2d/0x70 [ 3229.149149][ T1078] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3229.155075][ T1078] RIP: 0033:0x45e149 [ 3229.159626][ T1078] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3229.180646][ T1078] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3229.190643][ T1078] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3229.198681][ T1078] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3229.206674][ T1078] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3229.214669][ T1078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3229.222662][ T1078] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c 10:15:08 executing program 5 (fault-call:4 fault-nth:2): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3229.293836][ T1021] bond292: (slave vlan212): Enslaving as an active interface with an up link [ 3229.395115][ T981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='.#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3229.435926][ T986] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='/#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a07153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3229.544667][ T1090] FAULT_INJECTION: forcing a failure. [ 3229.544667][ T1090] name failslab, interval 1, probability 0, space 0, times 0 [ 3229.591644][ T1090] CPU: 1 PID: 1090 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3229.600157][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3229.610239][ T1090] Call Trace: [ 3229.614481][ T1090] dump_stack+0x107/0x163 [ 3229.618851][ T1090] should_fail.cold+0x5/0x1f [ 3229.623470][ T1090] ? __alloc_skb+0x71/0x5c0 [ 3229.629623][ T1090] ? __alloc_skb+0x71/0x5c0 [ 3229.634152][ T1090] should_failslab+0x5/0x10 [ 3229.638679][ T1090] kmem_cache_alloc_node+0x55/0x370 [ 3229.645164][ T1090] __alloc_skb+0x71/0x5c0 [ 3229.649536][ T1090] netlink_sendmsg+0xa00/0xe40 [ 3229.654333][ T1090] ? netlink_unicast+0x7d0/0x7d0 [ 3229.659307][ T1090] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3229.665581][ T1090] ? netlink_unicast+0x7d0/0x7d0 [ 3229.670548][ T1090] sock_sendmsg+0xcf/0x120 [ 3229.675292][ T1090] ____sys_sendmsg+0x6e8/0x810 [ 3229.680084][ T1090] ? kernel_sendmsg+0x50/0x50 [ 3229.684792][ T1090] ? do_recvmmsg+0x6c0/0x6c0 [ 3229.689417][ T1090] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3229.697112][ T1090] ? _parse_integer+0x132/0x180 [ 3229.702005][ T1090] ___sys_sendmsg+0xf3/0x170 [ 3229.706647][ T1090] ? sendmsg_copy_msghdr+0x160/0x160 [ 3229.711965][ T1090] ? __fget_files+0x2c1/0x430 [ 3229.716789][ T1090] ? lock_downgrade+0x6d0/0x6d0 [ 3229.721681][ T1090] ? __fget_files+0x2e3/0x430 [ 3229.726391][ T1090] ? __fget_light+0xea/0x280 [ 3229.731000][ T1090] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3229.737272][ T1090] __sys_sendmsg+0xe5/0x1b0 [ 3229.743013][ T1090] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3229.748066][ T1090] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3229.754342][ T1090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3229.761594][ T1090] do_syscall_64+0x2d/0x70 [ 3229.766035][ T1090] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3229.771953][ T1090] RIP: 0033:0x45e149 [ 3229.775866][ T1090] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3229.797025][ T1090] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3229.805470][ T1090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3229.813465][ T1090] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3229.821458][ T1090] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3229.829502][ T1090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:15:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xb360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x9, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3229.838120][ T1090] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3229.951201][T24458] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 3229.975038][ T1099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':/\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:09 executing program 5 (fault-call:4 fault-nth:3): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3230.144583][ T1100] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3230.237379][ T1170] FAULT_INJECTION: forcing a failure. [ 3230.237379][ T1170] name failslab, interval 1, probability 0, space 0, times 0 [ 3230.252554][ T1170] CPU: 1 PID: 1170 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3230.260924][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3230.271007][ T1170] Call Trace: [ 3230.274307][ T1170] dump_stack+0x107/0x163 [ 3230.278675][ T1170] should_fail.cold+0x5/0x1f [ 3230.283300][ T1170] ? netlink_sendmsg+0xa00/0xe40 [ 3230.288267][ T1170] should_failslab+0x5/0x10 [ 3230.292794][ T1170] __kmalloc_node_track_caller+0x73/0x310 [ 3230.298547][ T1170] ? kmem_cache_alloc_node+0x33c/0x370 [ 3230.304047][ T1170] __alloc_skb+0xae/0x5c0 [ 3230.308408][ T1170] netlink_sendmsg+0xa00/0xe40 [ 3230.311320][ T1101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3230.313206][ T1170] ? netlink_unicast+0x7d0/0x7d0 [ 3230.313251][ T1170] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 10:15:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x02', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3230.313286][ T1170] ? netlink_unicast+0x7d0/0x7d0 [ 3230.340275][ T1170] sock_sendmsg+0xcf/0x120 [ 3230.344723][ T1170] ____sys_sendmsg+0x6e8/0x810 [ 3230.349524][ T1170] ? kernel_sendmsg+0x50/0x50 [ 3230.354226][ T1170] ? do_recvmmsg+0x6c0/0x6c0 [ 3230.358844][ T1170] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3230.365780][ T1170] ? _parse_integer+0x132/0x180 [ 3230.370663][ T1170] ___sys_sendmsg+0xf3/0x170 [ 3230.375840][ T1170] ? sendmsg_copy_msghdr+0x160/0x160 [ 3230.381160][ T1170] ? __fget_files+0x2c1/0x430 [ 3230.387465][ T1170] ? lock_downgrade+0x6d0/0x6d0 [ 3230.392794][ T1170] ? __fget_files+0x2e3/0x430 [ 3230.398814][ T1170] ? __fget_light+0xea/0x280 [ 3230.403437][ T1170] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3230.411318][ T1170] __sys_sendmsg+0xe5/0x1b0 [ 3230.415856][ T1170] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3230.420909][ T1170] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3230.427201][ T1170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3230.433136][ T1170] do_syscall_64+0x2d/0x70 [ 3230.439127][ T1170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3230.445057][ T1170] RIP: 0033:0x45e149 [ 3230.449328][ T1170] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3230.468964][ T1170] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3230.477758][ T1170] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3230.485754][ T1170] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3230.493750][ T1170] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3230.493771][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 10:15:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x04', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3230.493785][ T1170] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3230.590789][T24458] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=3a.ce [ 3230.590830][T24458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3230.593156][T24458] usb 5-1: config 0 descriptor?? [ 3230.603595][ T1139] bond293: (slave vlan213): making interface the new active one [ 3230.618061][ T1139] bond293: (slave vlan213): Enslaving as an active interface with an up link [ 3230.642402][ T1100] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3230.647889][T24458] gspca_main: sq905-2.14.0 probing 2770:9120 [ 3230.691980][ T1120] device bridge368 entered promiscuous mode [ 3230.694437][ T1120] device bridge368 left promiscuous mode [ 3230.719084][ T1120] bond293: (slave vlan214): Enslaving as an active interface with an up link [ 3241.075833][T24458] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 3241.088059][T24458] sq905: probe of 5-1:0.0 failed with error -110 10:15:20 executing program 5 (fault-call:4 fault-nth:4): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xa, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xc000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b076d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\a', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0) r3 = socket(0x10, 0xa, 0xfffffffd) r4 = dup(r3) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/71, 0x47}, {&(0x7f00000000c0)=""/149, 0x95}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/208, 0xd0}], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3241.211391][T24591] usb 5-1: USB disconnect, device number 87 [ 3241.286286][ T1221] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3241.296322][ T1219] FAULT_INJECTION: forcing a failure. [ 3241.296322][ T1219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3241.352634][ T1219] CPU: 0 PID: 1219 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3241.362554][ T1219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3241.372639][ T1219] Call Trace: [ 3241.375940][ T1219] dump_stack+0x107/0x163 [ 3241.380308][ T1219] should_fail.cold+0x5/0x1f [ 3241.390059][ T1219] _copy_from_iter_full+0x1fa/0x850 [ 3241.395939][ T1219] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3241.402215][ T1219] ? __phys_addr_symbol+0x2c/0x70 [ 3241.407272][ T1219] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3241.413025][ T1219] ? __check_object_size+0x171/0x3f0 [ 3241.418355][ T1219] netlink_sendmsg+0x873/0xe40 [ 3241.423193][ T1219] ? netlink_unicast+0x7d0/0x7d0 [ 3241.429774][ T1219] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3241.430371][ T1222] __nla_validate_parse: 2 callbacks suppressed [ 3241.430388][ T1222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3241.436048][ T1219] ? netlink_unicast+0x7d0/0x7d0 [ 3241.436085][ T1219] sock_sendmsg+0xcf/0x120 [ 3241.436115][ T1219] ____sys_sendmsg+0x6e8/0x810 [ 3241.436145][ T1219] ? kernel_sendmsg+0x50/0x50 [ 3241.436169][ T1219] ? do_recvmmsg+0x6c0/0x6c0 [ 3241.475390][ T1219] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3241.481406][ T1219] ? _parse_integer+0x132/0x180 [ 3241.486291][ T1219] ___sys_sendmsg+0xf3/0x170 [ 3241.491123][ T1219] ? sendmsg_copy_msghdr+0x160/0x160 [ 3241.496433][ T1219] ? __fget_files+0x2c1/0x430 [ 3241.502450][ T1219] ? lock_downgrade+0x6d0/0x6d0 [ 3241.507347][ T1219] ? __fget_files+0x2e3/0x430 [ 3241.512061][ T1219] ? __fget_light+0xea/0x280 [ 3241.516677][ T1219] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3241.522951][ T1219] __sys_sendmsg+0xe5/0x1b0 [ 3241.527483][ T1219] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3241.532532][ T1219] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3241.538812][ T1219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3241.544819][ T1219] do_syscall_64+0x2d/0x70 10:15:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\b', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3241.550647][ T1219] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3241.556568][ T1219] RIP: 0033:0x45e149 [ 3241.560482][ T1219] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3241.569962][ T1223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:20 executing program 5 (fault-call:4 fault-nth:5): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3241.580107][ T1219] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3241.580140][ T1219] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3241.580158][ T1219] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3241.580176][ T1219] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.580193][ T1219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 3241.580210][ T1219] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3241.754845][ T1275] FAULT_INJECTION: forcing a failure. [ 3241.754845][ T1275] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.802313][ T1275] CPU: 1 PID: 1275 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3241.810700][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3241.822249][ T1275] Call Trace: [ 3241.825561][ T1275] dump_stack+0x107/0x163 [ 3241.829929][ T1275] should_fail.cold+0x5/0x1f [ 3241.834556][ T1275] ? skb_clone+0x14f/0x3c0 [ 3241.839096][ T1275] should_failslab+0x5/0x10 [ 3241.843627][ T1275] kmem_cache_alloc+0x5b/0x350 [ 3241.848429][ T1275] skb_clone+0x14f/0x3c0 [ 3241.853600][ T1275] netlink_deliver_tap+0xa2d/0xc00 [ 3241.859242][ T1275] netlink_unicast+0x5e5/0x7d0 [ 3241.864049][ T1275] ? netlink_attachskb+0x870/0x870 [ 3241.869277][ T1275] ? _copy_from_iter_full+0x275/0x850 [ 3241.874681][ T1275] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3241.880954][ T1275] ? __phys_addr_symbol+0x2c/0x70 [ 3241.886012][ T1275] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3241.891763][ T1275] ? __check_object_size+0x171/0x3f0 [ 3241.897090][ T1275] netlink_sendmsg+0x907/0xe40 [ 3241.901893][ T1275] ? netlink_unicast+0x7d0/0x7d0 [ 3241.906876][ T1275] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3241.913157][ T1275] ? netlink_unicast+0x7d0/0x7d0 [ 3241.918379][ T1275] sock_sendmsg+0xcf/0x120 [ 3241.922825][ T1275] ____sys_sendmsg+0x6e8/0x810 [ 3241.927623][ T1275] ? kernel_sendmsg+0x50/0x50 [ 3241.933202][ T1275] ? do_recvmmsg+0x6c0/0x6c0 [ 3241.939370][ T1275] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3241.940285][T24591] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 3241.945377][ T1275] ? _parse_integer+0x132/0x180 [ 3241.945431][ T1275] ___sys_sendmsg+0xf3/0x170 [ 3241.945463][ T1275] ? sendmsg_copy_msghdr+0x160/0x160 [ 3241.945498][ T1275] ? __fget_files+0x2c1/0x430 [ 3241.945530][ T1275] ? lock_downgrade+0x6d0/0x6d0 [ 3241.982948][ T1275] ? __fget_files+0x2e3/0x430 [ 3241.987673][ T1275] ? __fget_light+0xea/0x280 [ 3241.993996][ T1275] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3242.000275][ T1275] __sys_sendmsg+0xe5/0x1b0 [ 3242.007732][ T1275] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3242.013599][ T1275] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3242.019893][ T1275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3242.027687][ T1275] do_syscall_64+0x2d/0x70 [ 3242.032137][ T1275] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3242.039793][ T1275] RIP: 0033:0x45e149 [ 3242.045416][ T1275] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3242.065137][ T1275] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3242.073580][ T1275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3242.083237][ T1275] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3242.092140][ T1275] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 10:15:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3242.100135][ T1275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 3242.108202][ T1275] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3242.200270][T24591] usb 5-1: device descriptor read/64, error 18 10:15:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3242.336385][ T1264] bond294: (slave vlan215): making interface the new active one [ 3242.396976][ T1264] bond294: (slave vlan215): Enslaving as an active interface with an up link [ 3242.423594][ T1279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3242.438470][ T1281] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:21 executing program 5 (fault-call:4 fault-nth:6): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3242.456799][ T1222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3242.489714][T24591] usb 5-1: new high-speed USB device number 89 using dummy_hcd 10:15:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xb, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3242.597063][ T1331] FAULT_INJECTION: forcing a failure. [ 3242.597063][ T1331] name failslab, interval 1, probability 0, space 0, times 0 10:15:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xc360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3242.671103][ T1331] CPU: 1 PID: 1331 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3242.679485][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3242.685067][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3242.689583][ T1331] Call Trace: [ 3242.689599][ T1331] dump_stack+0x107/0x163 [ 3242.689643][ T1331] should_fail.cold+0x5/0x1f [ 3242.689668][ T1331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 3242.689708][ T1331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 3242.689743][ T1331] should_failslab+0x5/0x10 [ 3242.689769][ T1331] __kmalloc+0x72/0x2e0 [ 3242.689802][ T1331] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 3242.689844][ T1331] genl_family_rcv_msg_doit+0xda/0x320 [ 3242.689875][ T1331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 3242.689909][ T1331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3242.689939][ T1331] ? apparmor_capable+0x1d8/0x460 [ 3242.689972][ T1331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3242.690000][ T1331] ? security_capable+0x8f/0xc0 [ 3242.690030][ T1331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3242.690058][ T1331] ? ns_capable_common+0x117/0x140 [ 3242.690092][ T1331] genl_rcv_msg+0x32f/0x590 [ 3242.690124][ T1331] ? genl_get_cmd+0x480/0x480 [ 3242.690152][ T1331] ? nl80211_notify_iface+0x180/0x180 [ 3242.690187][ T1331] ? lock_release+0x710/0x710 [ 3242.690211][ T1331] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 3242.690250][ T1331] netlink_rcv_skb+0x153/0x420 [ 3242.690278][ T1331] ? genl_get_cmd+0x480/0x480 [ 3242.690308][ T1331] ? netlink_ack+0xab0/0xab0 [ 3242.690353][ T1331] genl_rcv+0x24/0x40 [ 3242.690379][ T1331] netlink_unicast+0x533/0x7d0 [ 3242.690412][ T1331] ? netlink_attachskb+0x870/0x870 [ 3242.690438][ T1331] ? _copy_from_iter_full+0x275/0x850 [ 3242.690467][ T1331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3242.690496][ T1331] ? __phys_addr_symbol+0x2c/0x70 [ 3242.690523][ T1331] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3242.690549][ T1331] ? __check_object_size+0x171/0x3f0 [ 3242.701048][T24591] usb 5-1: device descriptor read/64, error 18 [ 3242.703111][ T1331] netlink_sendmsg+0x907/0xe40 [ 3242.703154][ T1331] ? netlink_unicast+0x7d0/0x7d0 [ 3242.703190][ T1331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3242.703220][ T1331] ? netlink_unicast+0x7d0/0x7d0 [ 3242.703247][ T1331] sock_sendmsg+0xcf/0x120 [ 3242.703275][ T1331] ____sys_sendmsg+0x6e8/0x810 [ 3242.703304][ T1331] ? kernel_sendmsg+0x50/0x50 [ 3242.820131][T24591] usb usb5-port1: attempt power cycle [ 3242.822825][ T1331] ? do_recvmmsg+0x6c0/0x6c0 10:15:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70700935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3242.822868][ T1331] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3242.822899][ T1331] ? _parse_integer+0x132/0x180 [ 3242.930413][ T1331] ___sys_sendmsg+0xf3/0x170 [ 3242.935038][ T1331] ? sendmsg_copy_msghdr+0x160/0x160 [ 3242.940356][ T1331] ? __fget_files+0x2c1/0x430 [ 3242.945063][ T1331] ? lock_downgrade+0x6d0/0x6d0 [ 3242.949959][ T1331] ? __fget_files+0x2e3/0x430 [ 3242.954678][ T1331] ? __fget_light+0xea/0x280 [ 3242.959301][ T1331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3242.965579][ T1331] __sys_sendmsg+0xe5/0x1b0 [ 3242.970113][ T1331] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3242.975160][ T1331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3242.981446][ T1331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3242.987376][ T1331] do_syscall_64+0x2d/0x70 [ 3242.991821][ T1331] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3242.998024][ T1331] RIP: 0033:0x45e149 [ 3243.001936][ T1331] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:15:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3243.022088][ T1331] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3243.030529][ T1331] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3243.038529][ T1331] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3243.047130][ T1331] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3243.055119][ T1331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3243.064124][ T1331] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c 10:15:22 executing program 5 (fault-call:4 fault-nth:7): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3243.218063][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3243.393349][ T1348] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3243.452793][ T1390] FAULT_INJECTION: forcing a failure. [ 3243.452793][ T1390] name failslab, interval 1, probability 0, space 0, times 0 [ 3243.495404][ T1387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3243.510480][ T1390] CPU: 0 PID: 1390 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3243.518856][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3243.528937][ T1390] Call Trace: [ 3243.532240][ T1390] dump_stack+0x107/0x163 [ 3243.536611][ T1390] should_fail.cold+0x5/0x1f [ 3243.541816][ T1390] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 3243.550537][ T1390] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 3243.558173][ T1390] should_failslab+0x5/0x10 [ 3243.562705][ T1390] __kmalloc+0x72/0x2e0 [ 3243.567565][ T1390] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 3243.575877][ T1390] genl_family_rcv_msg_doit+0xda/0x320 [ 3243.581377][ T1390] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 3243.588787][ T1390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3243.595065][ T1390] ? apparmor_capable+0x1d8/0x460 [ 3243.600117][ T1390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3243.606378][ T1390] ? security_capable+0x8f/0xc0 [ 3243.608087][ T1388] bond295: (slave vlan216): making interface the new active one [ 3243.611257][ T1390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3243.611295][ T1390] ? ns_capable_common+0x117/0x140 [ 3243.611332][ T1390] genl_rcv_msg+0x32f/0x590 [ 3243.611365][ T1390] ? genl_get_cmd+0x480/0x480 [ 3243.611389][ T1390] ? nl80211_notify_iface+0x180/0x180 [ 3243.611422][ T1390] ? lock_release+0x710/0x710 [ 3243.642570][ T1388] bond295: (slave vlan216): Enslaving as an active interface with an up link [ 3243.646042][ T1390] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 3243.646090][ T1390] netlink_rcv_skb+0x153/0x420 [ 3243.646121][ T1390] ? genl_get_cmd+0x480/0x480 [ 3243.646157][ T1390] ? netlink_ack+0xab0/0xab0 [ 3243.679570][ T1390] genl_rcv+0x24/0x40 [ 3243.684565][ T1390] netlink_unicast+0x533/0x7d0 [ 3243.689764][ T1390] ? netlink_attachskb+0x870/0x870 [ 3243.695007][ T1390] ? _copy_from_iter_full+0x275/0x850 [ 3243.700410][ T1390] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3243.708040][ T1390] ? __phys_addr_symbol+0x2c/0x70 [ 3243.713218][ T1390] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3243.719483][ T1390] ? __check_object_size+0x171/0x3f0 [ 3243.725795][ T1390] netlink_sendmsg+0x907/0xe40 [ 3243.730931][ T1390] ? netlink_unicast+0x7d0/0x7d0 [ 3243.736116][ T1390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3243.743526][ T1390] ? netlink_unicast+0x7d0/0x7d0 [ 3243.748738][ T1390] sock_sendmsg+0xcf/0x120 [ 3243.753819][ T1390] ____sys_sendmsg+0x6e8/0x810 [ 3243.759153][ T1390] ? kernel_sendmsg+0x50/0x50 [ 3243.764275][ T1390] ? do_recvmmsg+0x6c0/0x6c0 [ 3243.769385][ T1390] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3243.776043][ T1390] ? _parse_integer+0x132/0x180 [ 3243.781242][ T1390] ___sys_sendmsg+0xf3/0x170 [ 3243.786342][ T1390] ? sendmsg_copy_msghdr+0x160/0x160 [ 3243.791871][ T1390] ? __fget_files+0x2c1/0x430 [ 3243.796772][ T1390] ? lock_downgrade+0x6d0/0x6d0 [ 3243.801954][ T1390] ? __fget_files+0x2e3/0x430 [ 3243.807336][ T1390] ? __fget_light+0xea/0x280 [ 3243.812474][ T1390] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3243.820073][ T1390] __sys_sendmsg+0xe5/0x1b0 [ 3243.825473][ T1390] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3243.830716][ T1390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3243.838098][ T1390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3243.845698][ T1390] do_syscall_64+0x2d/0x70 [ 3243.850733][ T1390] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3243.857985][ T1390] RIP: 0033:0x45e149 [ 3243.862920][ T1390] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3243.883597][ T1390] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3243.893674][ T1390] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3243.901669][ T1390] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3243.909661][ T1390] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 [ 3243.917662][ T1390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 3243.927691][ T1390] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3243.965017][ T1348] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3243.999683][ T1387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3244.019377][T24591] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 3244.204194][T24591] usb 5-1: device descriptor read/8, error -61 10:15:23 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xfff, @remote, 0x3}}, 0x24) 10:15:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xc, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:23 executing program 5 (fault-call:4 fault-nth:8): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xd360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70003935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3244.468238][ T1442] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3244.542582][ T1443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3244.591808][ T1444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3244.612777][ T1445] FAULT_INJECTION: forcing a failure. [ 3244.612777][ T1445] name failslab, interval 1, probability 0, space 0, times 0 [ 3244.686692][ T1445] CPU: 0 PID: 1445 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 3244.695353][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3244.705525][ T1445] Call Trace: [ 3244.710201][ T1445] dump_stack+0x107/0x163 [ 3244.715166][ T1445] should_fail.cold+0x5/0x1f [ 3244.720310][ T1445] ? __alloc_skb+0x71/0x5c0 [ 3244.725287][ T1445] ? __alloc_skb+0x71/0x5c0 [ 3244.730216][ T1445] should_failslab+0x5/0x10 [ 3244.735194][ T1445] kmem_cache_alloc_node+0x55/0x370 [ 3244.740422][ T1445] ? ns_capable_common+0x117/0x140 [ 3244.745709][ T1445] __alloc_skb+0x71/0x5c0 [ 3244.750625][ T1445] netlink_ack+0x1ed/0xab0 [ 3244.755586][ T1445] ? nl80211_notify_iface+0x180/0x180 [ 3244.760994][ T1445] ? netlink_sendmsg+0xe40/0xe40 [ 3244.765961][ T1445] ? lock_release+0x710/0x710 [ 3244.770819][ T1445] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3244.778158][ T1445] netlink_rcv_skb+0x33d/0x420 [ 3244.783184][ T1445] ? genl_get_cmd+0x480/0x480 [ 3244.788224][ T1445] ? netlink_ack+0xab0/0xab0 [ 3244.793203][ T1445] genl_rcv+0x24/0x40 [ 3244.798014][ T1445] netlink_unicast+0x533/0x7d0 [ 3244.803056][ T1445] ? netlink_attachskb+0x870/0x870 [ 3244.808191][ T1445] ? _copy_from_iter_full+0x275/0x850 [ 3244.815094][ T1445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3244.822531][ T1445] ? __phys_addr_symbol+0x2c/0x70 [ 3244.827626][ T1445] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3244.834743][ T1445] ? __check_object_size+0x171/0x3f0 [ 3244.840062][ T1445] netlink_sendmsg+0x907/0xe40 [ 3244.844894][ T1445] ? netlink_unicast+0x7d0/0x7d0 [ 3244.850126][ T1445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3244.857579][ T1445] ? netlink_unicast+0x7d0/0x7d0 [ 3244.862644][ T1445] sock_sendmsg+0xcf/0x120 [ 3244.867567][ T1445] ____sys_sendmsg+0x6e8/0x810 [ 3244.872605][ T1445] ? kernel_sendmsg+0x50/0x50 [ 3244.877577][ T1445] ? do_recvmmsg+0x6c0/0x6c0 [ 3244.882573][ T1445] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 3244.889732][ T1445] ? _parse_integer+0x132/0x180 [ 3244.897487][ T1445] ___sys_sendmsg+0xf3/0x170 [ 3244.902521][ T1445] ? sendmsg_copy_msghdr+0x160/0x160 [ 3244.907837][ T1445] ? __fget_files+0x2c1/0x430 [ 3244.914786][ T1445] ? lock_downgrade+0x6d0/0x6d0 [ 3244.919839][ T1445] ? __fget_files+0x2e3/0x430 [ 3244.924862][ T1445] ? __fget_light+0xea/0x280 [ 3244.929839][ T1445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3244.937254][ T1445] __sys_sendmsg+0xe5/0x1b0 [ 3244.942228][ T1445] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3244.947288][ T1445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3244.954695][ T1445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3244.962118][ T1445] do_syscall_64+0x2d/0x70 [ 3244.967040][ T1445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3244.974184][ T1445] RIP: 0033:0x45e149 [ 3244.978999][ T1445] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3244.999196][ T1445] RSP: 002b:00007fdcc55fac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3245.009236][ T1445] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 3245.017622][ T1445] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3245.025617][ T1445] RBP: 00007fdcc55faca0 R08: 0000000000000000 R09: 0000000000000000 10:15:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3245.035139][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3245.043128][ T1445] R13: 00000000016afb7f R14: 00007fdcc55fb9c0 R15: 000000000119bf8c [ 3245.128679][ T1442] bond296: (slave vlan217): making interface the new active one [ 3245.176829][ T1442] bond296: (slave vlan217): Enslaving as an active interface with an up link 10:15:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3245.261532][ T1536] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x20003307, 0x4000002, 0x0, 0x2ff) 10:15:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xd, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3245.359472][T24591] usb 5-1: new high-speed USB device number 91 using dummy_hcd 10:15:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3245.450250][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3245.465831][ T1542] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3245.569999][T24591] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 3245.584807][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3245.599784][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 373 [ 3245.611657][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3245.713363][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3245.763902][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3245.802210][T24591] usb 5-1: Manufacturer: syz [ 3245.836411][T24591] usb 5-1: config 0 descriptor?? [ 3245.841764][ T1584] bond297: (slave vlan218): making interface the new active one [ 3245.856613][ T1584] bond297: (slave vlan218): Enslaving as an active interface with an up link [ 3245.887844][ T1542] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:26 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x6, 0x3, 0x0, 0x6, 0xb, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, [], 0x1}, 0x8000, 0x20, 0x0, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x4, 0x2, 0xff, 0x6, 0xc, @empty, @mcast2, 0x20, 0x80, 0x1, 0x5}}) r1 = socket(0x9, 0x4, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r2, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 10:15:26 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xe, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001c163616b65000000120c00080008000b0201"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3247.596925][ T1650] __nla_validate_parse: 6 callbacks suppressed [ 3247.596945][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3247.650792][T24591] rc_core: IR keymap rc-hauppauge not found [ 3247.656750][T24591] Registered IR keymap rc-empty 10:15:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3247.746968][ T1652] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3247.770931][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 10:15:26 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3247.849921][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3247.879962][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 10:15:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3247.909983][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1309 [ 3247.972326][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3247.998630][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.005513][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.018976][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.039593][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.058861][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.066319][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.078668][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.098666][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.118680][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:15:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3248.125506][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.138692][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.159339][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.178594][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.185193][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.198615][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.220574][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.227465][ T1704] bond298: (slave vlan219): making interface the new active one [ 3248.238596][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.245160][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.258662][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.276775][ T1704] bond298: (slave vlan219): Enslaving as an active interface with an up link [ 3248.280368][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.298804][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.305350][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.318621][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.338673][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.349833][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3248.358619][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.365722][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.374620][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x8, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3248.379102][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.398624][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.418621][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.425617][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.438618][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.458709][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.478642][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.485270][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.486563][ T1676] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3248.498602][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.518648][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.538796][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.545461][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3248.558622][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.578639][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.586482][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3248.595858][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3248.604440][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.619332][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3248.634066][T24591] usb 5-1: USB disconnect, device number 91 [ 3248.640217][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3249.029565][T24591] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 3249.279109][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3249.399210][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3249.414725][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3249.439722][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3249.457490][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3249.559535][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3249.569717][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3249.577727][T24591] usb 5-1: Manufacturer: syz [ 3249.586737][T24591] usb 5-1: config 0 descriptor?? [ 3249.919108][T24591] rc_core: IR keymap rc-hauppauge not found [ 3249.925043][T24591] Registered IR keymap rc-empty [ 3249.949033][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3249.999024][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.029211][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3250.047640][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1310 [ 3250.118528][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.124787][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.138677][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.158533][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.178518][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.184760][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.199881][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.218571][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.238530][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.245039][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.258547][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.278531][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.300328][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.306891][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.318483][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.338528][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.358487][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.364959][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.378772][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.398458][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.418547][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.424858][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.438461][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.463931][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.478481][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.485097][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.498496][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.518455][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.538512][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.545184][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.558567][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.578446][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.598492][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.604978][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.618453][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.639607][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.658467][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.666013][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3250.678498][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.699076][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.707952][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3250.718415][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.726124][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3250.738494][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3250.746817][T24591] usb 5-1: USB disconnect, device number 92 [ 3251.119037][T24591] usb 5-1: new high-speed USB device number 93 using dummy_hcd 10:15:30 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:15:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xf, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:30 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x20000080, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0xfefffff8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01040000010000001c0012000c0001006272696467e9"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000002c0)=0xee24) write$cgroup_type(r5, &(0x7f0000000280)='threaded\x00', 0x9) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) geteuid() 10:15:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xf360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3251.358951][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3251.419452][T24591] usb 5-1: device descriptor read/all, error -71 [ 3251.420890][ T1822] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3251.541572][ T1824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3251.607724][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x2, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3251.717988][ T1865] bond299: (slave vlan220): making interface the new active one 10:15:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x4, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3251.772301][ T1865] bond299: (slave vlan220): Enslaving as an active interface with an up link [ 3251.795759][ T1824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3251.809863][ T1829] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3251.831114][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:30 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3251.889165][T24591] usb 5-1: new high-speed USB device number 94 using dummy_hcd 10:15:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x10000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, [], 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x40400d0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3252.029064][ T1924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3252.079274][T24591] usb 5-1: device descriptor read/64, error 18 [ 3252.191417][ T1930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3252.199523][T24591] usb usb5-port1: attempt power cycle [ 3252.285619][ T1927] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3252.429978][ T1973] bond300: (slave vlan221): making interface the new active one [ 3252.451142][ T1973] bond300: (slave vlan221): Enslaving as an active interface with an up link [ 3252.535137][ T1927] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3252.908994][T24591] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 3253.079381][T24591] usb 5-1: device descriptor read/8, error -61 [ 3253.349083][T24591] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 3253.518738][T24591] usb 5-1: device descriptor read/8, error -61 [ 3253.640248][T24591] usb usb5-port1: unable to enumerate USB device 10:15:33 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) socket(0x10, 0x803, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:15:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x7, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:33 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x12, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x10360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{r5}, r6, 0x8, @unused=[0x4, 0x3, 0xffffffffffffff80, 0x8000000], @devid}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3254.572954][ T2034] __nla_validate_parse: 2 callbacks suppressed [ 3254.572973][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3254.649491][ T2035] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x8, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x700, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3254.816884][ T2097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x1000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3254.906499][ T2109] bond301: (slave vlan222): making interface the new active one [ 3254.934251][ T2109] bond301: (slave vlan222): Enslaving as an active interface with an up link [ 3254.965455][ T2039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3254.975776][T24591] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 3255.001703][ T2082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:34 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x2000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3255.024905][ T2127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x14, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3255.238945][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3255.246328][ T2147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3255.359140][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3255.385876][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3255.417804][ T2160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3255.464590][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3255.512182][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3255.619039][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3255.628652][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3255.636786][T24591] usb 5-1: Manufacturer: syz [ 3255.647770][T24591] usb 5-1: config 0 descriptor?? [ 3255.968587][T24591] rc_core: IR keymap rc-hauppauge not found [ 3255.974509][T24591] Registered IR keymap rc-empty [ 3256.008733][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.060310][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.088937][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3256.105689][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1311 [ 3256.177972][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.184254][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.198044][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.218719][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.238019][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.258014][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.264349][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.278033][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.298070][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.318025][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.324947][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.337989][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.358088][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.378197][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.385014][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.397999][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.418083][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.438084][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.444514][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.458087][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.478119][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.497989][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.505566][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.518025][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.539831][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.557954][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.565049][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.577990][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.598008][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.618290][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.626737][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.638018][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.657998][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.678005][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.684310][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.698502][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.718064][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.738020][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.745858][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3256.757973][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.778101][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.785617][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3256.797967][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3256.804835][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3256.816885][T24591] usb 5-1: USB disconnect, device number 97 [ 3256.823349][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3257.188257][T24591] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 3257.428274][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3257.549008][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3257.559629][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3257.574708][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 10:15:36 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc040) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3257.588903][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 10:15:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x4000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x11360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = accept4$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) fchdir(r4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = accept4$phonet_pipe(r3, 0x0, &(0x7f0000000100), 0x80800) getsockopt(r5, 0x8000, 0x3f, &(0x7f0000000800)=""/4096, &(0x7f0000000280)=0x1000) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:36 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x18, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3257.658907][T24591] usb 5-1: string descriptor 0 read error: -71 [ 3257.665269][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3257.706855][ T2241] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3257.710669][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3257.771870][T24591] usb 5-1: config 0 descriptor?? 10:15:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x7000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3257.798850][T24591] usb 5-1: can't set config #0, error -71 [ 3257.835084][T24591] usb 5-1: USB disconnect, device number 98 [ 3257.910705][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3258.155263][ T2245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3258.243984][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x25, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x8000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3258.357256][ T2259] bond302: (slave vlan223): making interface the new active one [ 3258.385661][ T2259] bond302: (slave vlan223): Enslaving as an active interface with an up link 10:15:37 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3258.425727][ T2245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3258.450042][ T2241] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48008f206b73000010000507000000000000000000000002", @ANYRES32=r7, @ANYRES16], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x80) bind$packet(r3, &(0x7f0000000280)={0x11, 0x19, r7, 0x1, 0x2, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x1000000000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3258.609050][T24591] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 3258.867833][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3258.988785][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3259.001329][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3259.016883][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3259.044103][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3259.138688][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3259.148366][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3259.156512][T24591] usb 5-1: Manufacturer: syz [ 3259.165293][T24591] usb 5-1: config 0 descriptor?? [ 3259.488444][T24591] rc_core: IR keymap rc-hauppauge not found [ 3259.494756][T24591] Registered IR keymap rc-empty [ 3259.518512][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.568574][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.598392][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3259.615046][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1312 [ 3259.667699][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.674108][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.687763][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.707719][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.727728][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.734229][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.749002][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.767715][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.787729][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.794346][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.807776][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.827792][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.847756][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.855752][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.867738][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.887766][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.907757][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.914332][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.927758][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.949833][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.968154][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3259.974558][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3259.988349][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.007763][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.027697][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.034108][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3260.049720][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.068938][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.087688][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.093949][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3260.107703][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.127763][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.147688][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.154233][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3260.169358][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.187658][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.207707][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.214183][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3260.227912][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.247710][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.255415][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3260.264885][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3260.273452][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.285181][T24591] usb 5-1: USB disconnect, device number 99 [ 3260.291388][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3260.658405][T24591] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 3260.898367][T24591] usb 5-1: Using ep0 maxpacket: 16 10:15:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x12360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x2f, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:40 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x100000000000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000066a719ae4d2152c7a7000f03edc043e9a3", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000000000b0e0000000000000000000000001facabb0d3678c13ca2980fe247f43adcc6041d86f89915fffdf364a14127fcadda8b01cb3da1fd5af0a95", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:40 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038bf420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x8, 0x803, 0x0) r1 = dup(r0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3261.003914][ T2438] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3261.013377][T24591] usb 5-1: device descriptor read/all, error -71 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x200000000000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:15:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x3, 0x80000, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x400000000000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3261.176051][ T2437] __nla_validate_parse: 4 callbacks suppressed [ 3261.176072][ T2437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x700000000000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3261.342258][ T2462] bond303: (slave vlan224): making interface the new active one 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x800000000000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3261.388516][T24591] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 3261.397973][ T2462] bond303: (slave vlan224): Enslaving as an active interface with an up link [ 3261.419282][ T2485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0xffffffff00000000, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3261.468492][ T2437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3261.494278][ T2438] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3261.526757][ T2485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:40 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x63, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xa, 0x3f, 0x8}) 10:15:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x13360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3261.628629][T24591] usb 5-1: Using ep0 maxpacket: 16 10:15:40 executing program 0: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="0126cadfc20080001c0012000c00014ef2dc00627269897fc9637f72a39064ee45f277f9fdcc4d46ec0aac4e0fab31982f97be49648a785f5719c742c7aa43485a2d03857b7d90968de8ed6c08b3bc8d9b99c8bff870af4167d98ac873ce7c3c1c9bf4b4c1b4cf0cbc55d80000005d86cc7de9c2e8"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="37f6e300000000af8c5f0b2dc9f7f527eee1154ddf968d0c5a74512c57320b898832a1895804e169898fcb", @ANYRES16=r6, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESDEC=r5, @ANYRESDEC=r0, @ANYRES64=r7, @ANYRES64], 0x3c}}, 0x50) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRESDEC=r7, @ANYBLOB="ba3cb4364bb55d28c0e4cc0efa4c91c0d5514b9581bffd97c6d4ff6e03a8fbf30bab6bd7157da2cb3e01af01bf7569012b5adc8e956c037402b5385381fed55f26a6d43ea75995e90684b25b7a25674dfb494ef4c72aae1d9932e58e3753e91c254873e4a7c8bf1f9a69e4e4e7d24715cd2b324d58f5e6b49ea32d8962fe8f33c4dd6bbaf9abd3aa8a8ff04a51795595df48545f8de63ccded1f5f24e44a33f673a95a0431480527a7742bd50771a29ff58ef2d06e97568ce5834d1f7aa92d3068", @ANYRES32=r6, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=r8, @ANYBLOB="303e4fe86615300599845ae1e32ad0adc309f6b7973da6231fd32af4387fda871e00dbd154d5437d8be3c36b4fb5"], 0xfffffd88) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000280)={0x5, {0x8, 0x7, 0x7db, 0xd55b, 0xfffffe01, 0x35ac}}) [ 3261.737012][ T2547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3261.748518][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3261.772999][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3261.851335][ T2549] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3261.865245][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3261.964660][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3262.042145][ T2587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3262.129624][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=bf38, bcdDevice= 1.42 [ 3262.152367][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3262.163122][ T2590] bond304: (slave vlan225): making interface the new active one [ 3262.172814][T24591] usb 5-1: Manufacturer: syz [ 3262.174822][T24591] usb 5-1: config 0 descriptor?? [ 3262.214082][ T2590] bond304: (slave vlan225): Enslaving as an active interface with an up link [ 3262.224444][ T2547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3262.242699][ T2587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3262.287089][ T2549] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3262.464061][ T9910] usb 5-1: USB disconnect, device number 101 [ 3263.258612][T24458] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 3263.517828][T24458] usb 5-1: Using ep0 maxpacket: 16 [ 3263.659489][T24458] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3263.670040][T24458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3263.691876][T24458] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3263.707003][T24458] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3263.828945][T24458] usb 5-1: New USB device found, idVendor=2040, idProduct=bf38, bcdDevice= 1.42 [ 3263.838812][T24458] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3263.846818][T24458] usb 5-1: Manufacturer: syz [ 3263.871134][T24458] usb 5-1: config 0 descriptor?? 10:15:43 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000100)=ANY=[], 0x0) r0 = socket(0xb, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9d) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x58d000, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x4cd) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x2}}, 0x18) 10:15:43 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x2}) 10:15:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x73, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@mcast2, 0x22}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000e3d21341a52499915d639b76d91000010400ee4cffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x14360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3264.035990][T24458] usb 5-1: USB disconnect, device number 102 [ 3264.123604][ T2668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3264.412166][ T2671] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:43 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3264.628240][T24458] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 3264.817948][T24458] usb 5-1: device descriptor read/64, error 18 10:15:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x2]}) [ 3265.106485][T24458] usb 5-1: new high-speed USB device number 104 using dummy_hcd 10:15:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x4]}) [ 3265.163560][ T2714] bond305: (slave vlan226): making interface the new active one [ 3265.175931][ T2714] bond305: (slave vlan226): Enslaving as an active interface with an up link [ 3265.189053][ T2717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3265.288085][ T2722] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3265.317984][T24458] usb 5-1: device descriptor read/64, error 18 10:15:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x7b6, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x49) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000380)={0x0, 0x8, "0496613fc9f8beb6e32ebed52371d91e5106cce0e040f86aeb82e58172f23719", 0xfffffffffffffffe, 0x4, 0x7, 0x9, 0x9, 0x0, 0x48500000, 0x1, [0x4, 0x3, 0x5, 0xffffffff]}) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x15360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3265.448213][T24458] usb usb5-port1: attempt power cycle [ 3266.105054][ T2781] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3266.189580][T24458] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 3266.314747][ T2781] bond306: (slave vlan227): making interface the new active one [ 3266.329852][ T2781] bond306: (slave vlan227): Enslaving as an active interface with an up link [ 3266.342098][ T2780] __nla_validate_parse: 3 callbacks suppressed [ 3266.342116][ T2780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3266.363883][ T2781] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3266.408139][T24458] usb 5-1: device descriptor read/8, error -61 [ 3266.687703][T24458] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 3266.878579][T24458] usb 5-1: device descriptor read/8, error -61 [ 3266.998697][T24458] usb usb5-port1: unable to enumerate USB device 10:15:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="c3bdcf017e77413ae8aa51c52fb9d29fa29d1e2cb45d6097cab495ad9be0c877fcd79906e01ba8aae41f9eb98e9763751850c4988098d397bda99818537aa40cc80821f34f15df95a9a2983784a73ded253537470dc14ef29d37fbe3eadca1f85a401b9b29e06dab7a213478175051a8c56c5e29c2ca17d6bdeb8df150148ca66094481675944c8340bf35db59fbd7570c75baa3c6f7853795e85cc3ef66b218ca69bd1f2d27b8f4f73637f01b67110477b337e06d2615673716e1658d3b59d05d3396fc3f2a3838a7d003939cfb3a71f9970db110c7fc938edd632c6c2ce3541c86ca2ac866", @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRESHEX=r0], 0x0) r3 = socket(0x10, 0x803, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 10:15:46 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x7]}) 10:15:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x7c5, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, r6, 0xeb9a23f723bc9f07, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xe94b}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c44}, 0x40001) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x16360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3267.243909][ T2875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3267.330952][ T2878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3267.611915][ T2877] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:47 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x8]}) [ 3268.169539][ T2894] bond307: (slave vlan228): making interface the new active one [ 3268.228397][ T2894] bond307: (slave vlan228): Enslaving as an active interface with an up link [ 3268.262400][ T2878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3268.289984][ T2895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0xea0, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3268.461269][ T2967] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x17360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:47 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x162, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000280)=0x8e) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x2b, @loopback, 0x4e22, 0x0, 'lblcr\x00', 0x38, 0x101, 0x7c}, 0x2c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3269.081401][T24591] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 3269.168031][ T2989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3269.222708][ T2995] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3269.277716][T24591] usb 5-1: device descriptor read/64, error 18 [ 3269.310870][ T2997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3269.402084][ T3063] bond308: (slave vlan229): making interface the new active one [ 3269.434823][ T3063] bond308: (slave vlan229): Enslaving as an active interface with an up link [ 3269.449955][ T3057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3269.495525][ T2989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3269.536451][ T2995] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3269.555550][T24591] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 3269.757794][T24591] usb 5-1: device descriptor read/64, error 18 [ 3269.878685][T24591] usb usb5-port1: attempt power cycle 10:15:49 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1209000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) 10:15:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x700]}) 10:15:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0xe4a9bd13954d323e}, 0x4048001) r2 = socket(0x10, 0x3, 0x10001) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:49 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x18360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3270.343903][ T3108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x1000000]}) [ 3270.419704][ T3109] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x2000000]}) 10:15:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x2, 0x10, 0x1}, 0x18) openat$cgroup_subtree(r1, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3270.696517][ T3155] bond309: (slave vlan230): making interface the new active one [ 3270.745824][ T3155] bond309: (slave vlan230): Enslaving as an active interface with an up link [ 3270.800622][ T3109] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:49 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x19360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x4000000]}) [ 3271.463550][ T3108] __nla_validate_parse: 2 callbacks suppressed [ 3271.463581][ T3108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3271.537432][T24591] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 3271.574690][ T3214] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3271.737892][T24591] usb 5-1: device descriptor read/8, error -61 [ 3271.744961][ T3213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3271.827048][ T3220] bond310: (slave vlan231): making interface the new active one [ 3271.845313][ T3220] bond310: (slave vlan231): Enslaving as an active interface with an up link [ 3271.869470][ T3213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3271.895531][ T3214] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3272.027407][T24591] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3272.198020][T24591] usb 5-1: device descriptor read/8, error -61 [ 3272.317716][T24591] usb usb5-port1: unable to enumerate USB device 10:15:52 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80001, 0x20) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000001c0)) r1 = socket(0x10, 0x803, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:15:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x402, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x7000000]}) 10:15:52 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x1a360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x3, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@getnexthop={0x4c, 0x6a, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={@private2, 0x3, r6}) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3273.448582][ T3280] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3273.651588][ T3282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3273.868802][ T3284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3274.027554][ T3282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:53 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3274.243090][ T3294] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3274.290419][ T3284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x8000000]}) 10:15:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x1b360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:53 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:53 executing program 0: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f00000004c0), &(0x7f0000000380)=""/106, 0x6a}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044884}, 0x4000040) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0e000000000000000000000000a5b279fee70bf15a84809de63cddd600f11ebba9ebda074737b777ce93b8d5636c04fac1b3e6887d1270e3b60b58410097f0153af8a3a14ba6961ada5d9f4286ed9ab2c383ac92ba59bead62c43b0b", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3274.413717][ T3386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3274.598226][T10467] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3274.606287][ T3392] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3274.904840][ T3413] bond503: (slave vlan410): Enslaving as an active interface with an up link [ 3274.985972][ T3434] bond312: (slave vlan232): making interface the new active one [ 3275.019818][ T3434] bond312: (slave vlan232): Enslaving as an active interface with an up link [ 3275.029813][ T3465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3275.065944][ T3475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3275.082171][ T3392] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3275.087312][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3275.217630][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3275.229137][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3275.243955][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3275.256008][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3275.347350][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3275.359576][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3275.374325][T10467] usb 5-1: Manufacturer: syz [ 3275.391235][T10467] usb 5-1: config 0 descriptor?? [ 3275.717247][T10467] rc_core: IR keymap rc-hauppauge not found [ 3275.723197][T10467] Registered IR keymap rc-empty [ 3275.747311][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3275.797001][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3275.827656][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3275.842240][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1313 [ 3275.896487][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3275.903495][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3275.916471][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3275.936475][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3275.956429][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3275.963108][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3275.976637][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3275.996457][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.016505][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.023835][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.036446][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.057826][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.076480][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.084462][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.096452][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.116531][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.136618][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.143161][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.156422][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.176481][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.196405][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.202916][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.217771][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.236424][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.256783][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.263545][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.276407][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.297494][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.316923][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.323671][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.336429][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.356404][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.376425][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.382952][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.396399][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.416473][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.436476][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.443686][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3276.458512][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.476411][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.484236][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3276.496376][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.504491][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3276.516360][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.536909][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.551773][T10467] usb 5-1: USB disconnect, device number 111 [ 3276.558129][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3276.927284][T10467] usb 5-1: new high-speed USB device number 112 using dummy_hcd 10:15:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x1000000000000]}) 10:15:56 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xe00, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:15:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x1c360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3277.167114][T10467] usb 5-1: Using ep0 maxpacket: 16 10:15:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000826bd7000fbdbdf25030000001c00018008000300ffffffff060001000a00000008000300ac1414aa3c00018014000400fc02000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB="080006000200000014000400fe8000000000000000000000000000aa080002000200000008000200050000000800030008000000080003000600000008000200020000002000018014000400fe88000000000000000000000000010108000300ac1414bb0c000180060001000a000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4008005}, 0x4004800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x180, 0x0, 0x2, 0x70bd2a, 0x4dc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x6a3c}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xffffffc1}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x100}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1f5}, {0x8, 0x15, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2af}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xe565, 0x3a}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x151c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x480}, 0x20000) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 3277.253895][ T3519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3277.266970][T10467] usb 5-1: device descriptor read/all, error -71 10:15:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x100000000000000]}) [ 3277.358554][ T3522] __nla_validate_parse: 3 callbacks suppressed [ 3277.358574][ T3522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3277.461203][ T3520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x200000000000000]}) 10:15:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x400000000000000]}) [ 3277.645560][ T3563] bond504: (slave vlan411): Enslaving as an active interface with an up link [ 3277.711350][ T3562] bond313: (slave vlan233): making interface the new active one [ 3277.749406][ T3562] bond313: (slave vlan233): Enslaving as an active interface with an up link [ 3277.790306][ T3519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x1d360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:57 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3278.301966][ T3520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3278.355507][ T3527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3278.377733][T10467] usb 5-1: new high-speed USB device number 113 using dummy_hcd 10:15:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x700000000000000]}) [ 3278.422507][ T3627] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:15:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x406, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:15:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0x2}, 0x18) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:15:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x800000000000000]}) [ 3278.618167][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3278.677638][ T3652] bond314: (slave vlan234): making interface the new active one [ 3278.714266][ T3652] bond314: (slave vlan234): Enslaving as an active interface with an up link 10:15:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0xffffffff00000000]}) [ 3278.737409][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3278.754244][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3278.777212][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:15:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x2]}) [ 3278.867556][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3278.979069][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3279.049273][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3279.094096][ T3627] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3279.109824][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3279.143131][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3279.147594][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3279.199905][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3279.224057][T10467] usb 5-1: Manufacturer: syz [ 3279.250735][T10467] usb 5-1: config 0 descriptor?? [ 3279.596759][T10467] rc_core: IR keymap rc-hauppauge not found [ 3279.602697][T10467] Registered IR keymap rc-empty [ 3279.626960][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3279.676676][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3279.706834][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3279.724750][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1314 [ 3279.776135][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.782541][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3279.796140][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.816256][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.836185][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.843296][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3279.856121][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.876196][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.897417][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.904080][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3279.916145][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.936876][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.956118][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.962459][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3279.976330][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3279.996112][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.016118][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.022627][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3280.036097][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.056132][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.076049][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.083419][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3280.096184][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.116092][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.136293][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.142780][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3280.156996][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.176091][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.196079][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.202354][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3280.216213][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.236125][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.256097][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.262532][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3280.276071][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.296934][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.317209][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.323460][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3280.336071][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.357291][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.364769][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3280.375411][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3280.383939][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.396138][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.402652][T10467] usb 5-1: USB disconnect, device number 113 [ 3280.416064][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3280.786541][T10467] usb 5-1: new high-speed USB device number 114 using dummy_hcd 10:16:00 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:00 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x1e360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x4]}) 10:16:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c78fbb8e200010400eeffffffffffffff000000c98b333c52f4b0d1834f48f75ba54f2ea8ff3326df3977a61c21b7f5e674d2fc332afa4ea41f5a94064a3564a2d0ff0300000be7b60bcb013b480480db55660e568ca36abc2f9323fb50363ff676702cf25ad52b45f2ceb76f4270309ef394b1a44cbf5e3109087618f91ec8bec5d9000000000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3281.026895][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x7]}) [ 3281.116946][T10467] usb 5-1: device descriptor read/all, error -71 [ 3281.151247][ T3769] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:00 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3281.282507][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x1e, 0x3, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000036920000001c00bca5dd1dc62712000c0001006272920bf4b3adc465e5e81cd9"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x8800, 0xd1, 0x9}, 0x18) write$P9_RLINK(r5, &(0x7f00000002c0)={0x7, 0x47, 0x2}, 0x7) r6 = signalfd(r1, &(0x7f0000000380)={[0xfff]}, 0x8) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3281.526732][T10467] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 3281.562749][ T3769] bond315: (slave vlan235): making interface the new active one 10:16:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x8]}) [ 3281.625741][ T3769] bond315: (slave vlan235): Enslaving as an active interface with an up link [ 3281.643247][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3281.674520][ T3782] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:00 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6201, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x408, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3281.766619][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3282.566512][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3282.579690][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3282.600368][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3282.605456][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3282.651018][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3282.756584][ T3883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3282.806742][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3282.816817][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3282.824870][T10467] usb 5-1: Manufacturer: syz [ 3282.841038][T10467] usb 5-1: config 0 descriptor?? [ 3283.196639][T10467] rc_core: IR keymap rc-hauppauge not found [ 3283.202562][T10467] Registered IR keymap rc-empty [ 3283.236465][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.286389][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.317082][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3283.331178][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1315 [ 3283.385906][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.392459][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.405872][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.426340][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.451795][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.458877][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.466885][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.485893][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.505841][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.525900][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.532361][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.545854][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.565919][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.585894][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.593801][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.605876][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.625851][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.645857][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.652409][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.665795][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.685826][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.705799][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.713562][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.725912][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.745876][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.765863][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.772515][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.785867][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.805893][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.825880][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.832893][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.845796][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.865857][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.885810][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.893319][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.905781][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.925836][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.945787][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.952344][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3283.965851][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.985810][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3283.993527][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3284.003003][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3284.011602][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3284.022045][T10467] usb 5-1: USB disconnect, device number 115 [ 3284.028262][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3284.396685][T10467] usb 5-1: new high-speed USB device number 116 using dummy_hcd 10:16:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x1f360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3cf0b43793ff0000000000000000b92c000cb05e2261bd24facaae84c121e6e274820ad89bb0c485ac2e053b8a7857e8d5b9db6eda5c598fc550a9c113e76a66a05f568276e798a6af1be188582ed22f8b91e42922cc699f0db8a7ec5040c0fa8e187f4ef2c1fc1fb82b828d31659065c0453eba09cba375ff016e219405b420c2842ae38c9b5e2913b43b66dc1ef3c3fb50fb826faa200d1b9420c1a2da41d0844e5c8dea1fa4596eabb3e03f10cc6cca91", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYRESHEX=r2], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x600000, 0x0) ioctl$TCGETX(r5, 0x5432, &(0x7f0000000280)) r6 = fcntl$dupfd(r3, 0x0, r3) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x8, 0x7, "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", 0x0, 0x30, 0x2, 0x1, 0x80, 0x1f, 0x9}}}, 0x120) 10:16:03 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x700]}) 10:16:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3284.636301][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_usb_connect(0x1, 0x4a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3284.683954][ T3950] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3284.716504][T10467] usb 5-1: device descriptor read/all, error -71 10:16:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x1000000]}) [ 3284.821132][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x2000000]}) [ 3284.958593][ T3950] bond316: (slave vlan236): making interface the new active one [ 3284.971721][ T3950] bond316: (slave vlan236): Enslaving as an active interface with an up link [ 3285.010827][ T3993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x4000000]}) [ 3285.072165][ T3998] bond508: (slave vlan412): Enslaving as an active interface with an up link [ 3285.082740][ T3966] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:04 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x30000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3285.123563][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3285.150325][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="0100000001000000020012000c000100627269646365ec6acbaf2c86def2f823a46ef1fb8508"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x40a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x20000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x7000000]}) [ 3285.897044][T10467] usb 5-1: new low-speed USB device number 117 using dummy_hcd 10:16:05 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x34000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3285.972891][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3286.503312][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3286.534913][ T4065] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3286.827082][ T4121] bond317: (slave vlan237): making interface the new active one [ 3286.860195][ T4121] bond317: (slave vlan237): Enslaving as an active interface with an up link [ 3286.869852][T10467] usb 5-1: device descriptor read/64, error 18 10:16:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x8000000]}) [ 3286.898840][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3286.914748][ T4065] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3286.942666][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x40b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3287.003533][T10467] usb usb5-port1: attempt power cycle [ 3287.759220][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:06 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x52, 0x40, 0x20, 0x1}]}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:16:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x20360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:06 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x400300, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) vmsplice(r1, &(0x7f0000001980)=[{&(0x7f00000003c0)="f59d38e5f435407044125967fad322e9e6c8341cc3484c1ef5e7d7aa379ad91bb33659859e86380cd91f31cc63a10cdf4c5a30252e93380252a84b2f2167ad8f1c43ffef17da393947b7ca69fbf4d2", 0x4f}, {&(0x7f0000000440)="7cd436d92f9b760956fc2aa3cc500e310cce2fae0c494dbfdc7200f6f4951ce63f0c2fe2a732d6f61953e61beed49446a39faef299f7c29ab02232e571012da4f37a3adc900bd1f0b50c3883ec1d6e247c535878d00a3fe14c40633727c221a10c0a29ec1084923994f4514bd0d18f7389dea534823e1c9839febbfeeb8de8504917da2f430fb21eee04d2e209b90f4de20e10f941b950a657bba1813541c1a7dd", 0xa1}, {&(0x7f0000000500)="dc90de4d1df1b8f03eca639200263bc40995ca8287892f9e2adcfcab60a430bbe772d9444005005dfdc4f5555e602feb3952c3fa1aa01340270f35e0b809deadd9a4cbb7d4a76d18f5f2325ab431e77180dbbcc1695ca1da2a33ea24727bd8dc0721eda9a535681e5dbc1a44cee91ff91677b995", 0x74}, {&(0x7f0000000580)="f64aa6b17785aec42942086f84158c4d29716da8f978a71c9eda54fb37458b40f99326eb08d2b8d80ca7ab865d05d22da59fcf72611c1a4d6ad78f59d74d922a403f77e89bb60d191799391660abfd914bff7d91cce65118c9ae5445bd54c9696c8d426e3854d00825b0ee842ccc43c832ad452a05f53d9383b67e04573137b7c4", 0x81}, {&(0x7f0000000640)="9a3c6e348dcfb20abdab6ef61d4433e1444a56beec70d789b879d12e1d9cd4166e568015a9794860fef37f6480881dc81e9c50a7e47ff9d6f649c3730c11bcd3b69be88f818a201eb1073b82c84157f6543f64cd856043e95202d2c8b3fb4c4dab67bbf46e152a02e4eab521652920d0220a66b1184d4b3447109f088b074384", 0x80}, {&(0x7f0000000800)="316c170c5f903f53e85a12fedc0bfc2434fd361c28a051792e5a09bdc7d91ea63a55a02cfd466766f2ee88b069eaf8ea921145ef6350c700c6ff78a471ef3652f37d054d99b0d47835f7904ea8f56ae5bc2661e6f9f2d3acf385e01b64d0d81534bffc844b5f103ae55840228811d802c3a21d7288354fff293a34dbe91d802f1a238f886eba636abaa3e2231cfded95e604", 0x92}, {&(0x7f00000008c0)="56fd0ea51ddf65d5ee4f7342ce7002101dadcb1cfeee2b489f4dfbb497e795e19afdaf7e4f0e716d12367680eaf33218c5fb1ca67cc6200ab6c4abe1d03bdac6756ca9bdb70903ffd4de63d8a9153f910643bbc2067d5edf4dd1a280fd03dfad896e19544b4126cb31c73a21988a2690744c11fd0650fc98e2af907d6bbfdb0679305394106a48de9514dad20ea101d3fd47bf91", 0x94}, {&(0x7f0000000980)="187c0a0618ba305cee67a309401c2173d5db65d0c79a3333980885301e24bc93e940d9564b0af5bee2b5fe556f809d42c52ea32f0efe2ed06b0f7f20d664f38915dc78f4b30f14f7bc90ea5134797e2b2b5bcab00f6a4da3d08e077da5c80aa63d0537ce9af1b3e85fbc4d8eaafa1bcabfd20b07ac803eae6f3f538f59a59a7131bb40673df023b5bf64e71737aa415d649c70552065866cc2aedec6e22c953877634fc9fa3668f88949fcb3e15a7447ba4724f938b083459772e462c701ebeb48492a9c4f49819ef70ad872d85fda94cd35cee74bf94664dea109d39add680a4567816e1ea191611dd938c01d0ec223b234ca3f12078cdd8c0eb5b21cd568609c1efae15f33528b54d6cf0f738c709ae68037ff742de53341d91cc46e6a3df295df4117e914e5677aa8a88ebb266840e34ad20ac26216544f2208e7b0817e794dc253d82c441b5770bc88ad7bdf22bb623483b349533c113e23f6dc3fbd29e71623455dc2555ab1f4988ece7d1d6d7c9673582b4ba03f4c99333583853a49c4bf29b8c72d0e6638a142ec46143ac0ff420ad1752739756e15d09fcc6f77ccc96e3d9f33f73ed70fa112ad070116077e56f79269ec89bed7b2edb4b757c37e9044a8dc0bfed0bf179b95818a7fa766c0da97bd6c6bc04c91bca4d5f470c78b22331a30837e338e28fedb518723a84ed51c7bde025912d3aa2619f6de3ce42fcdda77dfac104de15353f8b7726a25d967347b82d28b7572e39298929215f1eb4fe8b823b7fc780c93bcaff27110af9008235c1963af733a75dcc7baa5940b23012392db5076813d1dcd7f759df71ac95d0f619d26e6ce46ee54b87b1ad0c71a3b376d3a9b6e7ab02a78e12c37f96130fec37bf40cf7f589f2b97ac8acf239b157bd6fc9a436415f21019788a403237c0ef36358c7c55cded1482063c2ab08c4d6dbbbff84843b3131ffff22d445eea3f72439edaf9e45e1a89da98f52cf0cbd44848ec62d5b9f721d93ff7b5fb1728e3e634fb0898b3d7e2f57ef24db2f1918977c1afffa5d8f760bf6a3bc0d9fb124efbfa47051e804a051d6dca233b4b8e1c5386b44d839c20a5df322ccd839b02be914fe71185d939279c5375a7e73561121b15f18d11c0c136aed6a0a6af1f085b885b69f6fb043dcea34c6838d4f78b9d56fa5cb380441d4574f1487d7b3572fd635eed2ee57025eca2c833291735f7b667b0943fd5939599ac523c8efa6416101bb6e6cafc853aef10395a69aa23653c6de0493dd20dd5c039b620884d25a7994a1907a8b074c95ae440a7e3926829ccad1463b850ce0b34f8ed1cedea1cec3260b5e6e49d8c04d6f54f6db61916ed6b91b6996b005f8f7d5402b770c703d8853b7ddba12ce9aec0b51c9830199fa374e671b17de97f1751f7244363916f0195ba24d8f2634d2fe8bdc966f2b856b7b932c5ed7688fc014426383e4a44abb3737bdcbd53062f899bc4aa8d9239bb8417092f1096fe81dab2e0f47c1d925d916ebb96ecb8392689ed00fc35f7a327d13b9d3b63a1ea23f6bdbc6854da6359e4ed5514da7244ad8ebfa7046f3c3bbe224094d149ae33b3956b2c2e3f59cb74cc6b0e2fddccf72cc1ceb3257b6dde0919049b9de266928d5e66ba1f607b749323e7622f86843515b5338ca55079c90f65b9c277de0f10c456a632eb9a77654f0dfac2c6e6d225352cf08070aeb9fa6bc09fa9445fadcc489ebc551802dd5c2c16d993510768da68eebb04f09d86a45219446c38181f0532dbceda3da6e862416092ab1c0e3dc3b75c3be40d606e141dac6f517a1d214616503fd8afe6ab41a2963a0cc1a0e76ae7168b1ebf2d6b4b00700bcc683f930d0d4162dbcc6078b962af6a4c0437a95ac674c031d3322f0f33e719306b869291308749473cbd1fe2c566cd25d43072223439041b869b8025f176387419526e1e65535df1d3d1e2d74e7cc3908bf2df777ceb21be91c6269f2c96d780ffacff8db86360a563cc2a8ce654a1600594dd7ac05bf1b312484562f0308ae1cee306c8426b3a34d512dbbf4bfcc918afa6b38f46b0f96e6604b1ad5cf575bb56f6bc65badec942ccff991e008bec46901f5c230727aef5bf71bd00c16874c9ec9ee966a03928613588dabc4bfb636d63e0c883de8dc00f822139408c1e0db71ed46efbdefc5528f0eb5a8af0401d15385eaaad4aed457f36660fb23f0e27f0962cb136fa547a9dd63ff46f1395bb8998096c7cbbce067f63fc8a186ce785ec0d72211872287bf47536d38e10c9a13e196df9dfb1193502be3f75669a8ea993035ab97e33785f4c59c0d02bd964e215317c688d980118088f760bae6b6575f2a122e161422fcc262abf5884309b427e6db7e61607a5645ceb5b7f425e11f1dcc3a77f01617e086a07fcbb9f47dd959fcc4127b45702024e94115e99e18c91aa625dda7714a1dd17adcfc03669c803a59913ede9378991eece2add923715277a28f6a1d9817dd1ce562af65034a8daa44060c3ff1bd3c5cdb1af51ea1205bddb3b72f19cea74b0aba9f986785e86d0c49df109a418df7cd5c7bae5b64b8ff95174e62ae33bf7425d8213b23bd918918907ff071a15a5697b2b5cd4468857f1f391b70e9f587aa834164c6ecb88ff9291fa3b45d874ae1c7954d35ae12a701b1b4b3aa4103fe0e1d4f9598117fcd48b6b43eac59094ce871e69b51bd0abe5215a54c48965defadce478f83f7e4dc5b17a3a4a7db7d612619f5859ce8c6b49dbbdf50049169d40fca119fb3e34b92b37c60d45d9a33a75998ef59812ad158051aef22a5f9d07b4f3e61086f8ad06b51d1d9d31d5475246507eddd46efccd414903429891a64c982ef5bae8b7c3f6d8752d0f067162258320e4169b9de680bf9a99975739065a4608aae08d5e9dd6db2e6d81fef2385dd3e326a06ba6e37dd44227cb5a56c472d22239c560c8e64237d68960c119221aeaed01df4f1473a45de27e17e165a7533e169ef406092031ebc555d46a4add1d188a2a554f9cfae996a6a176592724d4d9d70d64bf6e4b3137955369f5e7ef0d8560284b091bc02624d52197f521bfe50f5c5d4e6e142f66576ec953b1413533d56a30e0f3009c55c3b1befc5b62efd04206d6d63bd7df561c87e51bfed00a3fd253aad08f51d8c352be4b20b6b41d1b99b1e35fd5c3fc1207a5832b5aa7f79e2fcd836c2c2554028ca7be407e9317772e6c8b2e36589f981fbfb6cb38be994bb0f50a412a2b05d5e8a548d48e07d2e03ded28d0c23ad5c4165f56eabf0b80186c94acbc4f27401a787580cb5c6616da2aeb90e6709210ab7179eb4bb9338e4e14c0e064a2f30ffb69a20f8012aa9a9fecb9433cc59f492c7f0222eedbe0818b190bd83e45e02b35ffc6f0d8d6072551ddb42423ebb7eb71ca6b44a27ffd3ff441af9ec84a65b9db3a990a3984e923e64fe2f23bfd44e4d8b7bddd109f1f37654e7a87aa22a4ac87685b0070524099bfdc19708d4fce999be865abfa3233d79deccb6bba212d025f6127d31fc00f1ffb11b75cf451a75ead4ebe0235e64758db92a82ba86ba66fd13351fa47a4c076e26b14367b9b9a7329c406d208be366939d8bdc4d4fcb2c3e963cdb4b7145f5bea38520ef57f6ee4311dbea28ebe21425889cce2c0e37f406615c551814a5c13351c52a523b4fc2df5379602b290a3c85d3aa9c965457d5f51f484cc73dd6f80266d0a7bc91c66e9d87096b105f184d01db0d0cfeecabc1008c718997a17e24ad793b3fc659cd3c6f6546d48ffcb0e54f934f4649fcacf25cfc3f2269ef9347012168b74ff9130b7e1b1b409db42b6f41ec351c2315070e942cb35d5ce864662657bdd7e9db342e6884cce2f6abb3f6da23a067ec01a3ab8203299ebf5115708a164fa201b287c5e49e4b491c907bf0c956b39f2661011cd73726055f757a63c5837fff689cc9b1cc7400ca5bb98d9f45c5cabf5398c27e046db72f33d6bae16bb40bf83f0bccc08d06148e9a3971e8f2e4de3228e57582236ff58df6942cb3cdc1a6d1cc884df81480ba8e0ac2931fa42f29fbec159090eba9cf5d68155a81ae6c9c5c7ffcde5056f11ab40052276ab311b775ba5f4224cd28db97b3f1dd4650e0ae9b19219a08036681df3588597fab76c40703b8cdcfe3f7bd528a565d1e88fe4d5ead521db7aa739af3defd2878294e2f6f017f2912c1183b1441c85ed56e0c8068e87c0a9ad6844ee14b1af07d17b71441bc48dde88d65f4d96f561d0813b566e2a5a8805bc728b873c5bf2515b5a5103b27a80d24798d2eefe26b22b955c886d75efaaf4fa85215f80e5068f0b8ad2bfaa193e69127512407d07fc2289d065dd29450815b3d8bc777d3561433bf376bc79b51dbf1b79f84468a9b2a719a0d59ae78435a60560f4f19ec5b09b96df844615887ef4b0c4aa05f0957ca0146557390b4a5bdc32c2b17efe94b7cee1e3a48eaac4b281de692cd66254547e60e3931a6cdb14d8636a8120482960603ceecafdbaa5016a16a5fbb99f3da498dd070a01742537aac225d57e97b9492e3f1329ae4b3042713d6f2bf6231b4f52bdef9f6ec00c8eec69acb844c73591560b07b187e54943e0a26470de683c93f9ef653f6da9b89844d4dd43984d5203c6c9c63fbafdf529bdc58064b2263590627361d5c5f343ab38b4094cdcca40dda63a58ae4a9ec6609437b5caf71e073b78f48768515d6d6c14e16f3341bb283769c4c3d6e49d438fb045f662986c9e8c69f490fda6c792217c09003e9a0d6068bf4c74eac7f0f795f32977d14ae8e66becf3cedf7adfd2138bcbf0c14fb1897f610c61014c6297724c130e45b4bc5a32ce7a22a3388f5790cb623fb21689f972e3acaec6b5a8c423370f52b350998af4ad3c475be7b63f8482b2124eec65c86faedbdfa6c8d2cd3e36556f1bac0fed61541508e8f19e091557e05f1a7bfb4591fa93c966fb04b43edbbee7662383e51a066405f1731a0ef9c4271a726436edc49ea14bb5af992695968440b26c4da333fc46be9c1a901fd094650f2fa291f8cd22f75668c5ddf5e4c75a47ba80f9403e2496f26f2cd26f600dfc8ca3efa8cd1f0cf465cb8415db4be4fb40bcda472d08b8a52b22013f15594c22c17daef46effd7c44594b01158647904dbff2cb0bf9bfe0bc4d250b7abfc90885ad7523fff757777c68e79940e3b3600ee313e57bdabf941723e3a816aad2624cf85b2ea1d9d6ec1f0df1cedad16bc356a842ac03ca08c847249ae49de7a28a8044452264a168b8cb09d6170253435575c183f71d27884043308a2033e9960f916ee1a30b7bc5347b99783b6509ae3c11d357cd05fc3f2de26e3d3c6198ca2363017ae4cf44546f52f03ac182b79007a22d411a1eb86a1a5bb5d29d4d0d167cc59cf4a2586d1730f605cd74ae2911e03810552bde15b7b1296c528d26cd24e74028c81c68aa6393c588a5476165012626d6b0c1c4cb6fe7223d3653cbe2010c23ed8fa3c4ae3d28ed4e61ff668d31ecc9773a3e494d163499a0b9803bc91187251b8b97d8e65d656ba1f7127183024464351e5696b7879fed027ebd6f0232ca5442ffc668f1770cd1856db8e112af32c9757f2417687820fcf97a6bf0f291fbc73f4919b28ebfcf16f4a4a95dfd193a0794f3d3882370a5a5c3b6d4383b1002618abd9b8e14384e5057f7b39758abc7f4ecbaa6463862675faf216db471bfd238323bf76433370a1a4ec8c97f9509bf4f990b1293191718e4116c9eb9cbe3b22b90f49ea118a52714c742fe7130736c6e805cf3", 0x1000}, {&(0x7f00000021c0)="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", 0x1000}], 0x9, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="09000000000000000000010000000000000002410000000200137564703a73797a3000000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4040040) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x1000000000000]}) 10:16:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x100000000000000]}) [ 3287.982456][ T4191] bond510: (slave vlan413): Enslaving as an active interface with an up link [ 3288.002426][ T4239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3288.063648][ T4240] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x200000000000000]}) 10:16:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x400000000000000]}) [ 3288.173108][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:07 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3288.268417][ T4261] bond318: (slave vlan238): making interface the new active one [ 3288.285179][ T4261] bond318: (slave vlan238): Enslaving as an active interface with an up link [ 3288.307987][ T4239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x40f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3288.393609][ T4240] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000000400)=0x54) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) mlockall(0x4) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r4 = socket$inet6(0x10, 0x0, 0x0) pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0x6) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) 10:16:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x21360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3288.960801][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3289.173109][T10467] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 3289.272783][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3289.342884][ T4382] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3289.396087][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3289.401978][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3289.408040][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3289.432339][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3289.444935][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3289.475488][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3289.536527][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3289.539973][ T4436] bond319: (slave vlan239): making interface the new active one [ 3289.553184][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3289.579561][ T4436] bond319: (slave vlan239): Enslaving as an active interface with an up link [ 3289.582896][T10467] usb 5-1: Manufacturer: syz [ 3289.609135][T10467] usb 5-1: config 0 descriptor?? [ 3289.618084][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3289.686305][ T4401] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3289.955868][T10467] rc_core: IR keymap rc-hauppauge not found [ 3289.961880][T10467] Registered IR keymap rc-empty [ 3289.996167][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.045903][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.076317][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3290.090181][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1316 [ 3290.145292][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.152382][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.165321][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.185330][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.205289][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.211548][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.225319][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.245312][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.265291][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.271753][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.285346][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.305258][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.325311][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.331650][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.345317][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.365340][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.387616][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.394155][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.405302][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.425335][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.445280][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.452776][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.465330][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.485371][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.505299][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.511959][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.525258][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.546701][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.565263][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.572651][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.585295][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.605310][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.625285][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.631639][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.645284][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.665237][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.685222][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.691765][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3290.705376][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.725254][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.732946][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3290.742188][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3290.752507][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.765235][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.785291][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3290.793484][T10467] usb 5-1: USB disconnect, device number 118 [ 3291.176719][T10467] usb 5-1: new high-speed USB device number 119 using dummy_hcd 10:16:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) r2 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x5, 0x40) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x408a5) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x5, 0x0, 0x10000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'syzkaller0\x00', {}, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:10 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x700000000000000]}) 10:16:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x410, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r4 = signalfd(r3, &(0x7f0000000100)={[0x2]}, 0x8) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc150b4e7d00000010dce00104000000000000ff", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="0000fcff00000463616b65000000120c00020008000b0001000000000000000000"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x22360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3291.425686][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3291.471737][ T4476] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3291.486158][T10467] usb 5-1: device descriptor read/all, error -71 10:16:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x800000000000000]}) [ 3291.578751][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0xffffffff00000000]}) [ 3291.702024][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x2]}) [ 3291.793408][ T4514] bond320: (slave vlan240): making interface the new active one [ 3291.823250][ T4514] bond320: (slave vlan240): Enslaving as an active interface with an up link [ 3291.857041][ T4483] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:10 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x414, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:11 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400e679", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0x10, 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0x6) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000080)={0x1, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4) 10:16:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x4]}) 10:16:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x23360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000100400d5ffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x200808c0}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:11 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x9e7de9215321172e, 0x80000, 0x8001002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x42c, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3292.471706][ T4623] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x7]}) 10:16:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x24360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:11 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3292.696575][T10467] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3292.960333][ T4680] __nla_validate_parse: 7 callbacks suppressed [ 3292.960353][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3293.585887][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3293.609959][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3293.683222][ T4737] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3293.706350][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3293.736017][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3293.791138][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3293.792434][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3293.810170][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3293.862606][ T4731] bond515: (slave vlan414): Enslaving as an active interface with an up link [ 3293.910182][ T4804] bond322: (slave vlan241): making interface the new active one [ 3293.916174][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3293.923503][ T4804] bond322: (slave vlan241): Enslaving as an active interface with an up link [ 3293.934473][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3293.948723][T10467] usb 5-1: Manufacturer: syz [ 3293.958497][T10467] usb 5-1: config 0 descriptor?? [ 3293.971967][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3293.997243][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3294.055181][ T4772] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3294.296304][T10467] rc_core: IR keymap rc-hauppauge not found [ 3294.302885][T10467] Registered IR keymap rc-empty [ 3294.335419][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.385830][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.416201][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3294.433220][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1317 [ 3294.484978][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.491410][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.505973][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.524958][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.545089][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.552493][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.565047][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.584973][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.605110][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.611931][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.625065][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.646649][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.664998][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.672318][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.684929][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.705007][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.725346][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.731815][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.745919][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.766597][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.787171][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.793588][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.804960][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.824944][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.844939][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.851985][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.864992][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.885088][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.905065][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.913208][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.924936][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.945015][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.964989][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3294.971170][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3294.984955][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.005017][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.025007][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.032553][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3295.044918][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.065172][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.072851][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3295.084921][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.091792][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3295.103697][T10467] usb 5-1: USB disconnect, device number 120 [ 3295.110086][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3295.475656][T10467] usb 5-1: new high-speed USB device number 121 using dummy_hcd 10:16:14 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x21, 0xa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='target_sequencer_start\x00'}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:14 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x8]}) 10:16:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x25360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r3, r0, 0x1, 0x72, &(0x7f0000000380)="a93820d00bb69095af56c9d3d34134c27a0ed72558a6badfbdb01d6ef6db26d045d033b3d7f6dac540ecf997b0f184ae306cf759d443cabcec63ccbb359aed0fcb7bf893717ed5e0c4af6dcf6922869a03975ec55d94acdd224c6a4a6c8eca3b8020470b783da7de5558b2fac64905c1e5ea", 0x9, 0xdd, 0x5, 0x3, 0x2, 0x0, 0x81800000, 'syz0\x00'}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000004c0)={0x5, 0x0, 0x80, 0x529}, 0xc) pread64(r2, &(0x7f0000000280)=""/70, 0x46, 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="010000000ea502010004001c0012000c000100627269"], 0x3c}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000500)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3295.715486][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3295.809339][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3295.816041][T10467] usb 5-1: device descriptor read/all, error -71 [ 3295.975914][ T4866] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:15 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x700]}) [ 3296.747770][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3296.858563][ T4914] bond323: (slave vlan242): making interface the new active one [ 3296.910535][ T4914] bond323: (slave vlan242): Enslaving as an active interface with an up link [ 3296.934291][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3296.972455][ T4922] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3297.005983][ T4912] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x26360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:16 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x9, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="0000000005000000000000fc0900010063616b65000000120c00020008000b0001a9feb06254665c0e7eabc54410ef1a07be522642d1cecfbf951b5e10fc35a9c73766f0112ff8b71628826f41f3616d003f3288f79a1c39988e6a6163da52edaee32955adc9471c6e9337181a3dc3301eadfac5970a7b5d678f178ede44585a937b89d90a990554a1f271b81a0624a348ab0a826017c7468c7138fd0e9672485e5d45b4bb19ebc7bda18aa3f1d9e912e527df412b31d76db75181cbd883fba72a4188ddc7a117d9740300adaf5750b5a4954581075ecd12dcd4511030034236af2263f2b1fd1fb8"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3297.544645][T10467] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 3297.622620][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3297.680540][ T4978] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3297.795415][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3297.832454][ T5006] bond517: (slave vlan415): Enslaving as an active interface with an up link [ 3297.863873][ T4978] bond324: (slave vlan243): making interface the new active one [ 3297.879497][ T4978] bond324: (slave vlan243): Enslaving as an active interface with an up link [ 3297.910629][ T5067] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3297.916474][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3297.965636][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3298.005473][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3298.030400][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3298.135839][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3298.154022][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3298.174355][T10467] usb 5-1: Manufacturer: syz [ 3298.181958][T10467] usb 5-1: config 0 descriptor?? [ 3298.526117][T10467] rc_core: IR keymap rc-hauppauge not found [ 3298.532254][T10467] Registered IR keymap rc-empty [ 3298.555034][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.604986][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.635521][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3298.653112][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1318 [ 3298.704667][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.711097][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.724657][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.744759][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.764753][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.772289][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.784608][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.804796][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.824741][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.830953][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.844702][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.864616][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.884625][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.891183][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.904816][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.924610][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.944585][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.951165][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3298.964680][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3298.984612][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.004651][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.011668][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3299.024685][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.044595][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.066837][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.073565][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3299.084632][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.105753][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.126746][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.133586][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3299.144589][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.164622][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.184541][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.191277][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3299.204627][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.224549][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.244666][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.251333][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3299.264578][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.284566][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.292316][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3299.302270][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3299.310825][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.324589][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.344602][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3299.355389][T10467] usb 5-1: USB disconnect, device number 122 [ 3299.755300][T10467] usb 5-1: new high-speed USB device number 123 using dummy_hcd 10:16:19 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000000)={0x350, 0x0, {0x3, 0x3, 0x1, 0x3, 0x9}, 0x80000001}) 10:16:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x1000000]}) 10:16:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x27360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000100)=0xc, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:19 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3300.019471][ T5103] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x2000000]}) [ 3300.191644][ T5102] __nla_validate_parse: 3 callbacks suppressed [ 3300.191664][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3300.203824][T10467] usb 5-1: device not accepting address 123, error -71 [ 3300.562338][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3300.715744][ T5136] bond325: (slave vlan244): making interface the new active one [ 3300.764021][ T5136] bond325: (slave vlan244): Enslaving as an active interface with an up link 10:16:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x4000000]}) [ 3300.836455][ T5137] bond518: (slave vlan416): Enslaving as an active interface with an up link [ 3300.886564][ T5103] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3300.898162][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3300.932848][ T5152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:20 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x28360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) getsockname$netlink(r4, &(0x7f0000000100), &(0x7f0000000280)=0xc) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000380)={0x1, 0x0, 0x102, 0x0, {0xaa5d, 0x7, 0xfffffff9, 0x400}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="00007a837120490000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3301.676381][T10467] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3301.772110][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3301.836629][ T5210] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3301.905225][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3301.925137][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3302.009933][ T5252] bond326: (slave vlan245): making interface the new active one [ 3302.023576][ T5252] bond326: (slave vlan245): Enslaving as an active interface with an up link [ 3302.045215][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3302.073678][ T5209] bond519: (slave vlan417): Enslaving as an active interface with an up link [ 3302.083724][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3302.101088][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3302.108903][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3302.130296][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3302.155544][ T5210] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3302.171236][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3302.225661][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3302.242722][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3302.275240][T10467] usb 5-1: Manufacturer: syz [ 3302.296592][T10467] usb 5-1: config 0 descriptor?? [ 3302.625368][T10467] rc_core: IR keymap rc-hauppauge not found [ 3302.631328][T10467] Registered IR keymap rc-empty [ 3302.654741][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3302.705373][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3302.735564][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3302.752780][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1319 [ 3302.804289][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.811154][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3302.824385][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.844411][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.864327][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.870905][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3302.884355][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.904434][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.924382][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.931246][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3302.944349][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.964363][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.984327][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3302.992357][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.004269][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.024336][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.044456][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.050879][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.064382][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.084247][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.104262][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.110871][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.124258][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.144292][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.164257][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.170812][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.184358][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.205439][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.224301][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.231117][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.244350][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.264386][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.284279][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.291564][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.304320][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.324364][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.344395][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.352255][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3303.364257][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.384411][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.392209][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3303.404229][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.413016][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3303.424344][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3303.432390][T10467] usb 5-1: USB disconnect, device number 124 [ 3303.804917][T10467] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3304.044841][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:23 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x3, 0xa, 0xffffdf7d) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setscheduler(r2, 0x4, &(0x7f0000000080)=0x401) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:23 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xe000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x7000000]}) 10:16:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) socketpair(0x4, 0x8080e, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x80, 0x3, 0x1, 0x1103, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xfffc0000, 0x8, 0x400]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4081}, 0x20010001) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x29360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x8000000]}) [ 3304.135471][T10467] usb 5-1: device descriptor read/all, error -71 [ 3304.153177][ T5334] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3304.226622][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3304.312565][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:23 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3304.946324][ T5425] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3305.132593][T10467] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 3305.158913][ T5334] bond327: (slave vlan246): making interface the new active one [ 3305.173093][ T5334] bond327: (slave vlan246): Enslaving as an active interface with an up link 10:16:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2a360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3305.209389][ T5395] bond520: (slave vlan418): Enslaving as an active interface with an up link [ 3305.232864][ T5399] __nla_validate_parse: 1 callbacks suppressed [ 3305.232887][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x1000000000000]}) [ 3305.343093][ T5441] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x100000000000000]}) [ 3305.395080][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3305.480744][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3305.515591][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3305.535022][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3305.557208][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3305.579381][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3305.651030][ T5478] bond328: (slave vlan247): making interface the new active one [ 3305.666222][ T5478] bond328: (slave vlan247): Enslaving as an active interface with an up link [ 3305.684960][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3305.705786][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3305.715259][T10467] usb 5-1: Manufacturer: syz [ 3305.726037][ T5484] bond521: (slave vlan419): Enslaving as an active interface with an up link [ 3305.736996][T10467] usb 5-1: config 0 descriptor?? [ 3305.747132][ T5448] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3305.763248][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3306.056473][T10467] rc_core: IR keymap rc-hauppauge not found [ 3306.062447][T10467] Registered IR keymap rc-empty [ 3306.094703][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.144836][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.174794][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3306.189957][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1320 [ 3306.244006][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.250375][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.264116][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.284042][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.304140][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.311483][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.324022][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.344135][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.364003][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.370604][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.384041][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.404045][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.424069][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.430344][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.444037][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.464057][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.489677][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.496855][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.514009][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.534126][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.541915][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.554045][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.574077][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.594076][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.601753][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.614147][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.634084][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.654031][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.660528][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.673994][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.695122][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.714021][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.720347][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.734039][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.754467][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.780749][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.789673][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3306.796476][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.814027][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.825909][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3306.834087][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.840640][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3306.854429][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3306.863580][T10467] usb 5-1: USB disconnect, device number 126 [ 3306.874003][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3307.264401][T10467] usb 5-1: new high-speed USB device number 127 using dummy_hcd 10:16:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467657156997d93c137a92ef1b77df51e5af7f5cd9ce4aa05c36cf7ec67895937e9e647"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900006361b29615d66b65000000120c00020008000b000100"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x200000000000000]}) 10:16:26 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3f000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3307.504581][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2b360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3307.564655][T10467] usb 5-1: device descriptor read/all, error -71 [ 3307.596746][ T5561] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x400000000000000]}) [ 3307.674991][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:26 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="78000000f4fb207f93cbbc18540e15095b7a000b3e5c", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250e0000004000038014000600fc0000000000000000000000000000011c00060078dcb8cf58ff0200000000000000000000000000011400020076657468315f746f5f68d4737200000000080005000900000008010400810000000400028006000b0002000000060002004e230000d04375e6b1007200108f3045a1c989dc979e522ca8716c446f23c222c4ecf5fe0a55f898a1e775961a3a566e2922f3256f6239d2080174eeedba5923e04325e94149e84d9a8fa7ac33bdf75f39"], 0x78}, 0x1, 0x0, 0x0, 0x20000044}, 0x48080) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x9004}, 0x90) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502127571179de65c56a8f341ccd17003ec7eca2060508b589835c5acbb1c39e4e5a9b173ac998ce9b4d7dfed9db5b768702ebd254a9812f4abb438a2db83fbdc20bb1ecb3f2116e612f7201096dfcfa9deadde1397fe77532e63f36720c1fa1880788168debb294d279da3ce3804bc9068a49e9d628ee81caf341ec14d40b4dfd1e27e4bcdc792c19206a1a3e90a45f72a351460f7f378de75bd32645d0a19208ae433920435a80a5accad49c8df0286a918a3e7eba1d0fe34484566eb639b"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r6, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}}, 0x4) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 3307.944964][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:27 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x60000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3308.276677][ T5570] bond329: (slave vlan248): making interface the new active one [ 3308.367681][ T5570] bond329: (slave vlan248): Enslaving as an active interface with an up link [ 3308.416910][ T5604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x700000000000000]}) [ 3308.499278][T10467] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3308.502136][ T5606] bond522: (slave vlan420): Enslaving as an active interface with an up link [ 3308.525745][ T5601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3308.551247][ T5561] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3308.568488][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2c360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3308.696056][ T5604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd6, 0x74}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3f}]}, 0x40}}, 0x800) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r6, 0x0, r5, 0x0, 0x420000a77, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getpeername$tipc(r1, &(0x7f0000000100)=@name, &(0x7f0000000280)=0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:27 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x62010000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x800000000000000]}) [ 3309.354519][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:28 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9effffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3309.376933][ T5676] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3309.452896][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3309.480210][T10467] usb 5-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 3309.509185][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3309.532010][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 373 [ 3309.550062][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 10:16:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0xffffffff00000000]}) [ 3309.644794][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3309.658213][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3309.690385][T10467] usb 5-1: Manufacturer: syz [ 3309.715762][T10467] usb 5-1: config 0 descriptor?? [ 3309.722150][ T5716] bond523: (slave vlan421): Enslaving as an active interface with an up link 10:16:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x2]}) [ 3309.798080][ T5676] bond330: (slave vlan249): making interface the new active one [ 3309.858293][ T5676] bond330: (slave vlan249): Enslaving as an active interface with an up link [ 3309.934420][ T5681] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x9, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3310.677643][ T5700] __nla_validate_parse: 2 callbacks suppressed [ 3310.677666][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3310.754620][T10467] rc_core: IR keymap rc-hauppauge not found [ 3310.760596][T10467] Registered IR keymap rc-empty [ 3310.784574][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3310.797499][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3310.854714][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3310.886308][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3310.901973][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1321 [ 3310.973645][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3310.980560][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3310.986501][ T5813] bond524: (slave vlan422): Enslaving as an active interface with an up link [ 3310.993673][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.014131][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.033693][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.036805][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3311.040151][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.056399][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.073712][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.095237][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.113662][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.120288][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.133689][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:16:30 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055771dc5113939bea2010400000109023800010000000009040132b12dfd333bf39e1a7f9b00000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2d360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:30 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x4]}) 10:16:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYRESOCT], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) rt_sigsuspend(&(0x7f0000000100)={[0x32f8]}, 0x8) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3311.153895][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.174199][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.187376][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.194202][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.213619][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.233646][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.240378][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.243683][ T5837] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3311.254165][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.273615][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.293613][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.300261][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.313690][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:16:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x7]}) [ 3311.335160][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.353645][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.360257][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.373632][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.393670][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.413806][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.420960][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.433634][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.453721][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.473624][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.480566][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.493664][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:16:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x8]}) [ 3311.513685][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.528369][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3311.537964][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.547023][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3311.553925][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.573720][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.592710][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3311.600937][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.610804][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3311.619371][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.633657][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3311.641452][T10467] usb 5-1: USB disconnect, device number 2 10:16:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x700]}) 10:16:30 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfcffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3311.936670][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3311.991949][ T5852] bond525: (slave vlan423): Enslaving as an active interface with an up link [ 3312.014372][T10467] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3312.078976][ T5851] bond331: (slave vlan250): making interface the new active one [ 3312.109961][ T5851] bond331: (slave vlan250): Enslaving as an active interface with an up link 10:16:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x1000000]}) [ 3312.135108][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3312.167484][ T5843] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3312.205145][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3312.224338][T10467] usb 5-1: device descriptor read/64, error 18 10:16:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3312.402213][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3312.494604][T10467] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3312.551889][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3312.684204][T10467] usb 5-1: device descriptor read/64, error 18 [ 3312.804501][T10467] usb usb5-port1: attempt power cycle [ 3313.514030][T10467] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3313.604281][T10467] usb 5-1: Invalid ep0 maxpacket: 197 [ 3313.754016][T10467] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3313.844555][T10467] usb 5-1: Invalid ep0 maxpacket: 197 [ 3313.850081][T10467] usb usb5-port1: unable to enumerate USB device 10:16:33 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xfffffffc, &(0x7f00000003c0)="8de7da3fb802f1b5c5c1bebb35130c140b5bcdc614c7e9d5ddc8457675a664d037ee5790965b99771ea3c68d0a80f9cefee7a641377504aba3095d1965fe304218fcedd49b2ca9149075131a17ec3707acb1b7f5fe3c4a808c54b3b0408d445bc46440aa9d06a8e321f773f2dc78be149b6e9b564f203282cfb1b5ca88ef7728e7ddb62754da74193bc089ee67934578ec2cdf059999887bdc5c0ba62b43992d0a856c5aa6b29c5d02743a257dcce3c088c078351c8305837129f8dddbb161") ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x1, @win={{0x2, 0x8, 0xdb3f, 0x80000000}, 0x18, 0xffff, &(0x7f0000000080)={{0x77, 0x0, 0x40, 0x7}, &(0x7f0000000040)={{0x5e4, 0x4, 0x7ff}, &(0x7f0000000000)={{0x8, 0x5, 0x2, 0x40}}}}, 0x6, &(0x7f00000001c0)="ca55e1b6ff8e1622f37a2a8b5f35a2c24bdb4e4d5a8ddcd5cc912c51fd5f23106a0f67a8c86931412142eb7a33432f35aaaae1d3e1127efbb8714e7964f0dc8f714b92a8283f740a7ab412710ced068c22328cb75b6b6fe6ae0f385d4fc4398e2586a4fdb85abdaaead014be1008f2c8eb3407b458fd4dcbcc611b5468ed5c421b45a534d4030eaec6a431dc103c3780eb300540fe32dfb26424b75c87a5bea57d6917dfee9ecefa498792505e373ff258b40db405afc3c2af711688f2875d4bf26768126ecbb5b4a5cece96b02703c7", 0x7}}) 10:16:33 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2e360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x15, 0x80000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) mq_open(&(0x7f0000000100)='!]#-,\x00', 0x80, 0x0, &(0x7f0000000280)={0x80, 0x6, 0x1, 0x66}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x2000000]}) 10:16:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3314.359217][ T6008] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:33 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3314.487983][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3315.134854][ T6075] bond332: (slave vlan251): making interface the new active one [ 3315.158479][ T6075] bond332: (slave vlan251): Enslaving as an active interface with an up link 10:16:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x4000000]}) [ 3315.215418][ T6076] bond527: (slave vlan424): Enslaving as an active interface with an up link [ 3315.257079][ T6008] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x7000000]}) 10:16:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:34 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2f360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3315.869646][ T6119] __nla_validate_parse: 3 callbacks suppressed [ 3315.869667][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3316.127228][ T6155] bond528: (slave vlan425): Enslaving as an active interface with an up link [ 3316.152829][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3316.197217][T10467] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3316.280737][ T6162] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3316.368925][ T6162] bond333: (slave vlan252): making interface the new active one [ 3316.381696][ T6162] bond333: (slave vlan252): Enslaving as an active interface with an up link [ 3316.399445][ T6196] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3316.444235][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3316.563731][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3316.574834][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3316.588003][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3316.599170][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3316.684189][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3316.693883][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3316.701873][T10467] usb 5-1: Manufacturer: syz [ 3316.712811][T10467] usb 5-1: config 0 descriptor?? [ 3317.044047][T10467] rc_core: IR keymap rc-hauppauge not found [ 3317.050006][T10467] Registered IR keymap rc-empty [ 3317.084034][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.134249][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.163839][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3317.178580][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1322 [ 3317.233160][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.240549][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.253782][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.273218][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.293250][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.300273][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.313170][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.334672][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.353220][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.359729][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.373160][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.393248][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.413761][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.420114][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.433162][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.453199][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.473187][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.481272][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.493372][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.513201][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.533221][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.539823][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.553117][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.573637][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.593188][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.600192][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.613126][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.633114][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.653365][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.665461][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.673103][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.693132][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.713132][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.719780][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.733154][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.753161][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.773146][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.780985][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3317.793064][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.813231][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.820629][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3317.831155][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3317.841148][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3317.852515][T10467] usb 5-1: USB disconnect, device number 7 [ 3317.858687][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3318.223804][T10467] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3318.463535][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:37 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371ec5813090582ef10a268713e63ac34d122cc0e0000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2801, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:37 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x12, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x8000000]}) 10:16:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x30360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:37 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffffc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3319.162338][T10467] usb 5-1: device descriptor read/all, error -71 [ 3319.268371][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x1000000000000]}) [ 3319.449816][ T6250] bond529: (slave vlan426): Enslaving as an active interface with an up link [ 3319.477267][ T6240] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x100000000000000]}) 10:16:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3319.561345][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:38 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3319.624199][T10467] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3319.771267][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3319.829565][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3319.866288][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3319.984200][T10467] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 3320.007296][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 104, changing to 10 [ 3320.014502][ T6364] bond530: (slave vlan427): Enslaving as an active interface with an up link [ 3320.041660][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3320.064017][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3320.081480][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3320.153972][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3320.164170][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3320.172262][T10467] usb 5-1: Manufacturer: syz [ 3320.184193][T10467] usb 5-1: config 0 descriptor?? [ 3320.473749][T10467] usb 5-1: USB disconnect, device number 9 [ 3321.203477][T10467] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3321.443576][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3321.563382][T10467] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 3321.575477][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 104, changing to 10 [ 3321.589050][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3321.683376][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3321.692516][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3321.713366][T10467] usb 5-1: Manufacturer: syz [ 3321.719586][T10467] usb 5-1: config 0 descriptor?? 10:16:41 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x10001, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) 10:16:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x200000000000000]}) 10:16:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x31360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:41 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = request_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffb) keyctl$search(0xa, 0x0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, r1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3322.029765][T10467] usb 5-1: USB disconnect, device number 10 [ 3322.069516][ T6417] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3322.210784][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:41 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3322.465236][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x400000000000000]}) [ 3322.966568][ T6443] bond335: (slave vlan253): making interface the new active one [ 3322.986010][ T6443] bond335: (slave vlan253): Enslaving as an active interface with an up link [ 3323.019108][ T6446] bond531: (slave vlan428): Enslaving as an active interface with an up link [ 3323.029173][ T6428] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3323.058930][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3323.081985][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x32360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x50, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:42 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xc0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000b3ace90918eaa30d373b7cbc47296ace9b7f07ca919bd7f8ae38226a13323a2cf1891bac755e2473b7319cb7565ceca180c04837a4671f94a025bb4a28d197d64ab75e7e9311d8ce2e91249049294b9ae4b073f0de6fc381fcc3f1746cb62932e1f4a5b4de6c6c0c8e1195cd6269371a158b1ed8626f201858c75572106bd19cc934cf73eaafa334ed2a5657d4c43848d3190ee2372d38489903eb04c188d7d975ad112735abdfe5966c10ed66e023c3af969a21711bbae814506df02bf50b2f57ac53f6e2d456428b", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3323.632184][T10467] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3323.724729][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3323.783831][ T6534] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3323.873493][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3323.930937][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3323.993621][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3324.005540][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3324.021945][ T6561] bond532: (slave vlan429): Enslaving as an active interface with an up link [ 3324.026535][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3324.064890][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3324.079068][ T6588] bond336: (slave vlan254): making interface the new active one [ 3324.101141][ T6588] bond336: (slave vlan254): Enslaving as an active interface with an up link [ 3324.115390][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3324.128656][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3324.141018][ T6534] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3324.163553][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3324.178771][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3324.199431][T10467] usb 5-1: Manufacturer: syz [ 3324.221548][T10467] usb 5-1: config 0 descriptor?? [ 3324.583089][T10467] rc_core: IR keymap rc-hauppauge not found [ 3324.589131][T10467] Registered IR keymap rc-empty [ 3324.623278][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3324.673014][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3324.703788][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3324.721088][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1323 [ 3324.782567][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.789216][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3324.802589][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.822601][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.842566][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.849518][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3324.862563][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.882624][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.902615][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.908917][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3324.922555][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.942594][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.962543][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3324.969039][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3324.982538][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.002618][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.022576][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.029136][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3325.042557][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.062514][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.082519][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.089231][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3325.104188][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.122911][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.142581][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.150491][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3325.162530][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.182562][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.202537][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.208761][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3325.222496][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.243291][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.262557][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.269392][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3325.282525][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.302578][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.322519][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.328864][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3325.342532][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.364080][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.371588][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3325.382118][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3325.390687][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.402533][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.422479][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.429952][T10467] usb 5-1: USB disconnect, device number 11 [ 3325.442495][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3325.812999][T10467] usb 5-1: new high-speed USB device number 12 using dummy_hcd 10:16:45 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x148, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x1b}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x44800) 10:16:45 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xec0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x700000000000000]}) 10:16:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x33360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = accept(r0, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3326.061321][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3326.090835][ T6648] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3326.138597][T10467] usb 5-1: device descriptor read/all, error -71 10:16:45 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3326.957533][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:46 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2000025c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0x800000000000000]}) [ 3327.098804][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3327.191343][ T6682] bond337: (slave vlan255): making interface the new active one [ 3327.247516][ T6682] bond337: (slave vlan255): Enslaving as an active interface with an up link [ 3327.271278][ T6705] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3327.281966][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x34360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3327.293994][T10467] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3327.315722][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:46 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x7ffff000, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8, [0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 3327.479400][ T6767] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3327.563103][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3327.697136][T10467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3327.723047][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3327.738719][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3327.756607][ T6807] bond338: (slave vlan256): making interface the new active one [ 3327.773791][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3327.791913][ T6807] bond338: (slave vlan256): Enslaving as an active interface with an up link [ 3327.823302][ T6767] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3327.877684][ T6807] device bridge414 entered promiscuous mode [ 3327.913556][ T6807] device bridge414 left promiscuous mode [ 3327.928393][ T6807] bond338: (slave vlan257): Enslaving as an active interface with an up link [ 3327.963181][T10467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3327.976594][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3327.994832][T10467] usb 5-1: Manufacturer: syz [ 3328.003514][T10467] usb 5-1: config 0 descriptor?? [ 3328.322889][T10467] rc_core: IR keymap rc-hauppauge not found [ 3328.328894][T10467] Registered IR keymap rc-empty [ 3328.353035][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.403145][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.433242][T10467] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3328.447196][T10467] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1324 [ 3328.482225][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.488894][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.502366][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.522284][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.542249][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.548787][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.562267][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.582287][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.602240][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.608813][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.622298][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.642257][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.662358][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.669808][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.682261][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.702320][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.722234][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.729133][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.742258][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.762271][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.782301][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.788872][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.803842][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.822301][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.842264][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.849699][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.862267][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.882279][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.902301][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.910401][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.922213][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.942293][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.962270][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3328.968524][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3328.982264][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.002223][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.022299][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.030101][T10467] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3329.042233][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.062240][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.069578][T10467] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3329.079882][T10467] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3329.089847][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.100217][T10467] usb 5-1: USB disconnect, device number 13 [ 3329.106370][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3329.482973][T10467] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3329.722914][T10467] usb 5-1: Using ep0 maxpacket: 16 10:16:48 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055300710400038b1420104000001090238000100000000090400000371055900090582ef10000000010200090502127553903697323f664fafbc36f060789da7b733501de26a991c8e42165712e938ec27b3f388449c53bfb49769e370c48b03e4eaee61fba6aa0073d4d1db234a4035f65f207f9f739672b55c2e32d55feff4cda54a5e76ff71afddedae7ccc3d1f1f3fbff8b7f1e257686cc920040e5df449b192babc39d5238c91e9b8dc3c4874a4b48200"/195], 0x0) r0 = socket(0x10, 0x803, 0x0) dup(r0) 10:16:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b250000e25e040000000000041f5e"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x100, 0x0) r6 = socket$inet6(0x10, 0x0, 0x0) pread64(r6, &(0x7f0000000280)=""/70, 0x46, 0x6) fcntl$dupfd(r5, 0x406, r6) 10:16:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='&\xf4\xe2\xf1V\x05\x8e\xf7\xdf5G\xc4', 0x80, 0x0, &(0x7f0000000040)={0x0, 0xee39, 0x3f, 0x8}) 10:16:48 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x35360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3329.880121][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3330.087620][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:49 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x6, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3330.368614][T10467] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3330.380944][T10467] usb 5-1: can't read configurations, error -71 [ 3330.400839][ T6857] bond534: (slave vlan430): Enslaving as an active interface with an up link [ 3330.418506][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000aab60f0900009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000440)=0x800, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x8000) ioctl$CHAR_RAW_PG(r3, 0x1269, &(0x7f0000000040)={0xfffffffd, 0x4, 0xfc, &(0x7f0000000240)="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"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x7000) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4) clock_nanosleep(0x3, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3330.486837][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3330.534387][ T6858] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x6c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:49 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3330.654309][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:16:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x36360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3331.051263][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3331.053929][T10467] usb 5-1: new high-speed USB device number 15 using dummy_hcd 10:16:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r5 = socket$inet6(0x10, 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100), 0x4) [ 3331.284753][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3331.513760][ T6966] bond535: (slave vlan431): Enslaving as an active interface with an up link [ 3331.531058][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3331.566837][ T6976] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3331.702891][T10467] usb 5-1: Using ep0 maxpacket: 16 [ 3331.741444][ T7017] bond339: (slave vlan259): making interface the new active one [ 3331.757695][ T7017] bond339: (slave vlan259): Enslaving as an active interface with an up link [ 3331.786106][ T6976] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3331.823330][T10467] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 3331.860899][T10467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3331.881002][T10467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 885 [ 3331.901121][T10467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3331.993056][T10467] usb 5-1: New USB device found, idVendor=0040, idProduct=b138, bcdDevice= 1.42 [ 3332.003013][T10467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3332.011020][T10467] usb 5-1: Manufacturer: syz [ 3332.025466][T10467] usb 5-1: config 0 descriptor?? [ 3332.269850][T10492] usb 5-1: USB disconnect, device number 15 [ 3333.043267][T24458] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3333.292823][T24458] usb 5-1: Using ep0 maxpacket: 16 [ 3333.423388][T24458] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 3333.434065][T24458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3333.454283][T24458] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 885 [ 3333.465107][T24458] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 10:16:52 executing program 4: syz_usb_connect(0x5, 0x4a, &(0x7f0000000100)=ANY=[], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x74, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:52 executing program 2: setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:16:52 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x37360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=""/155, 0x9b) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT=r1, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x2000001d) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3333.540472][T24458] usb 5-1: string descriptor 0 read error: -71 [ 3333.561317][T24458] usb 5-1: New USB device found, idVendor=0040, idProduct=b138, bcdDevice= 1.42 [ 3333.578583][ T7044] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3333.613577][T24458] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3333.640516][ T7046] __nla_validate_parse: 2 callbacks suppressed [ 3333.640535][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3333.699022][T24458] usb 5-1: config 0 descriptor?? 10:16:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x3}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x880) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f00000000c0)={0x0, 0x7, @name="31bec814311e5a1ec19ce1ed5fe15c815539273b3ad1a2f5e9bc04724e50dc4a"}) [ 3333.763216][T24458] usb 5-1: can't set config #0, error -71 [ 3333.791946][T24458] usb 5-1: USB disconnect, device number 16 [ 3333.845691][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:53 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3334.005770][ T7044] bond340: (slave vlan260): making interface the new active one [ 3334.079367][ T7044] bond340: (slave vlan260): Enslaving as an active interface with an up link [ 3334.150620][ T7092] bond536: (slave vlan432): Enslaving as an active interface with an up link [ 3334.186212][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3334.196993][T24458] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3334.217257][ T7069] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3334.237471][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:16:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x38360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x482100, 0xde) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x3fb, 0x300, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x4040001) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000440)) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r9, 0x496742819aece009, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20) 10:16:53 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:53 executing program 2: ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x0, 0x3, 0x8000}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) close_range(r1, r0, 0x2) [ 3334.402587][T24458] usb 5-1: device descriptor read/64, error 18 [ 3334.430352][ T7155] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3334.601260][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3334.666001][ T7155] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3334.683347][T24458] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3334.691069][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3334.903078][T24458] usb 5-1: device descriptor read/64, error 18 [ 3335.034406][T24458] usb usb5-port1: attempt power cycle [ 3335.773137][T24458] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3335.943146][T24458] usb 5-1: device descriptor read/8, error -61 [ 3336.212639][T24458] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3336.402561][T24458] usb 5-1: device descriptor read/8, error -61 [ 3336.523622][T24458] usb usb5-port1: unable to enumerate USB device 10:16:55 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x3, 0x3ff}, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x50000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000001c0)) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x7a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:55 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000100)) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r4, 0x0, r3, 0x0, 0x420000a77, 0x0) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x0) 10:16:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x39360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f0000000100)=0x10000) [ 3336.764874][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3336.859763][ T7252] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:56 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3337.062403][ T7218] bond537: (slave vlan433): Enslaving as an active interface with an up link [ 3337.100901][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3337.153656][ T7298] bond342: (slave vlan261): making interface the new active one [ 3337.167609][ T7298] bond342: (slave vlan261): Enslaving as an active interface with an up link [ 3337.185542][T24253] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3337.198536][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3337.213206][ T7252] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:56 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xc6, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3a360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3337.360415][ T7324] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3337.426075][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3337.473165][T24253] usb 5-1: Using ep0 maxpacket: 16 [ 3337.593557][ T7324] bond343: (slave vlan262): making interface the new active one [ 3337.603736][T24253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3337.628479][ T7324] bond343: (slave vlan262): Enslaving as an active interface with an up link [ 3337.638160][T24253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3337.669164][T24253] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3337.699085][ T7380] bond538: (slave vlan434): Enslaving as an active interface with an up link [ 3337.715788][T24253] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3337.745015][ T7349] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000004c0)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r2, 0x0, r1, 0x0, 0x420000a77, 0x0) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x446) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x90, 0x0, r4, {0x0, 0x2, 0x81, 0x401, 0xff, 0x8, {0x1, 0x1, 0x0, 0x401, 0x3, 0x7fff, 0x7ed8, 0x8, 0x0, 0xa000, 0x4006, 0xee00, 0xee01, 0x7f, 0x7}}}, 0x90) pidfd_open(0xffffffffffffffff, 0x0) 10:16:56 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3337.902396][T24253] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3337.918589][T24253] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3337.956201][T24253] usb 5-1: Manufacturer: syz [ 3337.996657][T24253] usb 5-1: config 0 descriptor?? [ 3338.332762][T24253] rc_core: IR keymap rc-hauppauge not found [ 3338.338717][T24253] Registered IR keymap rc-empty [ 3338.373063][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.422269][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.472779][T24253] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3338.490304][T24253] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1325 [ 3338.541976][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.549159][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.571479][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.591997][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.611844][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.618275][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.641473][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.661454][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.667728][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.691403][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.712485][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.732150][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.738568][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.761442][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.781461][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.787955][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.803382][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.823317][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.841982][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.848240][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.863324][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.882246][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.902197][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.908591][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3338.931411][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.952041][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.982188][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3338.988821][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3339.011429][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.041423][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.048554][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3339.061500][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.091406][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.121506][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.128184][T24253] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3339.141476][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.163738][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.171147][T24253] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3339.179805][T24253] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3339.188299][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.211378][ C1] mceusb 5-1:0.0: Error: urb status = -71 [ 3339.232906][T24253] usb 5-1: USB disconnect, device number 21 [ 3339.672815][T24253] usb 5-1: new high-speed USB device number 22 using dummy_hcd 10:16:58 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b142010400000109023800010000000009040000590000000000110000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:16:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xcf, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3b360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:16:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) socket$isdn_base(0x22, 0x3, 0x0) 10:16:58 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:16:58 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x4000, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3339.932840][T24253] usb 5-1: Using ep0 maxpacket: 16 [ 3339.957236][ T7446] __nla_validate_parse: 2 callbacks suppressed [ 3339.957255][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3340.002637][T24253] usb 5-1: device descriptor read/all, error -71 10:16:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000000000000000000000000200000003000000d80100009800000000000000980000009800d95e162d5e9560a60000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000040000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600002000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) r2 = dup2(r0, r0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x810) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000140)={{0x2f, @private=0xa010103, 0x4e22, 0x0, 'wrr\x00', 0x8, 0x0, 0x1e}, {@multicast2, 0x4e1f, 0x1, 0x75a6, 0x7fff, 0xe}}, 0x44) [ 3340.149869][ T7450] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:59 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3340.393423][T24253] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3340.426945][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3340.455144][ T7499] IPVS: set_ctl: invalid protocol: 47 10.1.1.3:20002 10:16:59 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x520000000000, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0, 0x0, r0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x2, 0x5, 0x3e}) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x5, &(0x7f0000000180)=""/50, &(0x7f0000000100)=0x32) setrlimit(0x5, &(0x7f00000000c0)={0x50000, 0x3}) [ 3340.557390][ T7461] bond539: (slave vlan435): Enslaving as an active interface with an up link [ 3340.578734][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3340.639497][ T7482] bond344: (slave vlan263): making interface the new active one [ 3340.660054][ T7482] bond344: (slave vlan263): Enslaving as an active interface with an up link 10:16:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xda, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3340.682101][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3340.682245][T24253] usb 5-1: Using ep0 maxpacket: 16 [ 3340.720227][ T7456] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:16:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c09000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:16:59 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3340.845556][T24253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3340.870453][T24253] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 89, using maximum allowed: 30 [ 3340.890941][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3340.920310][T24253] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 3340.958552][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3341.044860][ T7555] bond540: (slave vlan436): Enslaving as an active interface with an up link [ 3341.062488][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3341.083059][T24253] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3341.117417][T24253] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3341.147756][T24253] usb 5-1: Manufacturer: syz [ 3341.171000][T24253] usb 5-1: config 0 descriptor?? [ 3341.184050][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3341.460809][ T9910] usb 5-1: USB disconnect, device number 23 [ 3342.242538][T24253] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3342.481888][T24253] usb 5-1: Using ep0 maxpacket: 16 [ 3342.622392][T24253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3342.635334][T24253] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 89, using maximum allowed: 30 [ 3342.656268][T24253] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 3342.762890][T24253] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3342.772609][T24253] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3342.780591][T24253] usb 5-1: Manufacturer: syz [ 3342.789517][T24253] usb 5-1: config 0 descriptor?? 10:17:02 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = gettid() waitid(0x2, r1, &(0x7f0000000000), 0x9589ca00284fc6bc, &(0x7f0000000080)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:17:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3c360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:02 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x60, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e22, 0x400, @empty, 0x6}}}, 0x38) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000000280), &(0x7f0000000380)=""/85, 0x55}) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000440)="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", 0xfffffffffffffd68, 0x40, 0x0, 0x0) 10:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xf0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x15}, 0x80) [ 3343.042692][T10492] usb 5-1: USB disconnect, device number 24 [ 3343.147112][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x7fffffff, 0x6) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3343.272613][ T7638] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:02 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3343.441784][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3343.564053][ T7676] bond541: (slave vlan437): Enslaving as an active interface with an up link [ 3343.606202][ T7686] bond345: (slave vlan264): making interface the new active one [ 3343.626407][ T7686] bond345: (slave vlan264): Enslaving as an active interface with an up link 10:17:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="54270a9445d35741765c40e2b5507ff679d67d8a26d80d6eeab768e5d20ebe0aed678c444153b07412c7351d6c39147085597eee9794a81dcebee884872e1c0ba842d526c5c9c185bb3b1a06c72023ec3082df0bad543077551045f7dbf453c9714c3610afa6eaafacc3c3583de7226ade616811385b9193c0812ed5c3cc9bb1c24938798638862772e2d3a29429c220fa6da79d2fc67b1b2feea0281c421bfa40258938676936c9f610c7341708b27e2f759a8bc98a842a977581d6b7e467983826b61388de9c6c414f4bf5344f13454b80f1a2fc64a76c41fa5f084f3c8f747496f78643e93f425dae0f41e25c373b501bfc", 0xf3, 0x4000040, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, [], 0x2c}, 0x1}, 0x1c) [ 3343.664312][ T7638] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3343.701679][T10492] usb 5-1: new high-speed USB device number 25 using dummy_hcd 10:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x1ba, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xf, 0x2, 0x10001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x305}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000100)={0x2a, 0x29, 0x2, {0x401, [{{0x40, 0x3, 0x8}, 0x3f, 0x9, 0x7, './file0'}]}}, 0x2a) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3343.920418][ T7745] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3343.951739][T10492] usb 5-1: Using ep0 maxpacket: 16 [ 3344.049154][ T7743] bond542: (slave vlan438): Enslaving as an active interface with an up link [ 3344.082122][T10492] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3344.093467][ T7745] bond346: (slave vlan265): making interface the new active one [ 3344.109009][T10492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3344.124342][ T7745] bond346: (slave vlan265): Enslaving as an active interface with an up link [ 3344.136225][T10492] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3344.153294][T10492] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3344.182769][ T7782] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3344.242276][T10492] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3344.263809][T10492] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3344.275003][T10492] usb 5-1: Manufacturer: syz [ 3344.288775][T10492] usb 5-1: config 0 descriptor?? [ 3344.621376][T10492] rc_core: IR keymap rc-hauppauge not found [ 3344.627410][T10492] Registered IR keymap rc-empty [ 3344.661686][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3344.711780][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3344.741804][T10492] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3344.760151][T10492] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1326 [ 3344.820977][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.829004][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3344.840969][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.862339][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.881017][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.888083][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3344.900971][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.920971][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.940987][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.947268][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3344.960969][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3344.981039][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.000966][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.007542][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.020970][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.040999][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.060960][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.067552][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.080953][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.100963][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.120988][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.128349][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.141004][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.160998][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.180971][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.187375][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.200913][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.220920][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.240966][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.248359][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.260949][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.280952][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.300938][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.307177][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.320949][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.340980][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.360974][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.367362][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3345.380939][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.402055][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.409380][T10492] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3345.418713][T10492] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3345.427229][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.437018][T10492] usb 5-1: USB disconnect, device number 25 [ 3345.443142][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3345.812528][T10492] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3346.051480][T10492] usb 5-1: Using ep0 maxpacket: 16 10:17:05 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275", @ANYRESHEX], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:17:05 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x162, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:05 executing program 2: mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3e000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x54) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x22e, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3346.232052][T10492] usb 5-1: unable to read config index 0 descriptor/all [ 3346.239087][T10492] usb 5-1: can't read configurations, error -71 [ 3346.266283][ T7862] __nla_validate_parse: 6 callbacks suppressed [ 3346.266303][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:05 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xa) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3346.366727][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3346.447673][ T7865] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3346.570645][ T7874] bond543: (slave vlan439): Enslaving as an active interface with an up link [ 3346.603943][ T7876] bond347: (slave vlan266): making interface the new active one [ 3346.616865][ T7876] bond347: (slave vlan266): Enslaving as an active interface with an up link [ 3346.637897][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3346.648723][T10492] usb 5-1: new high-speed USB device number 27 using dummy_hcd 10:17:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x80, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2e}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff81}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x101, 0x2, 0x1f, 0x1]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES16, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40100}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r7, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3346.731678][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3346.747042][ T7865] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:05 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3e360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x254, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3346.832886][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3346.884014][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3346.901927][T10492] usb 5-1: Using ep0 maxpacket: 16 [ 3346.918619][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3346.993889][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3347.006792][ T7965] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3347.022188][T10492] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config 10:17:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000380)=""/166, 0xa6) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3347.060089][T10492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3347.137722][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3347.148274][T10492] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3347.213095][T10492] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3347.311943][T10492] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3347.316365][ T7974] bond348: (slave vlan267): making interface the new active one [ 3347.322103][T10492] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3347.339362][T10492] usb 5-1: Manufacturer: syz [ 3347.354681][T10492] usb 5-1: config 0 descriptor?? [ 3347.389165][ T7974] bond348: (slave vlan267): Enslaving as an active interface with an up link [ 3347.452289][ T7975] bond544: (slave vlan440): Enslaving as an active interface with an up link [ 3347.468419][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3347.514302][ T7965] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3347.702738][T10492] rc_core: IR keymap rc-hauppauge not found [ 3347.708800][T10492] Registered IR keymap rc-empty [ 3347.735267][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3347.791655][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3347.821989][T10492] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3347.842328][T10492] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1327 [ 3347.900730][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3347.907117][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3347.920754][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3347.940835][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3347.960825][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3347.968457][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3347.980746][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.000728][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.020699][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.027057][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.040708][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.060827][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.080933][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.087332][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.100730][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.120686][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.140692][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.147192][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.160709][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.180696][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.202228][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.208636][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.220704][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.240687][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.261627][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.268010][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.280715][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.300713][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.320789][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.327324][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.340705][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.360756][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.380778][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.387327][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.400689][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.420823][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.440644][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.448056][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3348.460702][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.480707][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.488686][T10492] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3348.500228][T10492] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3348.508803][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.520668][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.540781][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.560729][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.568516][T10492] usb 5-1: USB disconnect, device number 27 [ 3348.580687][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3348.951103][T10492] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3349.191336][T10492] usb 5-1: Using ep0 maxpacket: 16 10:17:08 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x7, 0x178, 0x1}) 10:17:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3f000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:08 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400440, 0x0) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:17:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x2ca, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="43cecd3448ee0976a855dc45737705a20ead9cee4752643b92c53956bea4c9c4", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3349.371580][T10492] usb 5-1: unable to read config index 0 descriptor/all [ 3349.381708][T10492] usb 5-1: can't read configurations, error -71 [ 3349.386479][ T8093] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x7}, 0x0, 0x100, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={0xfffffffffffffffe}) 10:17:08 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3349.673528][ T8122] bond349: (slave vlan268): making interface the new active one [ 3349.689533][ T8122] bond349: (slave vlan268): Enslaving as an active interface with an up link [ 3349.735651][ T8142] bond545: (slave vlan441): Enslaving as an active interface with an up link [ 3349.751659][ T8093] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3349.772514][T10492] usb 5-1: new high-speed USB device number 29 using dummy_hcd 10:17:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)=':<\xf90\x16z\xe3z\xa4X^&\x05\x8aO\xe1t\xca\x94\xda\xb2\x170C\xe7\xa6\xf4\xb9\x11\xde\xa1\xb3M&\x1d\xeeu\xf4\x80\x01\n\xb3\x89\x81!\xc1+\x91\x83N]\xe8\\\xac^\x92\xda#\x98\xf8\xf3\x17j/\x9cm\x86\xaa\x02\xd4\a\x17\xb6~\xa4\v\x9c\xd0\x84X\xeb\x1f\xdb\xc6p5\"|n\x10\xc8\x96\x01\xeb\a`\xb4\x1dV\x8eD\x11H\xf2T\xae\xbc\x9b\xa1o:\x04\xba\xde\f\f\xdc\x86\b\x97|X\x1d?\xb2s8\x14\xf7\xe8\xe3\x84hq:\xf2\'\xa5`^w-[\x9f\x9b5\xa4`6\x9bP\xd2\xb0\x97\xb5\x8cR\x8dWk\xf0t{\xf5\xb7Nb\xda\x05\xa6Z\xb0\x02\xe3\xafe\x95\x8a\tX2Ra5d`\xa4\xb7\x1eB\xc0&\x88[\xc4\x88B#\x04CA\t\xf3_\x1e\x925\x03\x7f@\xaaz,\x03\xdf\xc3X\x1c\xe8\'\xf4\xaa:\xd46Li\x15\xe7&:DtO\xda', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x581}) 10:17:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3f360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4bd0e3542ed198ca, 0x40, &(0x7f0000000380)) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:08 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3350.011312][T10492] usb 5-1: Using ep0 maxpacket: 16 [ 3350.113196][ T8207] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3350.137377][T10492] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 10:17:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x1e8, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "284d051a6d2cda09e8c41793e5961962743e951ae1dc52b864d333b15048ddcbbd3cc8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x101, @private0={0xfc, 0x0, [], 0x1}, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10000, @remote, 0xad}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000001, @ipv4={[], [], @private=0xa010102}, 0x401}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1d8dd9ad, @mcast2, 0x7fff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @empty, 0x94}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x22}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x52}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x60000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x79}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1bef}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x53}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) [ 3350.162888][T10492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3350.309462][ T8252] bond546: (slave vlan442): Enslaving as an active interface with an up link [ 3350.349193][T10492] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3350.356679][ T8253] bond350: (slave vlan269): making interface the new active one [ 3350.380146][T10492] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3350.387069][ T8253] bond350: (slave vlan269): Enslaving as an active interface with an up link 10:17:09 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3350.468059][ T8207] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3350.481864][T10492] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3350.500209][T10492] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3350.524674][T10492] usb 5-1: Manufacturer: syz 10:17:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x314, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3350.547532][T10492] usb 5-1: config 0 descriptor?? [ 3350.787946][ T8312] bond547: (slave vlan443): Enslaving as an active interface with an up link [ 3350.921314][T10492] rc_core: IR keymap rc-hauppauge not found [ 3350.927762][T10492] Registered IR keymap rc-empty [ 3350.951306][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.000994][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.031675][T10492] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3351.045805][T10492] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1328 [ 3351.100418][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.106714][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.120531][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.140571][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.160565][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.167262][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.180520][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.200558][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.220548][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.228485][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.240495][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.260545][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.280487][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.286779][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.302642][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.320455][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.340476][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.346811][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.360499][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.382637][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.402540][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.409144][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.420477][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.440430][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.462171][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.468460][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.480461][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.500444][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.520482][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.527722][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.540466][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.560449][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.580504][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.587762][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.600497][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.620482][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.640495][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.646798][T10492] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3351.660503][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.680477][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.688245][T10492] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3351.698765][T10492] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3351.707334][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3351.717695][T10492] usb 5-1: USB disconnect, device number 29 [ 3351.723751][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3352.131172][T10492] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3352.371246][T10492] usb 5-1: Using ep0 maxpacket: 16 10:17:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 10:17:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vim2m\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000100)={0x7, 'syzkaller1\x00', {0x4959aa95}, 0xb370}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="0100000affffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)=""/110, &(0x7f0000000480)=0x6e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000a00)={r5, 0x1e7a0, 0x1, 0x813f, 0x3, 0x5, 0x83, 0xfffffffe, 0x9, 0x9, 0x1, 0x7}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x0, 0x14, 0xdf, {0xdf, 0xa, "29f68dfb84a06b54d11960e468942446634f87fc57b1afa4c7ed2c1ff92235c27e5d92b02ccf9f6e9a904b705d035406913395ad50fb2234ff68176145f87aa12a301ec9c8667813e91f46767df29d9bcd938c55ec0185c270e7debbf5fba7696d1ab7e3ffc68fdf9230acdb99a2ad5670a4e6627309fca4c6ae7ed619aaafcb7f2eeece5cbd2be4dea9d1b1b2da927c8333b5c5f1fe69510dda3aeace35917d7700355e586c885af2769f4ae2b31d28cd872238b479908d161335b82a3334a223155c98c68bd8a741ed8493c6478050986cef9e60d25d1deb1f56f0cb"}}, &(0x7f0000000600)={0x0, 0x3, 0x7, @string={0x7, 0x3, "fe69b5f1c0"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000680)={0x0, 0x24, 0xe, "64428f9575fe772c41c242607ea8"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000740)={0x20, 0x81, 0x2, "6e8d"}, &(0x7f0000000800)={0x20, 0x82, 0x1, 'F'}, &(0x7f0000000840)={0x20, 0x83, 0x3, "a4eb46"}, &(0x7f0000000880)={0x20, 0x84, 0x2, "15d4"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "8478f4"}}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:11 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xe00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x358, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:11 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000001000000402038b142010400000109023800010000513b522f50000009ed62ef0c36fd2b04000003711c5900090582ef"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300ecb31c1878ecf8b21cd685fa7b01d30da497742f0260c91ff57c025582a53632dd1c29236c", @ANYRES32=r4, @ANYBLOB="0800050003000900"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r9, 0x0, r8, 0x0, 0x420000a77, 0x0) recvfrom$l2tp(r9, &(0x7f0000000500)=""/169, 0xa9, 0x2000, &(0x7f00000005c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20120000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x66}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) write(r0, &(0x7f0000000000)="ce20bc15bdef00000000000097ecad6dcb83f331a8bee9ef67158323d3f9c83876ec098ec3b23c749e8eb36f137992cef84b721c69a37ca53fd72bff80d0735aff6f809eb92000f35713f8b0094d0bd832b0cb82a5d45d31a7cfe6178000000000000000000000000000000000000000000000000000000000c71c1ebecb3d9500190e77ea2b872491a1fd97c0ba1fa5113e551000550f3fef72c04f2c984ad05e866ef3bd0f66d426d11eb442d0200056a46e6d1b628fea2ccc7f66c882b685ac46468e366971340026f083db146222c26cda6ce55dcd43f1689a1c265da6404500f3020c5fdf90421d7a7aef80cab0810c530210e2a3f889c3939dfd7e45b216040bee01eab12b03b039a5cc9950477c874195da9ba9ce9b3e45161c8b176b777db76ed569b77b44321b079157da", 0x12f) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x81) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3352.491360][T10492] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3352.498998][T10492] usb 5-1: can't read configurations, error -71 [ 3352.502895][ T8380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:11 executing program 2: mq_open(&(0x7f0000000000)='\xabp\xd4\xf4\x83\x1e\xb7d\xb2\xe5\x11\xf6d', 0x40, 0x0, &(0x7f0000000080)={0x6, 0x401, 0x3, 0x6}) 10:17:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r0 = socket$inet6(0x10, 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/70, 0x46, 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xdd3e, 0x2, 0xffffffe0}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x1000, @rand_addr=' \x01\x00', 0x101}}, [0x0, 0x9, 0x9, 0x5, 0x5, 0x4, 0x1000, 0x5, 0x1, 0x1, 0x2, 0x0, 0xffff, 0x6, 0x8a]}, &(0x7f0000000280)=0x100) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8001}}, [0x1, 0xff, 0x3, 0x1ff, 0x5, 0x430, 0x9, 0x8000, 0x101, 0x7, 0x8000, 0x1, 0x6, 0x800, 0x4]}, &(0x7f0000000440)=0x100) io_uring_enter(r2, 0x2321, 0x8f3f, 0x2, &(0x7f00000000c0)={[0x3f]}, 0x8) [ 3352.659481][ T8384] __nla_validate_parse: 12 callbacks suppressed [ 3352.659504][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x10, 0x3, 0x4}, 0xfffffff7}}, 0x18) [ 3352.861557][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3352.911370][T10492] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3352.922471][ T8396] bond351: (slave vlan270): making interface the new active one 10:17:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x9, 0x4503, 0x3f, 0x4}) [ 3352.957153][ T8396] bond351: (slave vlan270): Enslaving as an active interface with an up link [ 3352.999487][ T8412] bond548: (slave vlan444): Enslaving as an active interface with an up link [ 3353.018128][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3353.061338][ T8380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000400)="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", 0x539, r1) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)={0x288, r5, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc103}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8fa0}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffe00}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "123c6ac7bce9c6484d495c0f4b752eb776d43a1512d157ab7f"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac78}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8569ba1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d0deba3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x40}, 0x800) 10:17:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x378, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3353.114558][T10492] usb 5-1: device descriptor read/64, error 18 10:17:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40360e00, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:12 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3353.218204][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3353.241533][T10492] usb usb5-port1: attempt power cycle [ 3353.289711][ T8510] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3353.465339][ T8504] bond549: (slave vlan445): Enslaving as an active interface with an up link [ 3353.476098][ T8510] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3353.494539][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000440)=""/184) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000280)) 10:17:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10200, 0x91) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xb, 0x8, 0x5, 0x8, 0x3}]}) 10:17:12 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x3f00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3353.582366][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3353.699989][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3353.739746][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3353.951287][T10492] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3354.041599][T10492] usb 5-1: Invalid ep0 maxpacket: 0 [ 3354.190804][T10492] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3354.281345][T10492] usb 5-1: Invalid ep0 maxpacket: 0 [ 3354.286793][T10492] usb usb5-port1: unable to enumerate USB device 10:17:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x4, 0x29}}}}, [@NL80211_ATTR_4ADDR={0x0, 0x53, 0x1}]}, 0x10}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 10:17:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x398, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x48000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:14 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:14 executing program 2: r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200080, 0x1, 0x9}, 0x18) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x6, 0x0, 0x5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x1000, {0x4, 0x80, 0x200, 0x9, 0x3f, 0x4}}) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3355.607971][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3355.801362][ T8617] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3355.906649][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3356.280830][ T8620] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:15 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x6201, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x3a6, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @random="c0e1e523e8eb"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x280002, 0x0) fcntl$setflags(r4, 0x2, 0x1) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000040)={0x0, 0x9, 0x9, 0x0, 0x1ff}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400373f17551a2bcbff9a8a93eeffffffffffffff000000e70f7150a1eadf", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000901010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x14, &(0x7f0000000000)={@local, @local, @void, {@generic={0x8863, "5b9c345c90ab"}}}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsa\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000400)={0x6, 0x1, 0xffffffffffffff28, 0x70000, 0x5, {}, {0x5, 0xc, 0x9, 0x3, 0x6, 0x5, "d41e4488"}, 0x6, 0x4, @fd=r4, 0x7}) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getnexthop={0x30, 0x6a, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NHA_ID={0x8}, @NHA_OIF={0x8}, @NHA_OIF={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x824}, 0x20004000) 10:17:15 executing program 2: r0 = socket$inet6(0x10, 0x4, 0x0) pread64(r0, &(0x7f0000000280)=""/70, 0x46, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)=@assoc_value={r1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r1, 0x24, "51d369b175bb65e1e09cc9f9f3756d74e1aef9e32349821c49d0346bf42e40b42af48f22"}, &(0x7f0000000300)=0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)=0xdee4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @sliced={0x3f, [0x0, 0x85fe, 0xfe, 0x1, 0x8, 0x9, 0x6, 0x1, 0x3, 0x9, 0x6, 0x3, 0x8, 0x4d3, 0xff, 0x3d19, 0x4, 0x100, 0x93, 0x1, 0x6, 0x5140, 0x5, 0x6, 0xffff, 0x5, 0x5, 0x4000, 0x9, 0x8000, 0x3, 0x30b, 0x109, 0x7823, 0x6, 0x9, 0x20, 0x1000, 0x5, 0xf000, 0xff, 0x4e73, 0x91, 0xa146, 0x3d2, 0xffef, 0x5, 0xb7], 0x20}}) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = signalfd(r5, &(0x7f0000000340)={[0x8]}, 0x8) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000380)={0xe1, "d0b4ac790046c0befcfb78c5b5f21986a00128bdc623de7df0b2e7b26467b09204de9c30bb13e71163cc5c534cba2d576fc25708bf7879fec10a4996d536480296acf7a5a42e5fcc1e1235db51b8b4d3682ece779f4bac721d34c5932c712bd8b27649d995af4798a0e7975fc1f5dea5ecb2d60b16ec42e033f868f2ebc3110fb48d6b52f4b95550c99193b5794b9d38146515a7265152a070b63375375d1d7d29ef6fbaa9630534efa0673c9eb6d6bc49784faddded2568d3883cde916ccb325ba6dbe9b967ea8cd4d3857083ee067e7e6f0d23df556397002a2a33ff5bdbbeef"}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r4, 0x0, r3, 0x0, 0x420000a77, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000200)={0x6, 0x3f, 0x0, 'queue1\x00', 0x10001}) [ 3356.618821][ T8723] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:15 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3356.701251][T10467] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3356.828573][ T8722] bond551: (slave vlan446): Enslaving as an active interface with an up link [ 3356.872851][ T8767] bond354: (slave vlan271): making interface the new active one [ 3356.886742][ T8767] bond354: (slave vlan271): Enslaving as an active interface with an up link [ 3356.890574][T10467] usb 5-1: device descriptor read/64, error 18 [ 3356.919203][ T8767] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3357.220747][T10467] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3357.410586][T10467] usb 5-1: device descriptor read/64, error 18 [ 3357.531576][T10467] usb usb5-port1: attempt power cycle [ 3358.240528][T10467] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3358.410870][T10467] usb 5-1: device descriptor read/8, error -61 [ 3358.680583][T10467] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3358.852327][T10467] usb 5-1: device descriptor read/8, error -61 [ 3358.970628][T10467] usb usb5-port1: unable to enumerate USB device 10:17:18 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=""/194, 0xc2}}, 0x10) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xb3) syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 10:17:18 executing program 0: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, [0x3, 0x1, 0xfff5, 0x6]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000340)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000fffffff400000000090062354de0fac902bf00120c00020008000b00016c2e4cd3e33d85166ec84028d689cc1f512fb7dde3f3290b53c553c3a5c539253fbbf7f3fa6ee0b6c827dd8112c0e371419f1cbedfad28bf5a7d1ab2a261af263c339994920fc3bfcbfa6a2bbbfe52bbd8a1860914c2763fe21ce73f5de077681acfe02237d391b17f871bb359a45c2262041f0baf752ad9bb682b30f337d5d582360b70ac17eafd1453777650868dbf3a8b0e9d406b3deeb34965863f91947178a861ab33d33b0c94201e5a15c70bd9298997e43a761f0353f98b1926454cde73"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) r5 = dup3(r1, r1, 0x80000) openat$cgroup_ro(r5, &(0x7f0000000380)='rdma.current\x00', 0x0, 0x0) 10:17:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:18 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='!)@}\x00', &(0x7f00000000c0)='-^@\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r4, &(0x7f0000001380)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000001c0)="cd61beb591b40f90bf5065fd73b225e10b0be222d219988bb9b26d01167745c49444d831ddcb820dcb82eb26726bf19a202a9e7ea01092f031eae887e410fab3cd49b2d2d3c81a6c270ae78bb1c235cd7ffb72e94ed39379435a6cc9f1826b02c80b8a406f065fb91f0f537aae6fa1e836313dec2bb948aaa43a245fd2241f7798b36465af5cf52e0b4d368aea50fda45b63df8eefd4615a3846f52b1f6177df80b1c6d76423ac038e8a73d12a71496d5a1996bbe4986248a592956c39945ebfd28b2d1fa4dd66be07e642e00915ab25f20be5a2d9549fc755526dc66ca5", 0xde}, {&(0x7f00000002c0)="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", 0x1000}], 0x2, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r2, r2, r2]}}], 0x60, 0x8040}], 0x1, 0x30044000) 10:17:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x3de, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3359.501946][ T8824] __nla_validate_parse: 8 callbacks suppressed [ 3359.501966][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3359.587619][ T8828] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3359.683144][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3359.855726][ T8871] bond355: (slave vlan272): making interface the new active one [ 3359.868220][ T8871] bond355: (slave vlan272): Enslaving as an active interface with an up link [ 3359.879098][ T9910] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3359.925458][ T8875] bond552: (slave vlan447): Enslaving as an active interface with an up link [ 3359.936002][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:19 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x34000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3359.981250][ T8835] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3360.002657][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x65580000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x80001, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000003c0)={0x74, 0x40, 0xa5, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x47, 0x3f, 0x81, 0x2, 0x0, 0x2, 0x40, 0x3, 0x0, 0xfb, 0x80, [], 0x7, 0x7ff}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet6(0x10, 0x0, 0x0) pread64(r6, &(0x7f0000000280)=""/70, 0x46, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=r5, @ANYRESOCT=r9], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3360.131550][ T9910] usb 5-1: Using ep0 maxpacket: 16 10:17:19 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x3f2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3360.182901][ T8930] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3360.261262][ T9910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3360.297137][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:17:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x2}}, 0x18) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) [ 3360.338763][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3360.361369][ T9910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3360.402675][ T9910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3360.507908][ T8930] bond356: (slave vlan273): making interface the new active one [ 3360.522861][ T8930] bond356: (slave vlan273): Enslaving as an active interface with an up link [ 3360.534393][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3360.579700][ T9910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3360.601745][ T9910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3360.621859][ T9910] usb 5-1: Manufacturer: syz [ 3360.644229][ T9910] usb 5-1: config 0 descriptor?? [ 3360.671622][ T8987] bond553: (slave vlan448): Enslaving as an active interface with an up link [ 3360.694328][ T9024] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3360.721494][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3360.767141][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:21 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:17:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xc) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') 10:17:21 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x30800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r5, 0x0, r4, 0x0, 0x420000a77, 0x0) r6 = dup3(r1, 0xffffffffffffffff, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01080000015e00001c0012000c000100627269006765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3362.574259][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3362.746230][ T9047] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3363.084693][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:22 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3363.272473][ T9061] bond357: (slave vlan274): making interface the new active one [ 3363.326604][ T9061] bond357: (slave vlan274): Enslaving as an active interface with an up link [ 3363.355250][ T9910] rc_core: IR keymap rc-hauppauge not found [ 3363.364519][ T9910] Registered IR keymap rc-empty 10:17:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3363.400323][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3363.427930][ T9080] bond554: (slave vlan449): Enslaving as an active interface with an up link [ 3363.450354][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3363.453058][ T9047] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3363.483801][ T9910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 10:17:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x6c000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:22 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3363.561520][ T9910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1329 10:17:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYRESHEX=r7], 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x24044090) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 3363.659443][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.666416][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3363.679591][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.699487][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.719592][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.726187][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3363.739499][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.759468][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.780125][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.824259][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.886910][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.934626][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3363.987833][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.047400][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.109847][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.177896][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.233270][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.284787][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.285835][ T9167] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3364.341567][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.418658][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.499989][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.555364][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.565403][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.572319][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.589391][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.597576][ T9175] bond555: (slave vlan450): Enslaving as an active interface with an up link [ 3364.609619][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.616094][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.629405][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.638222][ T9163] __nla_validate_parse: 3 callbacks suppressed [ 3364.638240][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3364.649389][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.669420][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.675535][ T9167] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3364.675938][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.691392][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.709402][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.729460][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.749369][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.755959][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.769424][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.789433][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.809439][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.815960][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.829362][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.850122][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.871348][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.877622][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.891559][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.909390][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.929481][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.937201][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3364.949423][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.969446][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.989412][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3364.996940][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3365.009664][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3365.029501][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3365.037701][ T9910] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3365.049385][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3365.062044][ T9910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3365.070683][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3365.089414][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3365.097462][ T9910] usb 5-1: USB disconnect, device number 38 [ 3365.109378][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3365.499774][ T9910] usb 5-1: new high-speed USB device number 39 using dummy_hcd 10:17:24 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000055300710402038b1420104001ce14406236f2a46996c00010902380001000000442443fdd120164c5900090582ef1000bc94ba53ee2505d74e256bed5c3da6355bb33b33ba2db40cd0d8b5aef11331c03a63c322bb527e9738d5f31015fc1f9cc7d44e79ffb74e88613d794cbc64d1e731157a5c981b0586337a7d1915fee798"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:17:24 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xb02, 0x20}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r0, @in6={{0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff}}}, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000001c0)=r0, 0x4) 10:17:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x73d0a2a0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:24 executing program 0: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)={0x0, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xa4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbcf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x921}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f6d7cf21e194bf2aa40ae1f0dce27d20ab6aadcb6ecb191cd2b5b57da6b8bfb6c6"}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcf1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x41}, 0x40004) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3365.671578][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3365.844611][ T9275] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3366.035224][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3366.493810][ T9269] bond556: (slave vlan451): Enslaving as an active interface with an up link 10:17:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1) mq_open(&(0x7f0000000000)=':6\x04', 0x40, 0x0, &(0x7f00000000c0)={0x6, 0x7fff, 0x3f, 0x8}) 10:17:25 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3366.553033][ T9300] bond359: (slave vlan275): making interface the new active one [ 3366.603477][ T9300] bond359: (slave vlan275): Enslaving as an active interface with an up link [ 3366.624185][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3366.651522][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3366.672490][ T9371] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffff26, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000100)="1f728fe2db70e063d6f8b37260be4e000c5a4be031fed4182dc2e656401712591fe767314864dd974aef9aa1fa8c0489f0ce6ddb98d0b39b5ac164055b681e64e7d0e5", 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x74000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:25 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3366.800045][ T9910] usb 5-1: Using ep0 maxpacket: 16 [ 3366.840308][ T9910] usb 5-1: too many configurations: 225, using maximum allowed: 8 [ 3366.903277][ T9392] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3366.960064][ T9910] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3366.962153][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3366.968467][ T9910] usb 5-1: can't read configurations, error -61 [ 3367.097923][ T9392] bond360: (slave vlan276): making interface the new active one [ 3367.121656][ T9392] bond360: (slave vlan276): Enslaving as an active interface with an up link [ 3367.144123][ T9910] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3367.168200][ T9468] bond557: (slave vlan452): Enslaving as an active interface with an up link [ 3367.185866][ T9475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3367.201661][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3367.400029][ T9910] usb 5-1: Using ep0 maxpacket: 16 [ 3367.440023][ T9910] usb 5-1: too many configurations: 225, using maximum allowed: 8 [ 3367.560347][ T9910] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3367.567972][ T9910] usb 5-1: can't read configurations, error -61 [ 3367.577208][ T9910] usb usb5-port1: attempt power cycle [ 3368.289615][ T9910] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3368.380281][ T9910] usb 5-1: Using ep0 maxpacket: 16 [ 3368.420378][ T9910] usb 5-1: too many configurations: 225, using maximum allowed: 8 [ 3368.539658][ T9910] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3368.547266][ T9910] usb 5-1: can't read configurations, error -61 10:17:27 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) r3 = socket$inet6(0x10, 0x0, 0x0) getcwd(&(0x7f00000000c0)=""/26, 0x1a) pread64(r3, &(0x7f0000000280)=""/70, 0x46, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x0, r3, 0x26}) 10:17:27 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0xb, 0x2, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x7a000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x58913133aefb2cd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x14000, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3368.710191][ T9910] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3368.755609][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:27 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x401, 0x8, 0xffffffff, 0x8}, 0x14) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3368.854984][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3368.912335][ T9488] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3368.950606][ T9910] usb 5-1: device not accepting address 42, error -71 10:17:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 3368.970896][ T9910] usb usb5-port1: unable to enumerate USB device [ 3369.122232][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3369.264961][ T9503] bond558: (slave vlan453): Enslaving as an active interface with an up link 10:17:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000100)={0x7, 0x401, 0x3f, 0x6c8, 0x16, "c73704e7ce1a737c"}) [ 3369.391343][ T9504] bond361: (slave vlan277): making interface the new active one [ 3369.406426][ T9504] bond361: (slave vlan277): Enslaving as an active interface with an up link 10:17:28 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400200, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x101, 0xbcd8, [], &(0x7f0000000080)=0x20}) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0xff, 0xee39, 0x3f, 0x8}) [ 3369.492867][ T9499] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', r4, 0x80, 0x1, 0xeb7, 0x101, {{0x28, 0x4, 0x3, 0x2f, 0xa0, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x32, 0xfffffffffffffffe, [{0x5, 0xe, "656e8d71914075d867360bd9"}, {0x7, 0x12, "f3898cf7a6eeed6d1ffdce5c7363d83b"}, {0x5, 0xc, "154d1fe2bbaa0a53bdac"}]}, @timestamp_addr={0x44, 0x24, 0x43, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2a}}, {@rand_addr=0x64010100, 0x1}, {@multicast2, 0x6}, {@remote, 0x7}]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x3, "11"}, {0x0, 0xb, "7f666acd711c6cd270"}, {0x1, 0xd, "f187439618d9bfcf1df90b"}, {0x2, 0xd, "4d678970cd2f471f756850"}, {0x0, 0x7, "fb0d2f9e27"}]}, @end]}}}}}) r7 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8002, 0x28, 0x14}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x8, 0x7, 0x6, 0x3, 0x804, r5, 0x7fffffff, [], r6, r7, 0x1, 0x2, 0x2}, 0x40) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3369.599841][ T9910] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3369.710852][ T9599] __nla_validate_parse: 3 callbacks suppressed [ 3369.710873][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3369.969855][ T9910] usb 5-1: Using ep0 maxpacket: 16 [ 3370.090134][ T9910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3370.100753][ T9910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3370.114017][ T9910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3370.125588][ T9910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3370.220049][ T9910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3370.235091][ T9910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3370.245364][ T9910] usb 5-1: Manufacturer: syz [ 3370.264286][ T9910] usb 5-1: config 0 descriptor?? [ 3370.599652][ T9910] rc_core: IR keymap rc-hauppauge not found [ 3370.605796][ T9910] Registered IR keymap rc-empty [ 3370.629519][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3370.679399][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3370.709922][ T9910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3370.726615][ T9910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1330 [ 3370.778908][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.785613][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3370.799003][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.818945][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.838921][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.845164][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3370.859507][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.878898][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.898954][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.905305][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3370.918935][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.938919][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.958983][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.965398][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3370.979980][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3370.998943][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.018918][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.026197][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3371.038939][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.058902][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.078930][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.085252][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3371.098938][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.118976][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.138985][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.146661][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3371.158883][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.178946][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.198968][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.207121][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3371.218897][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.238954][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.258922][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.266474][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3371.278966][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.298939][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.318962][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.326259][ T9910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3371.338876][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.358969][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.366221][ T9910] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3371.378180][ T9910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3371.386694][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.397121][ T9910] usb 5-1: USB disconnect, device number 43 [ 3371.403301][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3371.769386][ T9910] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3372.009405][ T9910] usb 5-1: Using ep0 maxpacket: 16 10:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x81000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:31 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x400000000000006, 0xee39, 0x80000001, 0x8}) 10:17:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000024000b0e000000000000000000000000f8b55cc554029248f4da8cb33e44306cfe7ceface23854dae6cc4abf26c112ba76f8b97b981779fe195c8ea57b31d7008f1c1c3dca6f5f485e2355000055640aec3e16420fb2dd86a9f9048c43a682de83056da2786700c2a8c95206fc24bfe82482398232595072bb9c76acfafaf8b2175341a0911bde9b2219092406989959aeacf337a6e57c091fdab07f36038c16c88d87fa59d46b4f27b40a7bdc8eace59cba418c0f63ab5f00abd6bdbca931bda3616f685b4ef6e87ee8481ca8", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:31 executing program 4: r0 = socket$inet6(0x10, 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/70, 0x46, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000380)={r1, r0, 0x5, 0xd1, &(0x7f0000000080)="7d7fff4d928d1f7623daf8cf36f39b8a53c70d29b836852ab84f090ea24e7685693f0384c52562e51713a9efeec163e9a8f3753991b57d6732e209f906ca08b501f730937b655037722c9e7cae5f9a66dcf479e8654352d0a44d53ae2230c1afc2a22645fa73ad0c5d599ca84404e072e28adc078e93b8e9b2555e9f5ba970357b04d17a7a0effb7baeab8941a8cff3da66c11651ff9962e989cfcaaee9bb947c60d434b1caaead453523d3d1d965fc6bd464391f7b7a683a2a07ed48d8e7e2a8c1594228c60ff5388e24dafcddfd2a5a6", 0x80, 0x3, 0x9, 0x7, 0x0, 0x3, 0x1, 'syz1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000014beaa8c4a4d907ef11dbeb4b71400000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) syz_usb_connect(0x4, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 3372.119474][ T9910] usb 5-1: device descriptor read/all, error -71 [ 3372.141800][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='\xaf\xe0M', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xcd, 0x3f, 0x8}) [ 3372.251679][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3372.274969][ T9639] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3d}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x14044080) [ 3372.465589][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8400, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='ip6erspan0\x00') [ 3372.527798][ T9685] bond362: (slave vlan278): making interface the new active one 10:17:31 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3372.573658][ T9685] bond362: (slave vlan278): Enslaving as an active interface with an up link [ 3372.588102][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3372.623300][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3372.642211][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3372.785856][ T9681] bond559: (slave vlan454): Enslaving as an active interface with an up link [ 3372.822435][ T9639] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x884a8e89, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:32 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x8, 0xee39, 0x3f, 0x8}) 10:17:32 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3373.567004][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3373.696601][ T9754] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3373.786306][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3374.076116][ T9785] bond560: (slave vlan455): Enslaving as an active interface with an up link 10:17:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, r1, 0xc4, 0x2}, 0x0, 0x9}) lchown(&(0x7f0000000240)='./file0\x00', 0x0, r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x26) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = geteuid() getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee01]) fchown(r6, r7, r8) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(r5, &(0x7f0000002080)={0x65, 0x7d, 0x1, {{0x0, 0x4a, 0x0, 0x80000000, {0x20, 0x2, 0x2}, 0x64000000, 0x245, 0x2356dcb8, 0x7, 0x6, 'bond0\x00', 0x2, '-#', 0x9, '$+(%![+}:', 0x6, 'bond0\x00'}, 0x6, 'bond0\x00', r7, 0xffffffffffffffff, r9}}, 0x65) r10 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005fc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000100)="1aa0e27292edc8bc32c5f80c78f5c2df5d98c6e8e8f19f25375e1c750b2f2a83bc9cf2046a3d2e0cc2684b0f6258534bb10c850d47fc280754a44278a1df6248948789a7317830565cf90422eb2a0a4a07aff14773fbd330a1b4ce97f509318837500c7b9a89097ce29a558712fcd6a3fade03498cd113cef5f282805b493593270b48ecdc3e671b42fdedbf6affcc03b2613667790a8e4e7f741ea9aefd9b1dac4937cd942d9297a6b8b5805f80462d1ccf31326b8bbea047e21a697a302532715365a9c87f483a48bc9f073732c1f4775bb919ff803937c37fd41bffb4a3db86510d99cb9708ecf98d56a40d1215e067580ba87beaa1cbab5d8bf19137b59762b43ae5869f01560d8cb629f7934096ddba20a11057b232be30253e4a51dea2ef58db49fe8bc0e910c64994d3f3637ebcaba8de334211e7f451d37a2a497427002398a7c41b7cea8586b583158aa567be1e0e938d836a5fc469650b0bf8f6b40b16632dec8b2d67a18b6050264053e967a2013b24eaa8fd3e884e66641c7c6db2c57cc430c664e8a8f6feeb67fc8aad20ef6f49c6924cc215ed9dd3259455cf5239d8a593b275b96c488a584e85f6ce1d9c3a6db81878de28929f2f0f15bb69330147eb5c51f4cb92a5f91b279c7dc3e9ec028433a9d422f764a30f3f1807fc7882be8b46032f626cd892a2807470a6d34af0aa0ce1e7b7de0d6f3d390db9e100d52b6144510df1b9162795a1c995f8a37f135d1d35d177dacaf095b37c3a3a9cfc0163b0ff7d44e58df1082a66fbb218f4c2c455e2ba59288412c6c7b82ad04d26a95575c2665de0152ee181154f06b29c536c18e3ea87f4eb046436e26ac007a091a08056409c24bd75de00cdd8544cd1fe4c1f8cb165c6bd016c7f50c30f8659a76b7852f76b668a97b0beb8672e7a37d2c3c058cdb98dea6e9fcbc9451f34a997a0c2f6e9a9bc190f88fe2fdf5c7f43804ba067e2166e3be07f62800d2d1f2918d5f7c2945b787e19b22be5b9b648364ad3bc6f20eabe152554655d2fa5cf32d9dfc29bc41620e5240d0f0c1bb95eafe93895d452aed68b8141a01c921cf00b1784d89f798d6f948ecfbd803bd6b1320897ed03f155d3d47fa1c5c7fc064b0928dbdd6670193379d227c87470b295561600e4e93740c3baa9f1bdce418103268e8d5c5dcfb4e77f291fd9dd98912959cf2540178d12bb6c07c01836adb1baed82d90c1939f713ab14fbf87679477b2841a2f73388fecd4afcbf2fde70c7ac271bfdd7df76c12b1051d460e3cf7fba2e37daae8a39ebbd3905c2fa33df685112de97df3d42533f436d832a7130033e433d24232c56ae1222241b81f5e4ea73e3716dd7cecf83a2cf8b07c0b66974d020653cc09fbfd2e3c7e57ecea8536b7bc5fb7a992158c8e0bd018d51ef0b4f953e7b9f710f5dd903bdb949a264dc6df237557dea0b8ebff761e3cfc696ebafb92b79d09c507ea2200fc39de479ea6ed7f81d64e9e2cf84facdefa73d438ae6f34e8e5b84b189677ed688123fcf71e93554e15c04134ca318565d29662d7515ccf4d09a6e4415aec257bc632d92be996754bb14764d084728e201a88aad2e5030ce4ba00fdd9113c20340c87833b116447c8bf2a275776e8bbf5226252b9189bb6fec70e091399e463dd7198c8ab31ca66484ad9d14e71a01ec1b86d74a3a9205a47ef77ac9c4373e44a8a466943138a4d0e3be7a63c97a6b870024e9594930bc722f90f988339641a33c0b5783c5efce778cde8eb80b265c7b78a43736d6cda34e88bbd367dae5b34e5ccc56970e40f92cdf3e965bb91af31346b77981c15cb17382f6e5cd22fcfad7e1464fd3c40ad9d100709330acf6203ac1ef839e2f32a522cbdad409cc8d99202254046de95918cd2d50f649c7aa4da3e3971f5b88cf981f8c773156c1222e9997fe45f84a6521e478a83ae8d2844250277ae368696fcb6feca81767a3dc1ba883c66f86b47a5a59aa28067ff7c48d942b093ce9e6476c5a7d6fdbd9b53b2835b10ff567ad95af4afc48ceaf46211d6f5db0f6251cdc767689c4c42a27a38608ac34bc84fbf47f877e8b11b4c1d8e35340a01bdfdcac60e672dbf1036296c5674630035a21f658d76f0770704a5fa693779cee26037f1e06523a68c8a4c85f623d72d7169e27df82e568f815ba1a2821d2873d879a4d833751026aec09cb3c182fc8ad5e6c354023e15ac4b451c4cb85dea1fcb948942a3e0ec11053038fbe05b89097d609abf7a19d65fb2cd1ad4a9aad73440fbd7e97936c9f5f5422cb6706ed86fcfcc97b06ed9c7782bf16b88412685d9531a803909ab515f9b88af29406ee0bf4ced74067e9d4d58ae6ec9ea90b4fc109fa6ca8c8e8b42fda90e6769b16a76bd8aed31b9b4db78183277dcd91855e173d6a7c798980e46b8ce35d0879dad28a43b4be8431318a0012cd724f8587b137e2ebd52cc2ca278d69a2c783dc241bb8d4ccf52028ecd815506971ee56178e6c5b94e4dd6545484f99aa0e909d7eac0327a243aae4a3b3ef4f50e2a5b47be815bc11a9a4cb5e795f32bd4df95fd0c5391c6ec03f1d66f5cc66346774533d3d1921f68e28a76fb3dbe3f84a936707903625c2a9160bb61c9c791b79600a36aaf0c66ea3adf9805c70cdd61285fba766040a534fb6ab76d103fa186e16dfaebe6607be587bef89e38144a4bc10906559b830593b81d5910b4845a6afaa2c56f571aa23007d6333c3a8df567485becb60532ef2538575f638ab78a13a34197faec6c6617e6b3a28c5e9d8454aac662884a40f87cf9d5e01291f535e68a058a054b6f3ac238af31dd9a267b6aa8ef7094e21be96652f856cf32e0c60665518082d57a2ba13627ba55cb4ef05a59a23072783d3082a9327618d16fedfcc2c00fa2ea229447eb9206e68781a76f368ad61afa49ab806282c4ae98a14f396304c9f71e018f81b21259042e7cfc9cb2cdc9a6e417343ede7001677244b2e58f126dfa47f5d2942c71c5ef185651de3d8c248a881066596822fdee9558688f13ba6ce2ea48ca5a0d2eefd793cef04e4ab2e0e766bc474f3989ed0e4a836966988956f07567179ed65c0e3521b9b49356db0e5e68d48b4cff81e0099bfd5b103be206c3fa463eb71eb19e29598009a6da13a0605aac28fdc8459d69f47a9eefdcfbecf8619d5b78b6038141622d7dd51fca647ac4885cbed8b73c8f363885454549947ca581b2b3f2e183a9bcdbef3d7026bbf73060675d5aeaf3327dfdc6cd2371f811e64ee5082b3130ccd1af95ce74507d3857257e7c8b0eaaa6e7a468dc579f05f98918f6fe4c8f353d7522ddb767354675845ac0e19440dfda5925041b721436a06c9d55720532c486610ce5abef570d3e3cc21a0d3266ad04e40d647c29753aa5e6593af0962e0a93e1b12d381500c6b074a134ce5be39e3c9e071567838e96b279862539d9a0851acc8a18129d08f26a52c181a8ff91cdd80cc3714aa40a45ad5adfcec61c8797b706696e736ff6687714af8b2a21d62eae590b16fb04c50f96c0d681b0acc0e3d58e4ec65ff8e351887b772103960f2435c5cc887887d539bb9566c864850bf3671d3bafdda131ff99af94b6fb0b42450e6146ff827f0811985396784e10fd6751c002426183960a4262decbeeee1b43c2b207861fc3fe55b89791f7b71bbcec44cd531f01bbd823e805728f59f6a35e782e3b393318f7b82bffaffc07095ea69b19498f6dbda286aeedad200eb48b4ba5e65ef9a86bef09e760c10a05af394d24969b7c9b070f9034ff81d9ad836acca34520ea904ceef7d4b20432e6d0a4e7bcb99a93c8255d257ac9bdb4f3b9db17f76f7f6f97250af34a602565ae1ac570d62e5e91aed6c894ddcdc12926e91a762d0f6ef8822dcce942bfdef9885901adc27d494961bdf5ac66431815bb3a89cf3e68e7a55ed95fd3c6ef8305f76f943455ff8a6fef539633929010a3b7e675059f64684bebcfa805f9efde5bc5bc997bae9e6aedc9a62f686c448c944093be676bcc5ef22f6d708e6bdfce5771e26f5cb5f03fec95ea28692a40e440c06e584c227d52a8544b4044d969b826724b7a5d1b441d78a969c4fee88c570d56e20c812498e016a2dfb5c46cfdc2a55b3ff5482d458c2d6e08d917511cdf3d850459e024d8ff67d43a0cf9294df680262cc8a831d612e851c593548c3f82f5c727b08f40e1cda615dc5bfd92182f2fca267e518904451b4efe2239300c8a329804c7da64e392cacb24117e7b2708c1cf44f3ae67de3ca70d82e47d6df3f4ad457bf74e4bd992b0dce044a825ec6851ef6bcfa48bb870fa4267dbca3698613bf5993d6c311960c503f999338e725ed6c04f8e3c1bf8c2ebabd2282f1a996b087d9bdb47c4a9b555f29ea5b63932c63d31017783f5aa92aeeb12bef909d2f0d1fd7116a5228288a8647b23e3fe811958d5dc61cf595e2d2049964ae9f46e10a331c48088ce52339ff7b17b6d528ef4952e54595e4126db519a48d9f8274bb9a1936683c80a34dbabe16c5e91bee304865941f09ead87e80123ac5de4fe9bdd4086d98b30c67d1f55f1497dbf542c2b89ff15de4ba88a612b63b8630aeb3f382de445722437d7fdfd873df81999f1068fe1d151fc60f0502dc1cab4466e0cf0a6452a11a6f388b8dcf3ec8ac93f6226db8dfa53b407d67d5ad62a05cf71d3a16c0bba73c7040b18182f4d6b162a6bfe1f46cb1a039a9fab1fabcc8e67015f9b75cfdab5ab4b8af1450978cb7aeee992f3618f49adc51de31703f83b1c0951488177cad0b5fced5ff1884ae685d89cd8f84181b56ca4ace277fbfaaec6741f34d13f5ae1f123c19a08ffe19c34c9d2b9e65fcb302f2729400d461719d7a1df234528dcbbb52aa0290abf0ad735c7f5a33b9402c339b83a11718619d588e2a333c4f4b18e131c00204c5c73f1275eb6c25f9c01269674d3e5c8bfc638663bbb39727c0ba6f2d4889113fb197cc008ade4835dd99d9f69c3f56bf660554936793e8b943bb176d560682457dec3ed94648d26d30dc2437d06711a92874106f8c267fe033e899495c58c8337322797d7a1036b928a1c0ccb5926670651769b22a4ae96141e957ef72d6a6633bd4af99e0a116acac3891d798831fed7fde6297ed396e86f58dd857757cebff758a0610871a337fd377f6c6e6de7925954052d1e49c8de817efde6760571f661953e3d38c2f60510bd86fdf9f6ad45eb1810a6de34eb37723b12f4d8dc8f429bfbdd530a780c5446a060b15fcd4f141d6e03d108c8c790acaaa7e5cc40e285ecb9fdd40a0bfc09a16670d761393069e2a75df5956f69f4141c99f4f8b873dd7a2b238af5204057c6c559e819bfda3b5cc501a41bb24f77f9d19197c4456fe6c85502143c3aff87dd84ca6f0ebd718bd0b5c3c27961b513f05e3e98c09c6c72541036a533244c5713d17a222f06e0e03b9a4d02d71fdee7b104ae53d4c946bd94fe7b108c39348067761b067f475b3c30f803b9069ea06684dc6a8ca6325525eb62b7259b95af14d2b31cd56bf4b294d9fd181234a9edbef270fe7367767606dfc47a2f891c591fa99b72988611151dc2e00c3f8cd448b5efd668c288eb3bb6bea692ff9061284cb6bbe8d812bbe3933ad717e6a45309742f17565d9eafbed75f03e3ec6de1c1092252075c82aeb8ee809b7061e34edd3b54835794a90b42205b7edc27d84f45c9bf444bb11e38c5b9f48402d56a18757934827a848842ca8946340ad999beede38abd1b59d1e5b6f5f0adddf4b7600ff4495b9", 0x1000}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="4f934c51913287840746c3112df2e4d87d23bcb52ef1550b0d0f0e640dde918555daa451d8c8735950d70e8b52197b47efba30b6009fd9f2dde1fe167db8145d1da4183e0e45518cddb3f4828e963db8e3b99b0cb72f52df5b2852cb39ca40402dda4693f94f883d55519fd81725f366072573791defc5bcbc73a718468d8ad36858a9c83fcaafd3ce71ab8de818f4fa6ca5d48d588d3b238f82569edfa3f25e2d1b881bc4d3703b197a", 0xaa}, {&(0x7f00000021c0)="e95cf14a7d4d96d74da149c5ec1492ecaabdd7bf69e1d905b5da23a28bfe3784", 0x20}, {&(0x7f0000002200)="d6d0e76da0f129deffbde78963635fa7e6cf3d11d7b9d611f62657368268841852ebec784f98f664f71408843231ad8e10adc47913fdb892781963ba036312ed093457d25cdd246f7a0199eb7d1e5aa9dcaddcf982f293e7c42bc7f2e46e9e41cbd3d709ef509e9f4ecf576a3088561ecce60b36e75805d6d4655ef73be3a227e3719ee5bbdcde7b2e0fc0af3d2bd248e607cab27e269392dab346e68cbdef1cdfb1bde442dc45f50c1ae7", 0xab}, {&(0x7f00000022c0)="c167476f3ee5dd483aa3e44e97fe57d96b02430e84626921e50ea45d71b42d325e5274232444d3f080ba1a43bdb6247a16a2f001ad437d842ac1f8a3a5c8193c", 0x40}, {&(0x7f0000002300)="69d8a7e9cc6dbfd9a117e6c44ebd50b232b31687756b222bb1442c801f5280beca8b08e75a81dc777bda350c50ec94fc81be40a71e1fc18e1051354a59da90a39cc04c943c5da333b3a91adcb30d22c21100be1431b2ea1693d715e7baaeb059128500c648325a6fd14011f4ae43eda959aa40f188fe73b3de19c7ecc1f8df3e1ce735471b8cf1be84702ac0036962d45418dbd0bb2de785999cdb8acc8ef2bb2fc22f174361e6c2f220eea221044f6ba2bdf8a4d3", 0xb5}, {&(0x7f00000023c0)="e91853c51d4345f6830396adb53595cd1ba539bc0988b02277253e85b63b1784e26514b76b3688a75b4c92a7bbaec3c199df004a6bea410c102fdb7325cfdbe26c0ff78165ba447c3795a79305c28012977bbdee0ca36ec328e2f597ae89293280ba5e734f2225a85bfaf3e036483a94d63f2c45751abf269257e496227e115ecd19bad8feaf19af859d83131759393cb751721fa74b250ef133979a3685238f4746", 0xa2}, {&(0x7f0000002480)="8bcd8ca3ea0574ee55557615ca5c30cd668480407f26f2ef263217575aa474545529bce76a81fac79af4990a149c3071da4bcb2b9536cd3d7f8405c708a35c6d92791098ce2cd9884da501e8539f3e9dba972612011f0d3cb2dbe75cde9d0dfdcae1fd479c3fea37bbf6cc6adbfcc1645f0e19cd8cf2e74b5583642585d5c2132755962dae0d968a8d0f7de3daa0f85a9319fa4540076f8636dd", 0x9a}], 0x9, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x60, 0x41}, {&(0x7f00000026c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002740)="d0bf5e6f1789b8d95450361d9552e12c152c18b02601aec8414b8db4738bbc235c15a51e1feae78bbf04b0ac9824c73d72790a6d427bbfc1d7f34c1e00e5d3c0003f5062c00b46804a547d22c5eb5bea9117b0ed8b1bd04e0cfc3b6a5f088def230f7fd10df16c8af83eba8d557b8c405ae4fe4dba1be5320dfc068b555097edab61b1ce0a6c8f3843d20feaec26715ffff7b62684a58a6c136fc5d8d13721a9e0d187a276e1f52f23cde83f70964e00d9bd88486df23d3730bae7815cb2c3ce79a2df19a4ec9de182695f7407ff1ae87695e294d7636f9479408940d3242b188470d8c924285a", 0xe7}, {&(0x7f0000002840)="851c75d7fbaa7d3e6c81170bcfcd26f4a6da75101c039e50374e8e9be0ab986f0b1b3c3bcd012fe5881357e8efebe53bdc639ba4c9183079a9bf90f5e13220ac7a39e4a685a598cbe6bab5278b119f82a45e8f5243ac22b2ebd4cfe15e813587bfd3c87a89d87503e3d9bf542ba94e3de3d493c5ebabeae71434c7aafe", 0x7d}, {&(0x7f00000028c0)="ae602c719a3cd14e384cf5c1246ff3f73bb8c5870089239fb8e4b2b5bc4a082dd57c351e215831fbd314119c6e04178ef322d63f828de81592df4c42acd4e5819902710177786716f39e74644a2793ed1760a6f67f65978498dca8d1a2411d6c1173a05f310069bd8da58ab4c6f9e5831da1d0476feaee5f860c2144cd7e011ea87f54120b56e995e34e4a911d95c3e41b75ea92763fe6298a6307ef8d34", 0x9e}, {&(0x7f0000002980)="2d1f3d566678ffa011bf85c2b100071aa398a9e97cc116e6c56e5af92c5f8f51cd63006a2cdf1eefb3417af8074ab5e6fde20ea57638305d51a6d3ffd1d0934b4ac3d1fecabec62f336e3ed9d7c6bda6fa87e8625997d372fa62782e80f9855a", 0x60}, {&(0x7f0000002a00)="f200d702983a3576733f34f65221ebe995f652766c5737dc4ce473a3a3d4dc8dc573032e0dfb607177933d544cd56208df2298815e931f571db95994b0b90e322a14a498021dfa1c91b8d020ecf90afef09a87e6e80090e1ee42664e7a6ddb3336da4a95d153f78d03b03d23f867c3374ddd611a", 0x74}, {&(0x7f0000002a80)="19ed09ccf56e09c841a66ee1a5860bb2ac", 0x11}, {&(0x7f0000002ac0)="c7f67ab775bbec277137592f40c04162ab238b0c38924ffd6f72f7564526beee350fbcdfe30bcf09571944fe5c67451a607b21a2b3916012a3aabe29ddee726ce9d025f18e18ef9cb7e713db9c44fa84cfd15cd4deb923b5a4b1755c76a126c6766dc05ae0d49d1af615bece4ee97247d1d8e23555e9923f20e6c9e2516313bcd5e8f61df08d237980c2283016a893ecae2f37c8718e2dc13830227fc2eeec66170233272039e825ee02dcdcbef3ac1bfc281550ebe054257b5b1ee84b016bf63c68447ef9dd14fbb9cccac8f804fa577e80196aa43bc1e8c033ddc2b550e13aa20640f5dcbd5a7a037a8308b4", 0xed}], 0x7, &(0x7f0000002ec0)=[@rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x58, 0xc000}, {&(0x7f0000002f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002fc0)="efdf1750b6507fd4666bc87509ea1ca08cacbccea2aae8e7fdb866e9c0a5e944a8cda9c36722676ce868ee458f1a300fbde6ce23423641ca8d10807f2546a56278b3d849b8888f209af3e90d73bcd93672653b94b3012b51f581991b0fbf375efe8aa79924c4e2836f0a8050a4b6000631abd61b4af58317241d7fe34e52e3", 0x7f}], 0x1, &(0x7f00000032c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x4000}, {&(0x7f0000003380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003400)="25a1f6866bac240862fa782f768732e85b946786958fa7a2e9a4b53556", 0x1d}, {&(0x7f0000003440)="f477a0d8827825c3de7840cd6134af969c48f8f7465ba83468b87cfc5109b3fb97b9d5f985ca3508d60dbe5fa6e5662d9c12d9b50f9e64587d41af50b8611371837077bc8570262d483b8a3967a34e07ea2755b168ca39326486735109d9f460086bad87a4bfbd100beedb20118c599a090a052ec802105f1e7d3ea7d35c70050821cbe1259b8cdea03cb708700fec7ee223ce369b4f6b85f3336b31c9730e098dda7640c0a7dca653", 0xa9}, {&(0x7f0000003500)="86496e21f26c22087268a626e82e7c71a140372ef8f2d9095d05864f5d022e4b99f6587ef53b186a3c99b00528f4c65f2db84b86e0e75ac1a44faa1559950d41aa5d1f4c282b98ea214343ec3403bd4e3f117e8224c26579cfdee370700cda10d0086d9d8bb815902b502b21edb5e84e3e8817ff056856896bdcaa43e797dafeb7fb211034e8dbdf2dbe510939397f22ee8ebbb1b21ada5c52e1aa323b2de749f5", 0xa1}, {&(0x7f00000035c0)="2f43b74b974a6f56d27a4e90c6b577adf69e370fa3d1cb40d91cb46aaec54e", 0x1f}, {&(0x7f0000003600)="376cf55a082182bca25318d612f9fcb88354518e331312a13fbf1f73310188c7e3166801430e91d64a3224b89b3a6ea582508eb988a0c8814c9895006b7393d879f1ea232cfb6baac54863165ce6539b7bb4821bf7576b3d6cf88597ca49fa33f9", 0x61}, {&(0x7f0000003680)="ad4fec56338aa39fd69ec2895dbd3ac6a05722047ed2b11c8dc7233e85668527f173e19c597c70d17068671fe3c35f90e77690bb1619bca6cae22be0f8ae2ea4ba95f90bb9d1be0457bccc950036a8e02743fcb0f554d8a34d71065aefe0161f25372167ceced5fd1946b12b6f468c51c6b304b268f5aa217717451aa070ecf98394d6f0633d15ef246696cf1c39c4bc0d4ecf1348afc4764c14f6ef957d6b4b0534f85618057461c1e674cd5bbc372a63de2f411c48397f03ae0bd66e93f2b6e7b055c2f1f82033e5b472008369878e2f8b4a1b0fb1d572bf8561c456", 0xdd}, {&(0x7f0000003780)="ebed273bd256728a6074df415f1eb1a73338e946cbd6d4bcb165f059ca43b7937b16d5aae54055f59cd26ac6151fd8dcbb4d8ba35ea39a8f1eb8c290c0f80ca64b948b8d364745bf261aa19a7e450e62cd441ae53ddfc6def262d48927562c06b6d0a50c2cb759f3d4c3d505e956b4b5f41798275753c817834df7e5ff3dd058e55037c210220c24292d58611c932fc0347fcc2ea9782bf54a42724915918acf3efbb7c100a80628a39bd9ab946f4ed069f4a0b1013346828db01eab60478aefdefb03b7618638", 0xc7}], 0x7, &(0x7f0000003900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}], 0x38, 0x1}, {&(0x7f0000003940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005e40)=[{&(0x7f00000039c0)="44d2e2da215188f870d1d36f02f19484bc98695a957395bfc395782764da46a59eecfb36d379927e5d9abee87ae8739303896e1854214dfd84a63126179ea3", 0x3f}, {&(0x7f0000003a00)="3038edb3b5a33d975803917bb995694ca2860057deb66fb134a3f657426adb5dfa4f18f1feeca99c88cd14c4d146b2f59a2e46d533f7f663e8b3ac094df040c4c38f7e7621bdd0d2aa01522ab68e60f7a8aef8df5d6ce8091bf0e20014ba30bd13e1428dd8d792db14e2ca9c87248fe73674a1a3a12b9a84c1d40159564cc72a6b4a9a280ed5d5e9f6c25a81bd63f790f110767e9949a55b5eab9338c45143fd9ee96eabd3c5b941e6", 0xa9}, {&(0x7f0000003ac0)="1dc87aa3be3f62d509cf365d449e4634471d021caab3ab2f7b33bb08da345534960cc44831a883ca06cdbf73a3e96bf741a41fdfa0a300f7f9fe19c53867c1bbdf724e99061a58b2f4f85752c994f27719fdbe1f8517a2ee85bdb20a6d6df6a220b3e587c5621c2d007decbc485314cc52fca325", 0x74}, {&(0x7f0000003b40)="408c3df2d48c8a64ef9f50b3549eb01b0afae2588c091a1bf51476010bda4ec490932c1aaf7dc19ad12b54e1bce7faf7b5ff0aba305408a5f08824998a56393ce5ea70b95559233499d53a3915d1ca8e8d43eafbca202e3fa699be432704eb79c6754fcf58e6d7cbaaf4d2376f3284afaed96bb4094f92cf1d9f652d99be952f2102f9e9e1f1deeaef8433ca404eb9b7ef4c8ab7ba850de4b1b23f6dc0cb10ea0ea60a624c1b1ae132a851dd5e27da636d8d1805ebe73c502cce89ac6e1057a3d356f7ca63ead628a9a2", 0xca}, {&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="193e5e", 0x3}, {&(0x7f0000004c80)="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", 0x1000}, {&(0x7f0000005c80)="5638d83e69f91d031f1d643ab64a74010b84b0521c1d2ed9c1ef34df809e08595625faed4eb181663513d7720d225e36e6615883985ee0803b4af33cd30dbd228c0d9d9f6f9a14268d2d8e3d2d7e85c3aa74f401435fa20ee48c1881756396f3ceac39722cc1c0cdf4b0d4c69d87f774aebf87b6298c8116663c2444a9cf3272b54ad63a94da6b5327d1ba3930328f42deb365ceebfbe9275da27ef7397d026d2c0d1fad9f5646e11b5732fc357b0ad4", 0xb0}, {&(0x7f0000005d40)="6b5c75fdb1d141c1a2d4b37c56ed349dc8957c9c5c1a7b09a34aa5d4aa178b71c4fd3cc987c3aece0bf334f7198ecf102667c1cbcaa617f8d6ddd2fca4d43f0d8c948cd04c4937a1206da0b2be642d4a09b549a567511bbfcdb6e0444f768cdef9b4e16adfec5c5fe52ebdbc24f56996c7ae06c91f48b931fc220df2f7b6687961ea7a42619ad11232e8941a7f56cf74947e1e83a17d6621d75aae36dde3", 0x9e}, {&(0x7f0000005e00)}], 0xa, &(0x7f0000005f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, 0xffffffffffffffff}}}], 0x78, 0x4000}], 0x5, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3374.168115][ T9798] bond363: (slave vlan279): making interface the new active one [ 3374.204366][ T9798] bond363: (slave vlan279): Enslaving as an active interface with an up link [ 3374.230889][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3374.268308][ T9754] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:33 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x3f000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xffe, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x88a8ffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3375.015127][ T9856] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:34 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3375.410353][ T9858] bond364: (slave vlan280): making interface the new active one [ 3375.457014][ T9858] bond364: (slave vlan280): Enslaving as an active interface with an up link 10:17:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x98a, 0xed53, 0x0, 0x6, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/143, 0x8f}, {&(0x7f0000001180)=""/220, 0xdc}, {&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)=""/86, 0x56}, {&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/161, 0xa1}], 0x8, 0x4, 0x7) [ 3375.576558][ T9862] bond561: (slave vlan456): Enslaving as an active interface with an up link [ 3375.595009][ T9934] __nla_validate_parse: 2 callbacks suppressed [ 3375.595028][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3375.650356][ T9936] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x1200, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:34 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x62010000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000000c0)) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) [ 3375.862507][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x89600000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3376.063424][ T9993] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:35 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x68, 0x3, 0x8, 0x6, 0xfff}, 0x14) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3376.352470][ T9979] bond562: (slave vlan457): Enslaving as an active interface with an up link [ 3376.515172][ T9999] bond365: (slave vlan281): making interface the new active one [ 3376.548220][ T9999] bond365: (slave vlan281): Enslaving as an active interface with an up link [ 3376.583757][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3376.611425][ T9997] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x1403, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:35 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f00000000c0)=[0x3, 0x6, 0x9, 0x7, 0xfffffff9, 0x3, 0x4, 0x1ff, 0x7, 0x8, 0xda52, 0x6, 0x4, 0x0, 0x8001, 0x6, 0x2, 0x5, 0x0, 0x8, 0x7f, 0x4, 0xbb, 0xb0, 0x7fff, 0x1ff, 0xdd, 0x1, 0x81, 0x3, 0x0, 0x7f, 0x8cce, 0x3f, 0x10001, 0x5, 0x2, 0x8, 0x6, 0x3, 0x800, 0x0, 0x1ff, 0x7, 0x2, 0xffff, 0x9, 0x7fffffff, 0x188d, 0xff, 0x800, 0xfffffffe, 0x7, 0x9, 0x7f, 0x40, 0x8, 0x3, 0x9, 0xdc38, 0x7, 0x7a1, 0xeb23, 0x8b6, 0xfffffff7, 0xfffffff8, 0x1, 0xa7e7, 0x200, 0x101, 0x0, 0x9, 0x8001, 0x6, 0x8, 0x3ff, 0x9, 0x3, 0x207c89c1, 0x7, 0x7, 0x0, 0x101, 0x4, 0x80, 0x2, 0x9, 0x3, 0x2, 0x10000, 0x2, 0x9, 0x5, 0x2d, 0x7ff, 0x4, 0x7f, 0x0, 0x7, 0x9, 0x2000, 0xe2, 0x0, 0x28, 0x9, 0x7, 0xf4d, 0x9, 0x3, 0x5, 0x2, 0x4, 0x1, 0x1, 0x7f, 0x1f, 0x7, 0xe249, 0xffffff14, 0x7, 0x8, 0x9, 0x0, 0x7, 0x5, 0x5, 0x0, 0x16e, 0x0, 0x4ecf, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x9, 0x6, 0x1, 0x100, 0x0, 0x9, 0x80000001, 0x2, 0x1, 0x401, 0x80, 0x4e, 0x6, 0x8407, 0x79, 0x8f1, 0x200, 0x4, 0x1, 0x8, 0x3, 0x0, 0x10001, 0xc6e, 0xb7, 0x100, 0x101, 0x6, 0xbdb, 0x2, 0x2, 0x8, 0x8, 0x5, 0x9, 0x8000, 0x6, 0x6, 0x2, 0x3d49f0c5, 0x10001, 0x3, 0xa4, 0x400, 0x2b5, 0x7ff, 0x8, 0x9, 0x2, 0x1f, 0x47, 0xffffffff, 0x8, 0x3, 0x6, 0x1, 0x7f, 0x7, 0x7, 0x9, 0x4, 0x6, 0x400, 0x4, 0x0, 0x9, 0x695, 0x401, 0x0, 0x9, 0x8, 0x7, 0x8, 0x0, 0xff, 0x5, 0x5a22, 0xfffffffd, 0x0, 0x5, 0x4, 0x5, 0x6, 0x8000, 0xffffffff, 0x1, 0x7f, 0x7, 0x5, 0x5, 0x4, 0x0, 0x9, 0x0, 0xfa85, 0x8000, 0x101, 0x2, 0x3ff, 0x7ff, 0x8, 0x3, 0x6, 0x3, 0x5, 0x3f, 0x101, 0xcac, 0x100, 0x6, 0x8b6, 0x1, 0x2, 0x9, 0x6, 0x0, 0x100, 0x3, 0xcc4f, 0x8, 0x80000001, 0x9b, 0x9, 0x2, 0x1000, 0xa1d, 0xdbc1, 0x7ff, 0x17, 0x2, 0x8f, 0x40, 0x6, 0x9, 0x1, 0x1, 0x58b, 0x0, 0x5, 0x1, 0x0, 0xffffffff, 0x0, 0x8, 0xfffffac5, 0x773f, 0x7f, 0x7, 0x2, 0x8, 0x7, 0x4, 0x10000, 0x9, 0x2, 0x8, 0x3f, 0xf3, 0xffff, 0x2, 0x7f, 0x9, 0x0, 0x7, 0xf5, 0xf8, 0x3, 0x800, 0x3, 0x9, 0x80, 0x1ff, 0x0, 0x3, 0x2, 0x1f, 0x0, 0x7f, 0x2, 0x7, 0x8000, 0x100, 0x0, 0x5, 0x800, 0x5, 0x5, 0xfff, 0x0, 0x3ada, 0xf1e, 0x3, 0x7, 0x8, 0x5, 0x32, 0xc8b, 0x9, 0x0, 0x1, 0x8000, 0x9, 0xfff, 0x2, 0x5, 0x7f, 0x7d8d, 0x1, 0x7fff, 0x0, 0x75, 0x8, 0x7, 0x3, 0x5, 0x800, 0x4, 0x9, 0xc9ff, 0x7, 0xb5, 0x80000001, 0x80000001, 0x400, 0x8, 0x7ff, 0x9, 0x4, 0x7f, 0x4, 0x1000, 0x4, 0x2eb6, 0xbaf2, 0x80000, 0x7fc0, 0xfffffffa, 0x5, 0x8, 0x7, 0x3, 0x9, 0x4, 0x1a29, 0x5, 0x4, 0x5, 0xf83, 0xba9, 0x8001, 0x46f5, 0xffff1235, 0x6, 0x10001, 0x9e, 0x7, 0x6, 0x7, 0x0, 0x2, 0x35e3, 0x7, 0x7fffffff, 0x4, 0x20, 0x0, 0x8, 0x101, 0x1, 0x3, 0x40, 0x7f, 0x12000, 0x4, 0xffffff7f, 0x8b49, 0x7, 0x0, 0x5, 0x7fffffff, 0x5, 0x8001, 0x6, 0x7, 0x5, 0x800, 0x11, 0xfffffffd, 0x1f, 0x4, 0x460, 0x400, 0x3, 0x6, 0x5, 0xacfe, 0xa, 0x200, 0x400, 0x3ff, 0xad1, 0xffffff81, 0x80000001, 0x5, 0xff, 0x9, 0x7, 0x0, 0xffffff46, 0x8, 0x9, 0x10000, 0x0, 0x7fffffff, 0x400, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x9, 0x1, 0xcde, 0x8, 0xffffffff, 0x8, 0xfffffb6e, 0x9715, 0x4, 0x1, 0x9, 0x8, 0x40, 0x3, 0x4, 0x1, 0x800, 0x1, 0x1, 0x4, 0x1000, 0x6, 0xbba, 0x7fff, 0x100, 0xfffffff8, 0x7fff, 0x5, 0x1, 0x1, 0x19e9, 0x2, 0x5, 0x7fff, 0x1, 0xfffffffd, 0x7f3, 0x80000001, 0x8, 0x6, 0x600000, 0x6, 0x1, 0x1, 0x7fffffff, 0x6, 0x0, 0x417e, 0x9c7, 0x1a29cae9, 0x1f, 0x81, 0x9, 0x4, 0xfff, 0xa6, 0x7, 0x9, 0x6, 0x1, 0x0, 0x1ff, 0xfffff000, 0x9, 0x5, 0x10000, 0x6, 0x3, 0x8, 0x1ff, 0x8, 0x858, 0x80, 0xaa9, 0xf01, 0x10c0, 0x59df, 0xe644, 0x7, 0x1ff, 0x0, 0x3f, 0x8, 0x6, 0x7, 0x0, 0x1, 0x3, 0x4df80b4b, 0x8, 0xffffff81, 0x401, 0x401, 0x7fffffff, 0xffff130d, 0x1, 0x3, 0x8, 0x6, 0x2, 0x6, 0x8, 0x3ff, 0x9, 0x0, 0x1, 0x396041cb, 0x1, 0x1000, 0x6, 0x7, 0xc1f5, 0x9, 0x5, 0x4, 0xe3f, 0x9, 0x10001, 0x4b, 0x3ff, 0x8001, 0x5, 0x0, 0x0, 0x2, 0x4, 0x7fff, 0x8000, 0x8, 0x7, 0x2, 0x1f, 0xffffffff, 0x7, 0x7fffffff, 0x6, 0x401, 0x5, 0xfffffc00, 0x20, 0xc180, 0x3f, 0x0, 0x400, 0x4, 0x10000, 0x5, 0x5, 0x77f, 0x7c1e, 0x2, 0x2, 0x7e9, 0xfff, 0x1, 0x348, 0xff6, 0x3, 0x1, 0x6, 0xa0000000, 0x0, 0x7fffffff, 0x1, 0x41bae7bc, 0x9, 0x40, 0xfffffffd, 0x8, 0x30, 0x6a4, 0x10001, 0x43, 0x7, 0x3, 0x3ff, 0x1, 0xfffffffa, 0x1, 0x0, 0xfa, 0x1, 0x0, 0x400, 0x80000001, 0x0, 0x4b, 0x6144, 0x2, 0xe142, 0x6, 0x9, 0x8, 0xe43, 0x8ec2, 0x4, 0x7, 0x4, 0x4, 0x1, 0xfff, 0x80000000, 0x3, 0x8, 0x8, 0x2, 0x9, 0x4e8e, 0x0, 0x6, 0x4, 0x1000, 0x9, 0xf4df, 0x80000, 0xfff, 0x401, 0x4, 0x4000, 0x6000000, 0x6, 0xf0a6, 0x3ff, 0x8000, 0x0, 0x20, 0xfd0, 0x1, 0x1, 0x9000, 0x1, 0x5, 0x0, 0x100, 0x9, 0x40, 0x3, 0x4, 0x6, 0xfff, 0x5, 0xfffffffa, 0x8, 0x3, 0x48, 0x5a13, 0x2, 0xfc, 0x6, 0x2, 0x43, 0x69, 0x6cc4, 0x1, 0xbd1, 0x100, 0x0, 0x7ff, 0x5, 0x1f, 0x49, 0xc00, 0xda, 0x0, 0x9, 0x4, 0x6, 0x6, 0x0, 0x4, 0x5, 0x4, 0xc7, 0x3ff, 0x0, 0x100, 0x6, 0x0, 0x8000, 0x2, 0x4, 0x6, 0x9, 0x1, 0x44, 0x200, 0x4, 0x3, 0x8, 0x8, 0x9, 0x80000000, 0x10000, 0x3f, 0x9, 0xffffffff, 0x88a, 0x6, 0x3, 0x2, 0xffff, 0x0, 0xa7b0, 0x401, 0x7ff, 0x5, 0xcf8, 0x8, 0x1, 0x5ec, 0x4, 0x4, 0x435, 0x8001, 0x9, 0xff, 0x1ff, 0x1, 0x40, 0x800, 0x7b09, 0x9, 0x5, 0x101, 0x5, 0x1, 0x4, 0x7, 0x1ff, 0x48, 0x200, 0x3ff, 0x31, 0x15c, 0x1ff, 0x4, 0x100, 0x80, 0x3800000, 0x10f8, 0x8, 0xab0, 0x3ff, 0x0, 0x8, 0xbc, 0x0, 0x0, 0x1, 0x31d53505, 0x81d, 0x0, 0x80, 0x2, 0x2, 0x0, 0x6, 0x20, 0x7, 0x6, 0x9, 0x5, 0x5, 0x1ff8000, 0x8000, 0xffff0000, 0x81, 0x6, 0x9, 0x1, 0x573, 0x3, 0xfffffffe, 0x10001, 0xfffffff8, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x7f, 0x8000000, 0x9, 0x6848, 0x7, 0x401, 0x1, 0xfff, 0x2, 0x0, 0x9, 0x8, 0x14, 0x4, 0x1, 0x1, 0x9, 0xd869, 0x7, 0x5, 0x2, 0x6, 0xf5, 0x7ff, 0x7fff, 0x5, 0xffff8001, 0x0, 0x9, 0xffffffff, 0x7, 0x9, 0x9, 0x1, 0x1000, 0x80, 0x4, 0x7ff, 0x800, 0x4, 0x10000, 0xfffffffb, 0x8000, 0x8, 0xab3f, 0x1f, 0x3, 0x0, 0x1, 0xf00, 0x7, 0x8, 0x9, 0x1, 0xfffffff7, 0x4, 0x8000, 0x25b9, 0x81, 0x3ff, 0x0, 0x2e9, 0x2, 0x5, 0x6139, 0x3, 0x0, 0x6, 0x7fffffff, 0xa, 0xfec9, 0x2, 0x6, 0x2c, 0x40, 0x8, 0x49, 0x3, 0x63, 0x10001, 0xe307, 0x40, 0x6, 0x40, 0xc, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffe, 0x5, 0x1, 0x101, 0x80, 0x3, 0x2, 0x1000, 0x2, 0x5, 0x5f3, 0x5, 0x2, 0x80000000, 0x7, 0x9, 0x7, 0x1, 0xa0, 0x2, 0x9, 0x9, 0x4, 0x5, 0x5, 0x1, 0x3, 0x80, 0xfffffff7, 0x1, 0x1f, 0x4312, 0xe52, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x7, 0x5, 0x6, 0xaa52, 0x750, 0x7, 0x400, 0x3, 0x7fffffff, 0x1000, 0x76a0, 0xb84, 0x8, 0x19, 0xfffffffb, 0x3, 0x5, 0x7, 0x40, 0x9, 0x0, 0x100, 0x1a5a, 0x800, 0x3, 0x4, 0x8, 0x0, 0xc07c, 0x5, 0x8, 0x200, 0x7fffffff, 0x2, 0x5, 0xfffffffc, 0x1, 0x102000, 0x80000001, 0x0, 0xfff, 0x6, 0x8, 0x5, 0x10000, 0x9, 0x3, 0xfffff4b5, 0xffff, 0x9, 0x0, 0x3, 0xcc2, 0x6, 0x8001, 0x1, 0x0, 0x80000001, 0x2, 0x8001, 0xff, 0x70000000], 0x4, 0x400, 0x8, 0x5a1}) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x32, &(0x7f0000000080)={0x6, 0xee39, 0x3f, 0x8}) 10:17:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x898e4a88, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3376.793070][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:36 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) syz_usb_connect(0x0, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000055300710402038b1000104000001090200010100000000090400000371055900090582ef100000000102000905021275afce97ad6a2d1eb2affda11562c66016a6c90da42504a0c3d1842048ca3fff1f5815720cd278c612a210c5f9444764b78b31793cdb812e61502d13d176372f7cdc9635fe64fc43dc7433ae3891ef2480753809374d40aebe7eb3a355f6c4b79643e35683492f228fbe561c683b7334317c"], 0x0) r0 = socket(0x10, 0x803, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x63, 0x1, 0x6, "fc9847b615586e507844ab5d0ddbc64c", "e9e58c525fad36018c6bc56a0244379d81042da7fcc3d2767681311b525485a7fe4d7eafb31308006aebe1c9f1ad90c2221fb43a6e9e7fb275372aa4db82d7b3ea679fe5acd068888919e12f623f"}, 0x63, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000002b40)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, r6, 0x200, 0x70bd2e, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xd1aad3b8f9c7b1f5}, 0x4008804) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:17:36 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3377.076022][T10087] bond563: (slave vlan458): Enslaving as an active interface with an up link [ 3377.106155][T10088] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:36 executing program 2: utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0xffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x581000, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x3f) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 3377.239156][T24591] usb 5-1: new high-speed USB device number 46 using dummy_hcd 10:17:36 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:36 executing program 2: connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@unspec, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3377.356321][T10101] bond366: (slave vlan282): making interface the new active one [ 3377.405483][T10101] bond366: (slave vlan282): Enslaving as an active interface with an up link [ 3377.446309][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3377.473868][T10088] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3377.481346][T24591] usb 5-1: Using ep0 maxpacket: 16 10:17:36 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x56, 0x9, 0x2, 0x7}, 'syz1\x00', 0x10}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:36 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x9d010000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3377.609538][T24591] usb 5-1: config index 0 descriptor too short (expected 256, got 56) [ 3377.617768][T24591] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 3377.656985][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3377.709324][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1909, setting to 1024 [ 3377.743622][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 10:17:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1022}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x604440, 0x0) [ 3377.768119][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3377.842014][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3377.869290][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.00 10:17:36 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x2, 0x12}, 0x18) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000240)={0x1f, 0x2}) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3377.886099][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3377.956119][T24591] usb 5-1: Manufacturer: syz [ 3377.997180][T24591] usb 5-1: config 0 descriptor?? [ 3378.022619][T10161] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdfa06b00000c080002149ae1b57c95a5296bc6be1198ca3b5c8c7ec3127c82016091000000", @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d94dd27b749364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c63b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f73052c3a841cfcb0c79e8435815001812b872"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xe8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b66bcd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39aa19c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x563}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c06ee93}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dc85f15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x466f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3eef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3934278f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8135}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x339de993}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f39}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f6b36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f84007b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3613}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73f676c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd682}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39f013c8}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000480)=0x20) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3378.261175][T10195] bond564: (slave vlan459): Enslaving as an active interface with an up link [ 3378.303311][T10196] bond367: (slave vlan283): making interface the new active one [ 3378.317968][T10196] bond367: (slave vlan283): Enslaving as an active interface with an up link [ 3378.353331][T10247] device lo entered promiscuous mode [ 3378.365941][T10251] Y­4`Ò˜: renamed from lo [ 3378.395545][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3378.436380][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3378.466140][T10161] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3378.485929][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3378.605241][T24591] rc_core: IR keymap rc-hauppauge not found [ 3378.612841][T24591] Registered IR keymap rc-empty [ 3378.630345][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3378.689144][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3378.719126][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3378.739547][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1331 [ 3378.788251][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.795114][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3378.808312][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.828336][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.848948][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.856532][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3378.868308][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.888338][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.908395][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.914761][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3378.928391][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.948355][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.968334][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3378.974864][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3378.988327][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.010369][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.028292][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.034944][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3379.049729][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.068282][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:17:38 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x2e02, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3379.090395][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.097050][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3379.108266][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.128286][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:17:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xe413a61fe1b27d44}, 0x4000010) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)=@assoc_value={r5}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r5, 0x42, "2e15365667976210da330d920eabe4e136083f14d8a1f85c4898baf36d7a79f12ed366bd5f1aa581514ef4668fbbdbeaf6891c536c80fc51e1fd05c48e43e46672c6"}, &(0x7f0000000440)=0x4a) [ 3379.148271][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.168908][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.176960][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3379.188304][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:17:38 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) socket(0x26, 0x80000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x2408c0, 0x0) r0 = socket$inet6(0x10, 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/70, 0x46, 0x6) r1 = socket$inet6(0x10, 0x0, 0x0) pread64(r1, &(0x7f0000000280)=""/70, 0x46, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) pidfd_open(0x0, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 3379.203904][T10278] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3379.208266][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.228235][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.235232][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3379.248951][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.275174][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.312624][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.324876][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3379.347248][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.382446][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.426332][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.476224][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.531658][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.580916][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.626629][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.657829][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.687796][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.713033][T10308] bond368: (slave vlan284): making interface the new active one [ 3379.714368][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.751459][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.785551][T10308] bond368: (slave vlan284): Enslaving as an active interface with an up link [ 3379.789289][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.842908][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.904299][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3379.986961][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.004194][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.018175][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.024708][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 10:17:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{@fixed}, {@fixed}, {@fixed}]}) [ 3380.038214][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.058205][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.078216][ C0] mceusb 5-1:0.0: Error: urb status = -71 10:17:39 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3380.084814][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3380.098245][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.118210][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.125975][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3380.136837][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3380.145455][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.155053][T24591] usb 5-1: USB disconnect, device number 46 [ 3380.161180][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3380.255036][T10328] bond565: (slave vlan460): Enslaving as an active interface with an up link [ 3380.277395][T10278] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa0a2d073, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:39 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ':&$\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 3380.556232][T10403] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3380.601297][T24591] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3380.663163][T10406] __nla_validate_parse: 3 callbacks suppressed [ 3380.663185][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3380.728766][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:39 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3380.868975][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3380.924646][T10403] bond369: (slave vlan285): making interface the new active one [ 3380.945245][T10403] bond369: (slave vlan285): Enslaving as an active interface with an up link [ 3380.984970][T10446] bond566: (slave vlan461): Enslaving as an active interface with an up link [ 3380.995144][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3381.006247][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3381.011957][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3381.031548][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3381.043738][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 10:17:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) [ 3381.086235][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3381.109638][T10433] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:40 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xc1d2f2d8, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3381.209122][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3381.239395][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3381.347357][T24591] usb 5-1: Manufacturer: syz [ 3381.365050][T24591] usb 5-1: config 0 descriptor?? [ 3381.423330][T10509] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3381.490361][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3381.603713][T10532] bond370: (slave vlan286): making interface the new active one [ 3381.624158][T10532] bond370: (slave vlan286): Enslaving as an active interface with an up link [ 3381.675422][T10547] bond567: (slave vlan462): Enslaving as an active interface with an up link [ 3381.686285][T10509] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3381.713720][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3381.848872][T24591] rc_core: IR keymap rc-hauppauge not found [ 3381.855864][T24591] Registered IR keymap rc-empty [ 3381.878581][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3381.929200][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3381.958710][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3381.979264][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1332 [ 3382.028033][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.035935][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.049065][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.068092][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.088077][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.094737][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.108088][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.129225][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.148024][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.154367][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.168066][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.188045][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.208868][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.215465][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.228884][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.248378][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.268048][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.274345][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.288674][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.308058][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.328022][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.336373][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.347983][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.369120][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.388113][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.395462][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.408050][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.428119][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.448231][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.455543][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.468033][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.488119][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.508041][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.514783][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.528089][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.548000][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.568022][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.583314][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3382.590355][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.608385][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.620049][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3382.628266][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.638685][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3382.648093][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3382.666844][T24591] usb 5-1: USB disconnect, device number 47 [ 3382.672999][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3383.058811][T24591] usb 5-1: new high-speed USB device number 48 using dummy_hcd 10:17:42 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000001c0)=""/4096) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x3, 0x4) 10:17:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYRESOCT=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:42 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xc3ffffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x22, {0x0, 0x0, 0xffffffffffffffff}}, 0x14) 10:17:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3383.289123][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3383.406250][T10621] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3383.488886][T24591] usb 5-1: device not accepting address 48, error -71 [ 3383.515378][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3383.546292][T10666] bond371: (slave vlan287): making interface the new active one [ 3383.561180][T10666] bond371: (slave vlan287): Enslaving as an active interface with an up link [ 3383.614684][T10665] bond568: (slave vlan463): Enslaving as an active interface with an up link [ 3383.642661][T10621] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 10:17:42 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3383.667475][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3383.686239][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000380)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786870100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053059b14a74aa23220041de8e359a2985245aa1c9975c36f43d3197790ab7dcf1a2e5e78666fbd062f4b458204b343a4989f7f7f899598058c5f24abfb8115a109002e3b2d81299220438702ec848485ef226f86ab9d173d9d3577d290768e3d19ef05e6464e64560a0308000000000000009262a5e3d70bccf4728329d733740ab0f8c783", 0xf0, 0x4000002, 0x0, 0x0) 10:17:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xd8f2d2c1, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:42 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:43 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3383.858790][T24591] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3383.897320][T10726] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3384.099233][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3384.122909][T10726] bond372: (slave vlan288): making interface the new active one [ 3384.148949][T10726] bond372: (slave vlan288): Enslaving as an active interface with an up link [ 3384.206862][T10729] bond569: (slave vlan464): Enslaving as an active interface with an up link [ 3384.218948][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3384.230424][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3384.247508][T10726] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3384.257438][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 [ 3384.269659][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3384.389019][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3384.398899][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3384.407114][T24591] usb 5-1: Manufacturer: syz [ 3384.416483][T24591] usb 5-1: config 0 descriptor?? [ 3384.748998][T24591] rc_core: IR keymap rc-hauppauge not found [ 3384.754952][T24591] Registered IR keymap rc-empty [ 3384.778653][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3384.833903][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3384.869961][T24591] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3384.890449][T24591] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input1333 [ 3384.947812][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3384.954197][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3384.967805][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3384.987846][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.007857][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.014772][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.027806][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.047835][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.067826][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.074221][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.088037][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.107768][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.127916][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.135904][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.147841][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.168697][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.187721][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.195721][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.207858][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.227826][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.248831][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.256698][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.267784][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.287755][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.307791][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.314174][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.329779][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.347712][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.367763][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.374368][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.387830][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.408588][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.427808][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.434677][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.447842][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.467745][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.488116][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.494842][T24591] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 3385.507799][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.527836][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.535294][T24591] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 3385.544978][T24591] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3385.553524][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.564089][T24591] usb 5-1: USB disconnect, device number 49 [ 3385.571409][ C0] mceusb 5-1:0.0: Error: urb status = -71 [ 3385.948490][T24591] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3386.188137][T24591] usb 5-1: Using ep0 maxpacket: 16 [ 3386.308495][T24591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3386.319476][T24591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3386.340731][T24591] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 117 10:17:45 executing program 4: syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000055300710402038b1420104000001090238000100000000090400000371055900090582ef100000000102000905021275"], 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$cdc_ecm(0x3, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x40, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2046}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0x3ff}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x9, 0x8, 0x81, 0x0, 0x1f}, @ncm={0x6, 0x24, 0x1a, 0x99d, 0x9}, @acm={0x4, 0x24, 0x2, 0x5}, @obex={0x5, 0x24, 0x15, 0xfff}, @dmm={0x7, 0x24, 0x14, 0x5, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0xef0}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x69, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x5, 0x2}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x80, 0x9, 0x7, 0x20, 0x1f}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0xf2, &(0x7f00000001c0)=@string={0xf2, 0x3, "06fa4a1fb4d0d23c5aa95920aff7b5827805f74efc9b759324c71b26f18448886d44791a6653e31fd2fdebd5ac95282db15c9fa0eee1e5a69f0f99dafc5ddb90b747a7a2b92629976bcee1447a399740c16908b2bdc7ca348c67ca913c54149e2488baaefbd6f0cf9d373e7766ce07974e7cae817e92a59897aea2686f152ddbaa6254c335369d7cc30ce5012414d854d9ae9e90f2a788b92e0bb7b253bb55ecd21995b79575180fb2728deeb060e537517b02afd591a2a7c57629fb33be477f0e3d67d270e972ee063c2de72f298885ba08f05fd493cd7c399a86e3c888e119f1503e82fdac247b01d885bc9db439ad"}}, {0x72, &(0x7f0000000100)=@string={0x72, 0x3, "249ff366f3af30185ddc3515ef8e60fc9d66d8b5aa96d3dbe575cb991e3991dffeca9e4567603473380d311a2f1ecbc268984db42dd2659217c7863e6a1bb6e7b642c62ccde3273ad4e90e4a4771dd2adb7815cca3d1c3617bca00495629abad2729be7f444732bc4747b1ed8d3afb01"}}]}) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x20, 0x2, 0xec, {0xec, 0x2, "5917112b5351c85e526fd0fecdb8f987bc82bdc7aabedaf1f6e133d1b9a19553e785c26b42c62098a0352895f41a1725149f1fd04456ceb35f3c09e33fc8090866afa0cf47c954cbc68d0afde137e256f8574c1b327f9d487a503510b8af57d8ff49423207887c9d38c29484cc33f88c4e5a5a6ddd9d42439bbb3617c551b82096a130534648152fb7b5276f45e8b9b355a5097fa4c5d717d0debd7d47acb3ba61b8f6d62f98a2647c2224e11e463ee478a51e7c4fd718c3144d0a3a85efd97102965d42f1935506598a54b2bffb40f44e53ffd661a0e84aca03728a2db2bb5e75f6a0f8d0fb9476dd7b"}}, &(0x7f0000000400)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "64f62972c9bfb6e5dc3697766b146666205722f10e8ccd1f47bc41dee75040df5c84ee403fdcb0f0694d3454769edd51d4841a5d4e7ff2657dab1c0bcb3d8882dace211c032dacced35667ff5d225be5a96269b3bef4cc117cae352dd8807707816e34b6381ec478d64a5832a3948fd94bc60d8427c595d4607db0eeb1d3c49559fc1421970bb5260c8fe04a4db2d8eaaae009b0473ff732fad811d445c938dea6d0f68767a5c24ac4044857ce35bc12b4e714ec888ee22caa88ba51ab8484d99be98b417b913888023810f0a11bb8cd22ad0086376ea0159bc0c172853b5e74960eb6cf0badd446f9007d294718b2ab"}}, &(0x7f0000000500)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x36, 0x6, 0x6f, 0xff00, 0x1, [0xc000, 0xff0000, 0x3f0f, 0x7fbf00, 0xffc00f, 0xc011]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xb, 0x4aaf}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x39, 0x81, 0x7}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x5, 0x1f, "18120b0c", "082b2aa6"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x8, 0x70, 0xdd, 0xff, 0x1f}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x20, 0x30, 0x6, "30d166011515"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x20}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "d106"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={[], 0x32}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={[], 0x20}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "d696"}, &(0x7f0000000900)={0x40, 0x1a, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x58}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x20}}) 10:17:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010063616b65000000120c00020008000b0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03032a01153260004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801604842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 10:17:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x7, 0xff, 0x1, 0xf7, 0x0, 0x800, 0x4000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x12c, 0x5, 0x3f5d, 0x6, 0x0, 0x5, 0x423}, r0, 0xa, r1, 0x0) openat$cgroup_devices(r1, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) 10:17:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xe4ffffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 10:17:45 executing program 5: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10:17:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x5000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 3386.362486][T24591] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3386.432671][T10849] __nla_validate_parse: 4 callbacks suppressed [ 3386.432691][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:17:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = geteuid() getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee01]) fchown(r0, r1, r2) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000002080)={0x65, 0x7d, 0x1, {{0x0, 0x4a, 0x0, 0x80000000, {0x20, 0x2, 0x2}, 0x64000000, 0x245, 0x2356dcb8, 0x7, 0x6, 'bond0\x00', 0x2, '-#', 0x9, '$+(%![+}:', 0x6, 'bond0\x00'}, 0x6, 'bond0\x00', r1, 0xffffffffffffffff, r3}}, 0x65) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = geteuid() getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee01]) fchown(r7, r8, r9) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(r6, &(0x7f0000002080)=ANY=[@ANYBLOB="650000007d010000004a00000000000080200200000002000000010000000000006445020000b8dc562307000000000000000600626f6e64300002002d230900242b2825215b2b7d3a0600626f6e6430000600626f6e643000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r10], 0x65) lstat(&(0x7f00000021c0)='./file0/file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x3, r1, 0xffffffffffffffff, r8, r11, 0x61, 0x6}, 0x1000, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x80}) mq_open(&(0x7f0000000000)=':#\x00', 0x40, 0x0, &(0x7f0000000040)={0x6, 0xee39, 0x3f, 0x8}) [ 3386.488722][T24591] usb 5-1: string descriptor 0 read error: -71 [ 3386.511824][T24591] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3386.606385][T10850] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3386.618819][T24591] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3386.647288][T24591] usb 5-1: config 0 descriptor?? [ 3386.673559][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3386.748899][T24591] usb 5-1: can't set config #0, error -71 [ 3386.801546][T24591] usb 5-1: USB disconnect, device number 50 [ 3491.779317][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 3491.786135][ C1] rcu: 1-...!: (1 GPs behind) idle=e72/1/0x4000000000000000 softirq=285353/285357 fqs=2 [ 3491.798420][ C1] (t=10501 jiffies g=520305 q=766) [ 3491.803655][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g520305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3491.814988][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3491.825173][ C1] rcu: RCU grace-period kthread stack dump: [ 3491.831080][ C1] task:rcu_preempt state:R running task stack:28888 pid: 11 ppid: 2 flags:0x00004000 [ 3491.841912][ C1] Call Trace: [ 3491.845230][ C1] __schedule+0x8eb/0x21b0 [ 3491.849695][ C1] ? io_schedule_timeout+0x140/0x140 [ 3491.855055][ C1] ? debug_object_destroy+0x210/0x210 [ 3491.860465][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 3491.865368][ C1] schedule+0xcf/0x270 [ 3491.869468][ C1] schedule_timeout+0x148/0x250 [ 3491.874351][ C1] ? usleep_range+0x170/0x170 [ 3491.879172][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 3491.884493][ C1] ? __next_timer_interrupt+0x210/0x210 [ 3491.890089][ C1] ? prepare_to_swait_exclusive+0x2d0/0x2d0 [ 3491.896150][ C1] rcu_gp_kthread+0xba1/0x1f50 [ 3491.900963][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 3491.905860][ C1] ? rcu_core_si+0x10/0x10 [ 3491.910315][ C1] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 3491.916161][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 3491.921422][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3491.927708][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 3491.932771][ C1] ? rcu_core_si+0x10/0x10 [ 3491.937248][ C1] kthread+0x3b1/0x4a0 [ 3491.941348][ C1] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 3491.947279][ C1] ret_from_fork+0x1f/0x30 [ 3491.951754][ C1] NMI backtrace for cpu 1 [ 3491.956100][ C1] CPU: 1 PID: 10938 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 3491.964537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3491.974701][ C1] Call Trace: [ 3491.977998][ C1] [ 3491.980857][ C1] dump_stack+0x107/0x163 [ 3491.985221][ C1] nmi_cpu_backtrace.cold+0x3c/0xef [ 3491.990453][ C1] ? lapic_can_unplug_cpu+0x80/0x80 [ 3491.995685][ C1] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 3492.001700][ C1] rcu_dump_cpu_stacks+0x1f4/0x230 [ 3492.006854][ C1] rcu_sched_clock_irq.cold+0x514/0xf90 [ 3492.012438][ C1] ? rcutree_dead_cpu+0x50/0x50 [ 3492.017318][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 3492.022210][ C1] ? __raise_softirq_irqoff+0x93/0x1f0 [ 3492.027706][ C1] update_process_times+0x16d/0x200 [ 3492.032943][ C1] tick_sched_handle+0x9b/0x180 [ 3492.037933][ C1] tick_sched_timer+0x1b0/0x2d0 [ 3492.042815][ C1] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 3492.048387][ C1] __hrtimer_run_queues+0x1c0/0xea0 [ 3492.053634][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 3492.059859][ C1] ? ktime_get_update_offsets_now+0x268/0x340 [ 3492.065980][ C1] hrtimer_interrupt+0x334/0x960 [ 3492.070968][ C1] __sysvec_apic_timer_interrupt+0x146/0x550 [ 3492.077001][ C1] sysvec_apic_timer_interrupt+0x48/0x100 [ 3492.082753][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3492.088778][ C1] RIP: 0010:lock_release+0x3df/0x710 [ 3492.094096][ C1] Code: 89 e8 55 ac c0 07 b8 ff ff ff ff 65 0f c1 05 78 40 aa 7e 83 f8 01 0f 85 73 01 00 00 ff 34 24 9d 48 b8 00 00 00 00 00 fc ff df <48> 01 c5 48 c7 45 00 00 00 00 00 c7 45 08 00 00 00 00 48 8b 84 24 [ 3492.113734][ C1] RSP: 0018:ffffc90000d90c38 EFLAGS: 00000246 [ 3492.119834][ C1] RAX: dffffc0000000000 RBX: e4f0795b4b32e3a4 RCX: ffffc90000d90c88 [ 3492.128435][ C1] RDX: 1ffff110150ec12f RSI: 0000000000000101 RDI: 0000000000000000 [ 3492.136429][ C1] RBP: 1ffff920001b2189 R08: 0000000000000000 R09: 0000000000000000 [ 3492.144419][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 3492.152411][ C1] R13: 0000000000000003 R14: ffff8880a8760980 R15: ffff8880a8760000 [ 3492.160427][ C1] ? mrp_join_timer+0x7b/0xc0 [ 3492.165143][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 3492.170024][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 3492.175082][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 3492.180056][ C1] ? mrp_attr_event+0x280/0x280 [ 3492.185025][ C1] _raw_spin_unlock+0x12/0x40 [ 3492.189780][ C1] mrp_join_timer+0x7b/0xc0 [ 3492.194320][ C1] ? mrp_attr_event+0x280/0x280 [ 3492.199199][ C1] call_timer_fn+0x1a5/0x710 [ 3492.203819][ C1] ? msleep_interruptible+0x170/0x170 [ 3492.209314][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 3492.214205][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3492.219508][ C1] ? mrp_attr_event+0x280/0x280 [ 3492.224398][ C1] __run_timers.part.0+0x692/0xa80 [ 3492.229554][ C1] ? call_timer_fn+0x710/0x710 [ 3492.234370][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 3492.239599][ C1] ? sched_clock+0x2a/0x40 [ 3492.244111][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 3492.249000][ C1] run_timer_softirq+0xb3/0x1d0 [ 3492.254032][ C1] __do_softirq+0x2bc/0xa77 [ 3492.258588][ C1] asm_call_irq_on_stack+0xf/0x20 [ 3492.263647][ C1] [ 3492.266598][ C1] do_softirq_own_stack+0xaa/0xd0 [ 3492.271750][ C1] __irq_exit_rcu+0x17f/0x200 [ 3492.276465][ C1] irq_exit_rcu+0x5/0x20 [ 3492.280739][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 3492.287714][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3492.293731][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x60 [ 3492.299928][ C1] Code: 81 e1 00 01 00 00 65 48 8b 14 25 00 f0 01 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 cc 14 00 00 85 c0 74 2b 8b 82 a8 14 00 00 <83> f8 02 75 20 48 8b 8a b0 14 00 00 8b 92 ac 14 00 00 48 8b 01 48 [ 3492.319574][ C1] RSP: 0018:ffffc9001c5f7a40 EFLAGS: 00000246 [ 3492.326784][ C1] RAX: 0000000000000002 RBX: 0000000000000003 RCX: 0000000000000000 [ 3492.334788][ C1] RDX: ffff8880a8760000 RSI: ffffffff8388bfca RDI: 0000000000000003 [ 3492.342914][ C1] RBP: ffff888013496480 R08: 0000000000000000 R09: 0000000000000003 [ 3492.350914][ C1] R10: ffffffff8388bfb7 R11: 0000000000000010 R12: 0000000000000030 [ 3492.359080][ C1] R13: 000000000000016c R14: dffffc0000000000 R15: 0000000000000000 [ 3492.367082][ C1] ? tomoyo_domain_quota_is_ok+0x327/0x5a0 [ 3492.372931][ C1] ? tomoyo_domain_quota_is_ok+0x33a/0x5a0 [ 3492.378772][ C1] tomoyo_domain_quota_is_ok+0x33a/0x5a0 [ 3492.384623][ C1] tomoyo_supervisor+0x312/0xf20 [ 3492.389593][ C1] ? tomoyo_profile+0x50/0x50 [ 3492.394299][ C1] ? pointer+0x930/0x930 [ 3492.398573][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3492.404779][ C1] ? tomoyo_check_acl+0x2ca/0x450 [ 3492.409831][ C1] ? __sanitizer_cov_trace_pc+0x59/0x60 [ 3492.415522][ C1] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 3492.421888][ C1] tomoyo_path_number_perm+0x419/0x570 [ 3492.427394][ C1] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3492.433242][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3492.439451][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 3492.444332][ C1] ? _copy_to_user+0xdc/0x150 [ 3492.449047][ C1] ? __fget_files+0x2e3/0x430 [ 3492.453762][ C1] security_file_ioctl+0x50/0xb0 [ 3492.458852][ C1] __x64_sys_ioctl+0xb3/0x200 [ 3492.463656][ C1] do_syscall_64+0x2d/0x70 [ 3492.468098][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3492.474121][ C1] RIP: 0033:0x45e149 [ 3492.478057][ C1] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3492.497717][ C1] RSP: 002b:00007f833e20fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3492.506165][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 3492.514189][ C1] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000007 [ 3492.522181][ C1] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 3492.530178][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3492.538177][ C1] R13: 00000000016afb7f R14: 00007f833e2109c0 R15: 000000000119bf8c 2020/12/20 10:19:33 Manager.Poll call failed: read tcp 10.128.0.45:50306->10.128.0.26:41713: read: connection reset by peer [ 3494.926250][T10874] bond570: (slave vlan465): Enslaving as an active interface with an up link [ 3495.061206][T10875] bond373: (slave vlan289): making interface the new active one [ 3495.113264][T10875] bond373: (slave vlan289): Enslaving as an active interface with an up link