394d74dfab682188a498ed6ed4403d7d8ad22910897d43900f7064b92110d62a5f96abf89d722a475f0a8574a853bbe2e2022e8d650e0151e5cbd432949b713750f2da534af05261fe8acdf0498b1ee66d7110d25a8d1ec68a72e37b69cfd1efcfd37a2298c62debb181c727d99b216f9692279a931d9cd8e7d37bdb90ef029689b2a079945e34135472c053d2d3b3afe1b7eee54a1dcbcafaa10dab3c6db1c32c2d7b898ca4d859b2c554f08e2200a6916a9afe2c77d882281b257997b06e628c8e1331ea18ba84f8a41e7c6e8587b207d204cec733e57c2dc20eddce2ae1c7ac89a2cb67136a425030c984380eeff5f39c874798cabe552eaa5dc8472869ba70e22f1751ed1cf907dd9823c407c07d6f584829152b6a67e163b421321d79dd0d0a15e4b21de91b74fc7ef13053f5b0ca77408bdbf57104587defb29a62c3204b5fb891e65dc78fc81705622e9e03f17d468e15b7257b1feea2b7b80cb524f67ea2c81bfbcf8472775274eb9d27fcb83d003363a4e7f777a1cc10a9f9a8377c3a6b8bc42428c4459a442bf8abc5ac4ee1566a3a4366f43eb24fb5f1434f406f14a82d8ebccb9f50f60950b95f4ab4403a83dd5070817fe0857675bc448541e8a26ce9432f9f10598ab42b398f8e5822e0fbb38da42ebab3ed1d07ae525875fa9d5252abdccd47f3dea04cac5c72be106c1843491e9e614c9574e0d869f58475616662687bb687254be706a8fe1ba1db1f85bdd0f5d7259f833bce0df33a1f37f163b9bd9697fde2834a59d271a549f961fb62158713d3b6800c95b08c44a855ba99b6e1e9a1adb16cb763d38d9834ff9656fceeb201c7d9130f69c751c07a3d3ff225397dd8ae20b8dc118bf84a33afc9a8b351993f6094e3dc0c96fb74525b4fe9f8d1d5cf2e56822741b8fdb58b197e69f8f1d32679aa116e77bf941cfcfd40bbaab42b95c8f3c87f40ff7d6135aee0257a871bda922ac3d984ba88313a8413b4a575179d6c31624d9d4e5866f5d87bca067d61cb77f82d068fbc299224e2d5807448ebd8420f25ad71d982050856b18c389dc8a8984194eb4b89190e35ea3de8a1cfedf6f81412ea656efa699b16dffb648edf5339af4170609d586d7e2d6a32b7a7e9b05c1e44a2b73c927aed270af63181f07c142ba5922827fd526df58204c6ca28f15623e64a90cebf7c3a9bf241e04faca7f7db5bc97faafcf652a5e1c66e4ddccefaceb7ab332ecf113ee995871c3b65e8408f836dfd43a8712841b9de8c656e825ad59061ce3deaf1251cd38f75d4c646d387d471dadb1bc0d6d77936fadf4e9ab542c216d1a65d980e7a43cfd061daa6b5b7957f384db4a157b350a94076579f4d097d37c422e284e9788447184a5d0e150efe72f697f790e22f43068f2aa52611123c58fe3b81d6e005383fbbb8afe017f55fdb9fb429c3751cfede1af46968f88e4ae5a4abd4ce4e6f6e1a3911516dd77d8b87a7a9f33c523e82c93f932eefacc3646caaf02bb08f5e281ebf5bd6a463493b4b500a9507748a795da20e4e376ff3cbf23f8499bb62da0ec54de4698a3dec97c622fac343f19b0254aa5c0533cc42c262717ec59dd1722b9f966424016e7e0a86b82669ee492f4c4f44b3d362cbc4dadc3f6fe9f26a893c1cf313794138dbe226125a819246e0b689715e7674f83f3e374467734fbf6c2e7525ace01673c8512bdd2266d8d54d6c69084e3a88c66e93a70b3197e751205b03fadab5b83430e689cec09634e038627d18ed198c6597363f2bf34c83aa61993cf762511fd02281b41892587ed321c0e3f4e74e77d3df759fda1d165e715642796635cefb93bc67cf9f2ddc0e536224149050afbe9e39ca29d60010e815cd088946a05fa6e7dac9f429d382509264df9d67ab3419b389f7ac25d2109d5e2517b1fa6bb6e67904de167b5992cfa6a0c2af953adb619f50d7fd351d635f59d09766e389af3ee20eb323ffcaeb43cb3ba4e2478014801fb220c2c34ba1561553257ed0352fe78d705602043dc157e7ed8e02e61c04d0651f2573f4d1d6bc2e382296d81d066d4f5309bee2415dc6f5a1329dc2017bdbe42b73845aac34a4c16bd588a46e367a1749db91ebb4a3bf280afee869695c0f8dc592b4c6b8b2bb50b3c8d752df34ec133908101a46b4225a2398931b46fc06619238525a762b67f817f09144ce8d042e695fadec8fbf6d12c2ff83efbdd51b0511f32cf182b1c687d7a93c5eee5ec5cd9cacc1c0ce90f31858d497b3ecc770b82432c82faaa96355cba49b55168b4b0e126497614e9685ba5c0331a663d3af75c3e983c25027e13e15bbfbc1e7a7b2df2bd77ea6285ab59ddc99d7fa11795c02467b5d132b7a7ba2f359633d1d2478ca5afe70cc585216e18fb0c78d1e6c9fda596295879ef82431f6b3dbe74fa742bdfde6486db815c757308dccf2de50d3af12b67b3ca8de2f382040c902e703ea59efb12cabc39b7ed40eba1a3b77d0013ef2261b00d4a60d496426f2fbe2ab95ea6feba40e484bf89b063c3936c8532c2c52704d788e95738f8998be40fc5c70cfb3be1675c14e00b46580f9df7e565472c2106bdf8476108e6ec6fa5da575094ceb9bc2ed87b692fee955c22a787ac35c04dcd7b50d513a54b195cbf9050b979239d84b5b87297d8516ae9882a38e5f2b83b23fb477ad07dbfcd66967755f676bdc9289b09e5e7a4463294b4b71a546ecaa54ae7eb7116f83a665df7859b76136cc3aa430967b0de08191c00f7236d801c2072343dcf6b13bf841ab324305e6a4b96fdeee1a6d9fc4f4a54816c2b0469294fa1c65d0176f97ef977055a21d33e16235b64527eba96add0288491768229d79b174774c19b0d2fa8d8b4f6b5f5e7295f52a58c12b8efbd7670c0f00b310b510e3e076e5057931bd9d15563c35a3803610528ed6558a14c1265ac0bcd7419b433818c3aa66106c8aee256816f96e9e4e53fb1f82439f1a8d562f63b9b503cedea0627a9f430745c6c0a8a15e658dfc6514f61d692fac5dec45b112f50b6c29cb8c33c186ee229476a8f36710a7bdc88b319fce74e5bfcada80c6273c9164785f09840c6265e552eea08839aa3672e3986b157c0eaa29c8573d19cb3fca70856994694edaf9d1d9841de6d79bbd45ea665a6971d962b10d3f29e70f06f37aa98e3d322e16fbabb47fef672fbe758f716a12a144bf86b44b31c69282ceff1f795cc048e1c0a38e9dc44140a66e8f337d9bea7ecdca63fb3f82c11aaabc0b3ab8d52a7cc951e65d84aeb24f5bb642700d9c5850988bac5caabe8990f4a710e5b536b14dfa6d058eab558b2841c3a631314c6fe3db5e283a1e27a42a9d38183760c46953d0c5908c04408052120e4fa073ba83afaac598df0d8200f670f48a92df6db28d85b2ddbe35f5aa86ad6f65db20e7e202f41087a38715708772bd641a7fd9f610234584742e90d5dd6b9d45dd4f1421f60bc2f463cea8b0ca00b46d9276bf702122ce49feda5d23371ed7d65daa5eb5eff178577fe7881d9f8a65fae9c99da60fe11ee13eaee3a9905c6e6e5e573c17eed08d903f0fdecb3bd8d5046239c6199058552f095ab0103eec3a3036ecb400f0de5dce83102e8550b2dd4691f585be2e5bc47b9ff3802ef45eafa2aff427b4199636f0aa512af7c9120cfdd50407b8be21affa444c422fdf3211daf248ebecf775e617706badded43fa9e543aae3c1e630f50efa34abb2f496fd978acc56efc215fc538b646b4c8f53c51f04b0569af994af3fc99cab975633a6970ac8f0bf4163da3df2805c506b4285b1011e5800a5ac5a20f32d76", 0x1000}], 0x5) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, @thr={0x0, &(0x7f00000001c0)="6fd10805e754b925266092091fa1e0622375357ecf35d03788d5c6678ec6f553fab149759d70a74747f4"}}, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfef0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 11:39:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x5, 0xffffffffffff90a7}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) [ 808.024937][ T2517] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 808.048357][ T8267] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 808.092323][ T8303] bond302: (slave veth617): Enslaving as an active interface with a down link 11:39:14 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/snd/timer\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000000000000000080000000", @ANYRES32=r7, @ANYBLOB="000000000001030008001b0000000000"], 0x28}}, 0x20000000) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000108000000000000000000000040a8869308d7c9efb1c2a9aad213577c1a2fe1c1ac35697b3a4479bb2593d26a38c3", @ANYRES32=0x0, @ANYBLOB="000000000200"/16], 0x28}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4, @ANYRES64], 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x40045402, &(0x7f0000000000)) [ 808.132688][ T2514] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 808.229268][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 808.262893][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 808.285924][ T2517] usb 4-1: Using ep0 maxpacket: 16 [ 808.414122][ T2514] usb 5-1: Using ep0 maxpacket: 16 [ 808.414401][ T2517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 808.432761][ T2517] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 808.442716][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.452403][ T2517] usb 4-1: config 0 descriptor?? [ 808.516956][ T2517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 808.534304][ T2514] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 808.557760][ T2514] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 808.571227][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.589352][ T2514] usb 5-1: config 0 descriptor?? [ 808.638199][ T2514] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 808.731848][ T2517] usb 4-1: USB disconnect, device number 9 [ 808.844551][ T2527] usb 5-1: USB disconnect, device number 10 [ 809.314564][ T2517] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 809.434054][ T2527] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 809.564684][ T2517] usb 4-1: Using ep0 maxpacket: 32 [ 809.674155][ T2527] usb 5-1: Using ep0 maxpacket: 32 [ 809.694260][ T2517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 809.707227][ T2517] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 809.718522][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.731961][ T2517] usb 4-1: config 0 descriptor?? [ 809.795190][ T2517] hub 4-1:0.0: bad descriptor, ignoring hub [ 809.801222][ T2517] hub: probe of 4-1:0.0 failed with error -5 [ 809.819270][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 809.832273][ T2517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 809.839740][ T2527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 809.855380][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.868771][ T2527] usb 5-1: config 0 descriptor?? [ 809.914755][ T2527] hub 5-1:0.0: bad descriptor, ignoring hub [ 809.924311][ T2527] hub: probe of 5-1:0.0 failed with error -5 [ 809.930855][ T2527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:39:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000003c0000100000000027000000000000009500000000000000e229ba37dd5d601d92d166bafab6811b1f654f46c79aa61fb584febc1ade6152b685f43b4a981dac682dc884b96cc2946c73811454c5b7dbdb7468a321e7749111558bbf1ed3bb439ee2b76b4dda48efd28b50a72681e46381639d322436ddef1c88cff340e0e600c3962cf517f517dfc89414eea234ee76ba92d68a9c7f91a0100e05a7a53bd8182815a26a76296f67a2d565a315f8cf7a0cdbf286e03a8ee29bbd2c280d8c6cf3f2dc67248d18876d66752315adffec50ddcce9c359772120c9"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 11:39:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfeff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc1e, 0x0, @perf_config_ext, 0x400, 0x6, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1003e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 11:39:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nf_conntrack\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r2, @ANYRESHEX=r4], 0x28}}, 0x0) [ 811.074798][ T8393] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r1, 0x400, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf8958855b1a677e85fbcedfda"}]}, 0x38}}, 0x88) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffc, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x84) r2 = getpid() ptrace$setsig(0x4203, r2, 0x9440, &(0x7f0000000100)={0x2d, 0x9, 0x3}) memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}, {&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00006cb900000d0000010000002675ff704ffbe6ec025452", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x80, 0x24000855}], 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) getpgid(r0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="52019b1be2020a51a113b0f98c7b16c751b38c3931e452b0c9d1be1502fde3d61bcc3cde8712cd1f37bd71700100831c9d3eef735adfd1e93882f6080577bda97f973243", @ANYRES16], 0x1a0) sendfile(r4, r4, 0x0, 0x24002e00) [ 811.253607][ T8393] 8021q: adding VLAN 0 to HW filter on device bond303 [ 811.275252][ T2514] usb 4-1: reset high-speed USB device number 10 using dummy_hcd 11:39:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$phonet(0x23, 0x2, 0x1) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xe0e, @rand_addr=' \x01\x00', 0x8c89}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 11:39:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x3f11b000) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 811.361989][ T8405] bond303: (slave veth619): Enslaving as an active interface with a down link [ 811.384158][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:39:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$phonet(0x23, 0x2, 0x1) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xe0e, @rand_addr=' \x01\x00', 0x8c89}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 811.405776][ T2517] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 811.513922][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 811.564155][ T2514] usb 4-1: device firmware changed [ 811.570514][ T2514] usb 4-1: USB disconnect, device number 10 [ 811.607762][ T8439] bond303: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:39:17 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) r6 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]}) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r7, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030476", @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf253fcc642f0200000008000600ed00000088000500030000004400035f31000000000600040007000000060007004e2200000500080001000000140006050000000000000000000000000000000020000380080005007f000001140002006d61637365633000000000000000000008ba7200a80a0000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xd0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x134, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4748}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xdd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4193}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r8, 0x0, 0x80000001, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24048090) [ 811.693839][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 811.744062][ T2517] usb 5-1: device firmware changed [ 811.751916][ T2517] usb 5-1: USB disconnect, device number 11 [ 811.905941][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 811.930482][ T8462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 811.957950][ T2514] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 811.989416][ T8405] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 812.045750][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 812.087502][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:39:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x83) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x6, 0xffc4}, {0x400, 0x4}]}) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x200000000400200) ftruncate(r3, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 812.144108][ T2517] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 812.214243][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 812.334280][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 812.365090][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 812.396694][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.418967][ T2514] usb 4-1: config 0 descriptor?? [ 812.423671][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 812.464812][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 812.546470][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 812.568877][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 812.593749][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.603254][ T2517] usb 5-1: config 0 descriptor?? [ 812.670820][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 812.683486][ T2514] usb 4-1: USB disconnect, device number 11 [ 812.879016][ T2521] usb 5-1: USB disconnect, device number 12 [ 813.249564][ T2514] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 813.469559][ T2521] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 813.509050][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 813.634240][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 813.668851][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 813.700948][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.726551][ T2521] usb 5-1: Using ep0 maxpacket: 32 [ 813.750259][ T2514] usb 4-1: config 0 descriptor?? [ 813.817505][ T2514] hub 4-1:0.0: bad descriptor, ignoring hub [ 813.829198][ T2514] hub: probe of 4-1:0.0 failed with error -5 [ 813.850112][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 813.870283][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 813.884253][ T2521] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 813.913750][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.924594][ T2521] usb 5-1: config 0 descriptor?? [ 813.964390][ T2521] hub 5-1:0.0: bad descriptor, ignoring hub [ 813.971881][ T2521] hub: probe of 5-1:0.0 failed with error -5 [ 813.995462][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:39:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x100000001, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x10, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000800)={{0x2, 0x0, 0x80, {0x1000, 0x2000}}, "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", "2f1fb2a807a9b37573828f3f90f2afb4a3fa3f4595b1cc81062c7686561a8a77a075490d1e0a02119d4be21305e5273edb35b37d3d9beee04f48b76fbc7d6fe5603a525219db4984da4dc52afe774682bab2506158cf6154ed4c284d469fadd7cfbaf32956b0eaa2ff3da96d840d5743f28c1eb090b5e2ed3bb7a0cdf4e775e7903478489441144c6385dfb74eb9b2e96b7a58225549782cb003d0a3b332042cd42688df3cabf1fc5bba9afb5bbc8da0339d0ab42001db13ed1126885d9b34abf81fdae978787a3fced11b6ae4aabdd499852e81e0da1528f84bee51ffb219bb1279866116822258bc75e172879911877e0e7270c69cbb1c97a4f196f75e54512b89562fa012429048debca2cf55d141015f1be088aecb3e6136a73e57a561e95826a48ec2f2767b2cc3ca5ccb87409175489be7a0a26a6f8623fd0ea972da1d783e52ecae59e0ea44976e903b6862bef4bc96cbb1fb86bea83133a487cfec49e1341928073a13c60348ca7b52f982e6174ffcee47fac314f51f39342c384674bccac60e897c57815ec04ffa26edaf197c25e7679178fabc5521d21af7f6eaa97468fc8b588b071fa767ab0d3f0344747cc9a30e0d1c82939ce5d9b5a8f127eb584409d75f495916e3a797fa064082b9ace50b386a5197257390b60dbed6fb5c85b7e04bcad9354b6b0143dd0bdab9eee6a048588814974379857fe4406882b1b18b7c7931b684db2a5e85b915a8cceab290a1af7fd5a9bc5dca0dcea090f7d5fd68c27e3c25ca010e76171e3046f0fd024b493f83547829cd40f4911000576b109c3418b193e244758ac823a401a1bb07ac977d679dc337a52f20655caee192dda7649d746571fa403770c397378390442079afd9d4bb1af27acf2096dd71235b615c1bf84a0b6060d8333f1a537721a9704804aa785ca6ca16300b7896d30f53cf770142dafcd40a1b4bd1923d79a45cc5c9545bb9dff56ccfb5f1adeddb142e6ff3f9bff8be81d145525dc20035197776f59a8d423794ce84758be27b2812ee252d9f797e9efbaa534805c670c067d7ddd935954305e64e3ca5f7100f078d146e7f85037910f2fe1480dba0cd08b64ebc3f9d7a0cc971ec51e6e3544a53c4098d791928fa15788d7935f2785d65915b2be9a358514dc34dfcc716d04a01027788ac5fc1a6ac349eafb27c2a2187d579830cfbb46cb079e96721c082f853cc455edc388faa2e0c1661d1efbb2defe3f2f987ed4c40a4d231e876c869f820dcb6e9af3ca14f4fe8ddbdd69ba8d76ee66cf749fdbe63ba92845de6dcb1f571ef60fc5cf65d8a62a13d39a66b73db54c7ccea9b29fcc999a5053ebfd2a17f875ad875edd18e6e7fe33d364a08eb2fd3f3632b5e3bf4830db4a10b7a7e950874f1e33e857f16e4c495551d7e9c799195a537d58dbe17733bf41c7d6d3ffcb01935cfd36932c19d63ad4dfa49e5fa55838357b77d8da1850dadd7d7c929cdc8b961fb58939fe7d323ad19834bed23d60300aa15c5e36bbf1f88084486f4c973baea483b77b37c8d9cb9c590dad2f18938e7a3bfe1347459e926b91e93f3e4acd33860f6fc3db23947dad86e2036684ee2065ce60e5b0e39668bd7232f7280b303ed4bb477c4121641b2494806a60f59f622270028339019791d28d14ee69b00427f82a00ffa90a0a72f1c4c808ade52b1789cf87ac49420c208d05d9e0219556e326f3087108f6dc4d9dd76025709240fcc7a5224c6a54a88725e0d57e0e55d532f55c046568600e36d8cd44a95d20d2a1d612b422ff7738a8eab8629f7334ca1e974afd6cf991448450f684f007d755475fa9928c4eba192cf7c02ecf7d2d669b2f34bb13d856007def32a348c2902e131d8f0f220e11e68f1318f0e2d684ce9f126d7b43e6209bbcadb50494d6589db92c822710cf78273ebf66b87eae2f8174c562344e5ae854ce83a3af934c1ed6322f4a09477497baa332bbe517581bb13ec93d500365523b1f3040d16a8d0e6445e183558d01560da8eae105fd6f1105c6dabd360ead93d4e17ccdb4d780822d5bb038f9cc467411a90963d0c0282321ff6d77831096ec22dd869a14d59300938602cf61ed4503340f5c2533f6b4f2a01c6b52a8ec616f432653035a800b75443bf279ebd04b9409267cb73b1fb8a43fd8a19be21a0b95a14c8c752f19cd388146dd30fd9d39932b94e84cf3af08005cf2debe76ab6336b84d006c70ad727a6c9ccdd5186a5c09314a9e96ea9ca949ef3c46f5d700904a6b3be0fb02c87befef121c7b396ccb29dfdd748499045fd7fbfaa65325432a95a2fc1e54050823f667c6f03d3b0e56bbb3224bf0464c6fc7a4e5e7b873f7b4b6d28c4b777ab744c84bcbd0158b96bf675acba388b01df1c8bd08c998fe9d45eb21a9f1f88e2506029f8ff2d8d08d443c36408355fce3225dc5b36b2ffcd4efdaf1cf2ffb774745065387bdce5d33f43d54e04fc9914ce0d34f78415a3ba31ea92e5893ec8fa4ec5454d28c6de5d1fe08f125b377e1c4300fad3c66036994ea5616faeb44bfe8f4e3bbc99839382b6c17c62e42666540bf242ba839e5b2068415d0c96c48626441590d14a7f10ae0f01bcdee2dd5ea8ef357ad61e8d23a80da5a300a17d33037bd8bfbb54f0b28c687c8f345f4438a85fd45fe765d19d8230e1fae30d3f974a0ebb52f4b9438df740d33b2aabc3d1372359a81870bbb4103645729a264ef4908dc9ddab264f6ea82199b45e5a53c5a414c03575e295b6971b75b140880b81d86769f71d99af0a9ce057d19e100aa772c54977754f227172b75990ab9f422f938f1f88fe4fd7467717caa8e348b1502df5306452cb51dc1b2962f5c952121342e4b4519210b96d74d091c421949a9d9eeb5f21b3f8fc26c8365d2ea7de3685f72465d6b6d656fdfa0090bff206ecc04e80c16d319311b49df178ee55cc8673c085152ba2e67abd2f709b8253ceea04f2756f165687750dd6c50434220e17855e60437939fdbd4b28624d370bcb142f2f8ebfd54ad512125246c39058fcb136d57be7e8cdbb75aa711c629b4867dc7a88ca138b7fe0a1ae442aac580c3073cda95eca2275f5c14259d0c95a1b8395f8be252bbca21b83bf77adc74d736e0a7f4d6313b2573d952b8349b9738989d29cc7d6e628a183cb043d453a869283505b29b22bc6e77822d357dd738cb46aa3a6f6900a6de679d716c1c284f36c9abf5cc5797aed2154240a48119f0eb001de13f25e6f84de2ca0a242d283ac64401c7deeff145721e08604fb0cf9c136dc3e05b71d01c10d68d6234bf8b0acb2f1be60359fe6fae90e78e5f3e1c7c6f352669a41cdb90cafb88a34ee1a02800b9197e452b8babc3e1d65d22db754178f598d33c85f5a173f9a33569acdc3bde6bf1713bf7ec97b6ecd6995c813c226757e630641c8bda26c6b169512b2796f320dee02bf9d5ae5d6fef050be45e68a3be98e1cbdded9a04103196a4ffe74cafc99b7987397e4e71193cd0f28f33cfcadb8a6b2df21c3fa1828da185c64439c80c8201caa8328dbe2e510c245118164325655887e825a4336a22d33099d500db2035f3434bf6db69436e780385b77e24dc05f647186aff0cfb60abc26bdc3df97bb83b67b5c558c1e8d373c829aa422bc6ee78f42387789a64452f8bc549ca560790bd295d6a5ff11e4af4e3a16a093f56342eb56660338c63aeb940e56d790190565a87ff51e4c1c6826ff0580df2314a62e36cfb1da6db53a442d098ae5fbf5c6df84582e3611ee96972e572a8db6c3d280669381ebfb0e80810787410218f3fcf2238c57f36088e6284506ad34cd3e1c11e1772eb3b16d4b0cc715c3790999536eed7c0057139dff4e41cc9c36809511c9e627326c2ebd24a52056eb8495f95fee7c2dc60a90b58dd24c34be008c045c43a8e7be0ea8bb839455edf16a8d95a523ffe648a5d038f8e48604d2f86c9147fb1e59607b10d218f65f2dffa9ea515740adc88438072d65e28e05df314c6869574a8d6184f70fe9917481bd2037a60dca11426dfe5e02c917a9d52fe0511004200162a0448c79e9fb7111be0a0d2db5c00765d053258cea4533a5ae658791f8195807ee7afd78bc0a69d1892c436431231c35e409fb4e3b3f3f3a034c1cd833cb96a25aef4379c4b9e32707d73fa88233b6057a7bd409876575e94e08f66a599634f04563a219131b1760082e405ed501649a32eaf1ced21e3a7e6ada09622687374cd71797add155e80f90591c3fad248865f0aedafc27b96e341811fa135c653044eb6877fccc23e5ffae2e329af35e034542a4e4a7abd4529bd47ca57623c1e1dec0e9e7d351623385799cf40548e06fb53e488ca3a0271e526afc57a2f80a1fcf8b7f502f087e3ef2497bb115898502cdb63c66dd20acd6860322528dfb9649939cb134012ffd2047263d93546f3855c1d056d9c2616933cc88a157cd8d19318d15c123db97a76bf1688dfc4214af94b45d7b988ab0f88d0375abe9b24bc16655ac6db040a033fb93d6a8ac96e406616d475a00272912f4fac89acca2ea6e8a1d09b3410ff51b74cbc0df22fbcf0215290f92800a3f1221973f2c43e78d0bd11674a09f2c120027c46466cfcf41abe06583e8052d4500ac129c461defc013b80950ecbc5a7d2e41b0373105f6067ff287374cf15e25122a93347b6c4facd5d631f9f3112fb473e91514dd15f9e5103ee135d386e621932ecfbbf93205cf2f07a2216c05b049c07e0ad7fff5b6917438e5d91c35de0254b2fdf2d5800e58326dc0dc5ef8ea717699c8f090b7f8b1fa7d92396dea2de5b502f33f92cedb4f8d91b53ce029f1b9c096337673f3af0e3ae2b6c61cee88bd25ac4a22b5f6659a5f3cf639548b821c247a4a24ac51f77c5c03d3530b7079574a092b7427b8b0b7e66801b2d4d3e9229a24b304d5c88163f1d35b702e402c5428c0223047701a15270a04a40c0b3c15a9e4aac38290750aaa40b52070eeda6b523a2b10803f039bd84d3a55c662cae72827b3e9dcee9f227618328425f643c0f21790b82d9b5e8d3a7037ebd96605793c7232c275da4150106f091ceac2e34deef154ef1e403c801c5d15f9cd80583c0aa3bf28d839df2a5794f850fc682c6ab7f5971cd112511cc1b9244e51190102e753612b2570736d5b78af64c006a3bec4116d449507dbba92d83d7b20413b8f193b7b90349817bbbe42cffdc984c919d713002fcd15ebb92d096e36164cf606fb18f6c6d3ca80eb9c2df232a032ac2ff3ab7e6d773a4d8dc5f0a085880c9f7777912f68077c28e80ca738588b9735535666ac555ca3559b957fe91c9309d7d3c01929b02d8a85c9a9db67803d97bb35a2ad5956ad34dc3770ffed23d0b08e0e67e611d4bd162309fd46959456ee8bdddb22f04eb67fd90dac9422e5c635eb5e34bed86fda286b61a3637fca6be4a5179bd4b15f055c674d2127e3a9bc17d5e475b355bbbfee81e76082e0fefffbc558e91d400546c7f9f2e260e5e50c57e65bac682cc821c818d10e49f07040af3f142c7b88dd97741c48438d71a275f0bb16a8d9264b5a8eedecf9740e10020762cfbee9f775c33a6746c360643c037acd8a97e2ebff2584a75ff213e38a6bf44e4bb9f90bcc46e223b2585c09512a8aa422c9bc9b0f2470eb480a57290d6fb5f255796bd1c137e3cbb57ac2e319817c50f6e989dd1f480bb1907d4b45050a1cc7fd800a3bdea69224e5059f14bb0bc0b3e0b0edd106a7a4b1383a4452f8934a07d918935a398d6ece0972fef86a68401125"}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2002, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) setpriority(0x0, 0x0, 0x0) 11:39:21 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000080)=""/41, 0x29}], 0x5) write$FUSE_STATFS(r3, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x20000}}}, 0x60) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) 11:39:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f000000b080)=[{&(0x7f0000007f40)=""/4096, 0x1000}], 0x1}, 0x10008}, {{0x0, 0x0, &(0x7f000000b3c0)=[{&(0x7f000000b280)=""/81, 0x80}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000016c0)=""/224, 0xe0}, {&(0x7f0000000180)=""/253, 0xef}, {&(0x7f00000017c0)=""/4089, 0xffe}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000001540)=""/199, 0xc7}], 0x5, &(0x7f00000013c0)}}], 0x3, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0xffff) r2 = dup(r1) io_setup(0x9c99, &(0x7f0000000080)=0x0) io_getevents(r3, 0x800, 0x3, &(0x7f0000000280)=[{}, {}, {}], &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x10040, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r6}) [ 815.081071][ T8556] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 815.245561][ T8556] 8021q: adding VLAN 0 to HW filter on device bond304 [ 815.305677][ T2527] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 815.374935][ T8566] bond304: (slave veth623): Enslaving as an active interface with a down link [ 815.407538][ T2521] usb 5-1: USB disconnect, device number 13 [ 815.472735][ T8607] bond304: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 815.593784][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 815.633746][ T2527] usb 4-1: device firmware changed [ 815.639435][ T2527] usb 4-1: USB disconnect, device number 12 [ 815.788505][ T8556] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 815.828734][ T8566] bond304: (slave veth625): Enslaving as an active interface with a down link [ 815.853609][ T2521] usb 5-1: new high-speed USB device number 14 using dummy_hcd 11:39:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000101, 0x0, 0x0, 0x0, 0x400}]}) dup2(r3, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 815.919539][ T8557] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 11:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x806, 0x0) listen(0xffffffffffffffff, 0x3) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x5, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4020c0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x3f, 0x16, 0x9, 0x0, "9805c990ae3d3b2e98a6fcedf4c0f63dd13f1ae84cbf4eb8c502b70246142e25"}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0xff0f, 0x2000, 0x0, {}, {0x0, 0x0, 0xfc, 0x2, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0xffffffff, @mem_offset=0x8001, 0x4}, 0x10ff00, 0x6}) [ 815.986378][ T8645] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 816.062203][ T2527] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 816.103834][ T2521] usb 5-1: Using ep0 maxpacket: 16 [ 816.126810][ T8645] 8021q: adding VLAN 0 to HW filter on device bond305 [ 816.223977][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 816.260733][ T8651] bond305: (slave veth627): Enslaving as an active interface with a down link 11:39:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000740)={'filter\x00'}, &(0x7f0000000240)=0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r5, 0x423, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20022dbd7000fcdbdf2505000000080003000600000008000300050000002c00018014000400ff0100000000000000f7ffffffffffffff0004000000000000000000000000000000000104000180"], 0x54}, 0x1, 0x0, 0x0, 0x400c880}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000480)={@mcast2, 0x0}, &(0x7f0000000640)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000100b8", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000314000280080002009d01000008000200060000000000000000000000000000000000e4133497"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x11e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x70}}, 0x0) [ 816.274825][ T2521] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 816.310980][ T8691] bond305: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 816.327797][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.336504][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 816.343942][ T2521] usb 5-1: config 0 descriptor?? [ 816.384710][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 816.483636][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 816.500479][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 816.510453][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.521245][ T2527] usb 4-1: config 0 descriptor?? [ 816.566279][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 816.598400][ T2527] usb 5-1: USB disconnect, device number 14 [ 816.628895][ T8645] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:22 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioprio_set$pid(0x2, r0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) r6 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760040036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]}) r7 = syz_genetlink_get_family_id$ipvs(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="7a5bc7632214734ebb2f08087be1e82c9f4f978bedc92ef7476cb368e6274d869269821a2a8288ad1254eec3657e9372e5ecc976110484234a98ca65e88a8ee48b5317be872b3b3527d5a983e06baea51dc84ee394d431ce3b725bb669a29b271780331f720b617a994bc2aad97bc800f7e51045189b2d2c432dc255b1840304013a2500000000", @ANYRES16, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20007e0e704400080006000611000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xd0) 11:39:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0xffffffff, @private0, 0x79}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x11, 0x40000000}, 0x9c) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1, 0x0, 0xfffffffffffffdc2}}], 0x1, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="c7de788b00"], 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}]}]}, 0x20}}, 0x4000800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x200000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x184, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0xfffffffffffffdcb, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0xc0}, 0xc041) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newlink={0xe0, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x304}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x100}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf1483}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, [], 0x16}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'geneve1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8810}, 0x0) [ 816.732645][ T8651] bond305: (slave veth629): Enslaving as an active interface with a down link [ 816.772726][ T2514] usb 4-1: USB disconnect, device number 13 [ 817.130864][ T8734] debugfs: Directory '8734-5' with parent 'kvm' already present! [ 817.227365][ T2527] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 817.347404][ T2514] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 817.493469][ T2527] usb 5-1: Using ep0 maxpacket: 32 [ 817.593624][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 817.635616][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 817.649468][ T2527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 817.659286][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.669958][ T2527] usb 5-1: config 0 descriptor?? [ 817.714957][ T2527] hub 5-1:0.0: bad descriptor, ignoring hub [ 817.721333][ T2527] hub: probe of 5-1:0.0 failed with error -5 [ 817.721386][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 817.739566][ T2527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 817.750472][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 817.760217][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.788214][ T2514] usb 4-1: config 0 descriptor?? [ 817.834495][ T2514] hub 4-1:0.0: bad descriptor, ignoring hub [ 817.840673][ T2514] hub: probe of 4-1:0.0 failed with error -5 [ 817.860828][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 11:39:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x51) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000010000000000", @ANYRES32=r5, @ANYBLOB="ff03000000000000240012800b000100627269646765000014000280080001000004000008000500000001"], 0x44}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r6, 0x400, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf8958855b1a677e85fbcedfda"}]}, 0x38}}, 0x88) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20402}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 11:39:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:25 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioprio_set$pid(0x2, r0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) r6 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760040036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]}) r7 = syz_genetlink_get_family_id$ipvs(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="7a5bc7632214734ebb2f08087be1e82c9f4f978bedc92ef7476cb368e6274d869269821a2a8288ad1254eec3657e9372e5ecc976110484234a98ca65e88a8ee48b5317be872b3b3527d5a983e06baea51dc84ee394d431ce3b725bb669a29b271780331f720b617a994bc2aad97bc800f7e51045189b2d2c432dc255b1840304013a2500000000", @ANYRES16, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20007e0e704400080006000611000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xd0) 11:39:25 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xb83, 0x0) dup2(r0, r1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x5, 0x0, 0x89ed}) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'system.', '8!+/%\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x1) 11:39:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 819.069755][ T2517] usb 5-1: USB disconnect, device number 15 [ 819.130837][ T8800] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 819.180393][ T8800] 8021q: adding VLAN 0 to HW filter on device bond306 [ 819.247704][ T8805] device bridge8 entered promiscuous mode 11:39:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x301b02, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x5) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfe}) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x4000000000000016, &(0x7f00000004c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r6, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90a20204}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b5c7b32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ptrace(0x4206, r4) ptrace(0x4208, r4) tkill(r4, 0x10) [ 819.330482][ T2527] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 819.382226][ T8845] bond306: (slave veth631): Enslaving as an active interface with a down link [ 819.423287][ T2517] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 819.464368][ T8852] bond306: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:39:25 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f00000001c0)="c7cfcaaa22e10542fca5c0195350f15147657e0b4afad004a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9d4e3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e07032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d118473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xd1, 0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = dup(r6) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="013c38db1215000000000000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x1010, &(0x7f0000000340)='\x00\xc0ph\x1b\xe4g\xf4\xb1\x1f\xf8\xd2\xfe.\xc7+/\xb4\x1dR?\xe3\x99\xb6\xb15L%\x82\xe7J\xff\xa4\xe3\xa8\xa5\x94\x13_\xe4\f\xda\xd7d\xbb\xf4\x0e\xd1\x7f\x00\x14.XWn\x87\xcd\xe3I\xae\xb0\xa7\xf2$g\bG\xb7\xd4\x92\xba\xfa\xa7\xd3\x8bi0\xde\xbai\xcc\xa4\x1b^9\xcb\xc8\x10\xb0\xb5MN\xf4\v\x0f\x9c;\x05\n\xc0\xef\x8f\x1d\xc8\xce\x94\xbbrX\xfeCA\xe22Y\x17^\xac\xb2') setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 819.623264][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 819.666141][ T2527] usb 4-1: device firmware changed [ 819.680145][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 819.685713][ T2527] usb 4-1: USB disconnect, device number 14 11:39:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x40, 0x0, 0x2}, {0x0, 0x7f}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6, 0x3500, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = creat(0x0, 0x0) lseek(r3, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x1a0) fallocate(0xffffffffffffffff, 0x100000003, 0xe, 0x0) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttynull\x00', 0x80, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) socket(0x1a, 0x800000003, 0x0) [ 819.777203][ T8800] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 819.814624][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:39:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x20000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 819.837859][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 819.837878][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.842795][ T2517] usb 5-1: config 0 descriptor?? 11:39:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x5, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x4, 0x4) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8f47792ae9a9b9e85fc073bcd841cfd8efdb5b2aa3eefc4f1bcae3900a7ade8239a1884150421c3e8caae25b88d8af223dc23d3e03237e7d7b7c0d295c599863fe"], 0x10132) 11:39:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) mq_getsetattr(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 819.954617][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 819.974618][ T8894] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 820.045660][ T8894] 8021q: adding VLAN 0 to HW filter on device bond307 [ 820.083535][ T2527] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 820.152959][ T8918] bond307: (slave veth635): Enslaving as an active interface with a down link [ 820.166672][ T2517] usb 5-1: USB disconnect, device number 16 [ 820.247814][ T8937] bond307: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 820.323512][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 820.438924][ T8894] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 820.458878][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 820.485008][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 820.499057][ T8918] bond307: (slave veth637): Enslaving as an active interface with a down link [ 820.508594][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.525663][ T2527] usb 4-1: config 0 descriptor?? [ 820.574394][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 820.743247][ T2517] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 820.778086][ T2527] usb 4-1: USB disconnect, device number 15 [ 821.004462][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 821.134243][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 821.147422][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 821.158123][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.167959][ T2517] usb 5-1: config 0 descriptor?? [ 821.215027][ T2517] hub 5-1:0.0: bad descriptor, ignoring hub [ 821.221043][ T2517] hub: probe of 5-1:0.0 failed with error -5 [ 821.234844][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 821.343417][ T2527] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 821.593358][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 821.733588][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 821.746747][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 821.758580][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.771616][ T2527] usb 4-1: config 0 descriptor?? [ 821.835183][ T2527] hub 4-1:0.0: bad descriptor, ignoring hub [ 821.841201][ T2527] hub: probe of 4-1:0.0 failed with error -5 [ 821.858825][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 822.544624][ T2514] usb 5-1: USB disconnect, device number 17 11:39:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/161) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00\x00\x00\x00\x00\x00\x00\a ', @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002800270d000000000400000000000000", @ANYRES32=r9, @ANYBLOB="2300bb8e2db10000000700000000028100000500000000ff03000000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, 0x1, r9}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x401, 0x4, 0x25dfdbfe, {}, [@IFLA_EVENT={0x8, 0x2c, 0x1000}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 11:39:29 executing program 5: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f000059a000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') 11:39:29 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@dev, r0}, 0x14) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x10000, 0x0) fcntl$setpipe(r2, 0x407, 0x80000000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x460080, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf8958855b1a677e85fbcedfda"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x88) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fanotify_init(0x2, 0x101000) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x804) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@dev, r0}, 0x14) 11:39:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x3ffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 823.096546][ T8999] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 823.189724][ T8999] 8021q: adding VLAN 0 to HW filter on device bond308 [ 823.199496][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.261188][ T9011] bond308: (slave veth639): Enslaving as an active interface with a down link [ 823.275231][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.292728][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x78, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @dev}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x763, @local, 0x9e8}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000400)=0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x64, @rand_addr=' \x01\x00', 0x9}}}, 0x90) [ 823.313375][ T2514] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 823.389438][ T9011] bond308: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 823.422958][ T2526] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 823.573925][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.591015][ T2514] usb 4-1: Using ep0 maxpacket: 16 11:39:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$usbmon(r4, &(0x7f0000000040)=""/195, 0xc3) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000002840)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, @in], 0x3c) 11:39:29 executing program 5: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x60, 0x0, 0x114, 0x0, 0x7], 0x2, 0x0, 0x200, 0x0, 0x7fffffff}) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xe4) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x140d, 0x402, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x81, 0x4, 0x1, 0x6}, 0x37, [0x401, 0x8001, 0x0, 0x1ff, 0x0, 0x2, 0x81, 0x4989, 0x7, 0x80000001, 0x2df, 0x1, 0x40, 0x80000001, 0xe2, 0x4, 0x9, 0x8, 0x8, 0x8, 0x3d5, 0x400, 0x3, 0x5, 0x7f, 0x9, 0xb2c0, 0x8, 0x7ae, 0x8, 0x1, 0x81, 0x5, 0x5, 0x401, 0x10, 0xfffffffd, 0x9, 0x401, 0x4, 0x5, 0x800, 0x8001, 0x7, 0x4, 0x0, 0xd650, 0x4, 0x2, 0x4, 0x0, 0x8, 0xfffffffc, 0x10001, 0x5, 0x9, 0x8, 0x5, 0x100, 0xcb, 0x800, 0x401, 0x5, 0x9], [0x0, 0xfffffffb, 0xfff, 0x9, 0x5, 0xc17, 0x7, 0x2, 0x0, 0x7, 0x1, 0x7f, 0x200, 0xfffffff8, 0xf, 0x6, 0x3f, 0x7, 0x7, 0x0, 0x0, 0xfffffff9, 0x200, 0x4, 0x3, 0xfffffffb, 0x7fff, 0x2, 0x101, 0x3, 0x3ff, 0xe2e0, 0x3, 0x9, 0x1, 0x8001, 0x6, 0x5, 0xffffff7f, 0x9, 0x9, 0x8, 0x0, 0x4, 0x20, 0x4, 0x80, 0xffffffff, 0x40000, 0xffff, 0xfffffe01, 0x8000, 0x6, 0xffff, 0x6, 0x1, 0x0, 0x20400, 0x2, 0x9, 0x4, 0x7, 0x1, 0x121], [0x2, 0x7, 0x6, 0x401, 0x200, 0x0, 0x8, 0x6, 0xdfce, 0x0, 0x97, 0x1000, 0x9, 0x0, 0x0, 0x2, 0x40, 0x3a2d1856, 0x2, 0x6, 0xd0, 0x7, 0x400, 0x6, 0x10001, 0x400, 0x7f, 0x16, 0x6, 0x2, 0x1, 0x2, 0x2, 0x7f, 0x23, 0x3f, 0x2, 0x9, 0x3, 0x2, 0x9, 0x90, 0x7fffffff, 0x7fffffff, 0x9, 0xd4b3, 0x1, 0x1, 0x7fff, 0xffffffff, 0x7, 0x1ff, 0x4, 0xf13d, 0x1, 0x4, 0x0, 0x66, 0x830, 0x400, 0x9, 0x8000, 0x2, 0x8], [0x200, 0x3, 0x7f, 0x4, 0x4, 0x3f, 0x3, 0x9, 0xfffffffa, 0xfe, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x93c4, 0x1ff, 0x8919, 0x1, 0x7f, 0x80000001, 0x3, 0x9, 0x0, 0x800, 0x97a, 0x7, 0x4, 0xfffff800, 0x5, 0x877, 0x1, 0x0, 0x9, 0x3, 0x1, 0x8b4, 0x400, 0x7, 0x80, 0x1000, 0x18b6151, 0x7fff, 0xff, 0x7fffffff, 0x3, 0x401, 0x7, 0x3f, 0x1ff, 0x2, 0xff, 0x81e, 0x7, 0x0, 0x0, 0x2, 0x40, 0x6, 0x10001, 0x9, 0xfff, 0x4b, 0x7fff]}, 0x45c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x1102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[0x0, &(0x7f0000000800)='\x00'], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y']) ptrace$setopts(0x4206, r0, 0x0, 0x2) [ 823.618891][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.633308][ T2514] usb 4-1: device firmware changed [ 823.636397][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.650466][ T2514] usb 4-1: USB disconnect, device number 16 [ 823.681475][ T2526] usb 5-1: Using ep0 maxpacket: 16 [ 823.701110][ T8999] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000300)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000000400000000000000000000000258ffff0000f9e54a650ddefb3e571ca860773605120000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000300)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r4}}}], 0x28}}], 0x1, 0x0) flistxattr(r2, &(0x7f0000000140)=""/49, 0x31) r5 = socket(0xa, 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000300)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) 11:39:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 823.825264][ T2526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 823.891818][ T9107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 823.909484][ T2526] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 823.951482][ T9103] IPVS: ftp: loaded support on port[0] = 21 [ 823.970085][ T9107] 8021q: adding VLAN 0 to HW filter on device bond309 [ 823.998818][ T9111] bond309: (slave veth643): Enslaving as an active interface with a down link [ 824.006448][ T2526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.023901][ T2514] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 824.048727][ T9107] bond309: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 824.091192][ T2526] usb 5-1: config 0 descriptor?? [ 824.170202][ T2526] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 824.269052][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 824.296666][ T9107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 824.342372][ T9107] 8021q: adding VLAN 0 to HW filter on device bond310 [ 824.383029][ T2518] usb 5-1: USB disconnect, device number 18 [ 824.393099][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:39:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf0f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 824.483103][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 824.532206][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.560892][ T9238] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 824.562126][ T2514] usb 4-1: config 0 descriptor?? [ 824.674894][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 824.680528][ T9238] 8021q: adding VLAN 0 to HW filter on device bond311 [ 824.711392][ T9158] IPVS: ftp: loaded support on port[0] = 21 [ 824.754510][ T9245] bond311: (slave veth647): Enslaving as an active interface with a down link [ 824.780532][ T9238] bond311: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 824.877435][ T2526] usb 4-1: USB disconnect, device number 17 [ 824.993037][ T2518] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 825.029437][ T9245] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 825.233259][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 825.354669][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.368518][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 825.379222][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.389531][ T2518] usb 5-1: config 0 descriptor?? [ 825.433802][ T2518] hub 5-1:0.0: bad descriptor, ignoring hub [ 825.445004][ T2518] hub: probe of 5-1:0.0 failed with error -5 [ 825.451842][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 825.465126][ T2526] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 825.722888][ T2526] usb 4-1: Using ep0 maxpacket: 32 [ 825.854069][ T2526] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.874345][ T2526] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 825.886985][ T2526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.898758][ T2526] usb 4-1: config 0 descriptor?? [ 825.943741][ T2526] hub 4-1:0.0: bad descriptor, ignoring hub [ 825.949919][ T2526] hub: probe of 4-1:0.0 failed with error -5 [ 825.957516][ T2526] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 11:39:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000140)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0", 0x7a}, {&(0x7f0000001940)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a56a3ae461b9528b039a4f69e204b182765bfcff36add10caad94fd56acc52258ccc79", 0x4f}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d3", 0x1}], 0x1}}], 0x2, 0x884) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 11:39:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf10, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 826.178395][ T9324] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 826.237526][ T9324] 8021q: adding VLAN 0 to HW filter on device bond312 [ 826.291522][ T9362] bond312: (slave veth651): Enslaving as an active interface with a down link [ 826.316401][ T9324] bond312: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 826.383216][ T2521] usb 4-1: reset high-speed USB device number 18 using dummy_hcd 11:39:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, 0x0) ptrace(0x4208, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000003c0)={&(0x7f0000000340)="e15bde57396b91e3e6b66a5c8bfd99249a773d5294ad008426a23337fc0b21422419de5b42e1e9c6a48388ce687056d86f6db4992f9cc27eff9abc3e78839500682efe762bbc19552f2794a378440e5c4be83e89025977145e56eb46ca3a79e174360ad372", 0x65}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300), 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x200048c0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000080)={r5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) [ 826.477342][ T9362] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 826.511794][ T9362] 8021q: adding VLAN 0 to HW filter on device bond313 11:39:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf11, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 826.618137][ T9420] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 826.639520][ T2521] usb 4-1: Using ep0 maxpacket: 16 11:39:33 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000100e100000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c000280080001e3", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) [ 826.685894][ T2521] usb 4-1: device firmware changed [ 826.695262][ T9420] 8021q: adding VLAN 0 to HW filter on device bond314 [ 826.706095][ T2521] usb 4-1: USB disconnect, device number 18 [ 826.808884][ T9461] bond314: (slave veth655): Enslaving as an active interface with a down link 11:39:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x47, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c4000002b74a800000000000000bbc8248fd9b3fb0c9a50e7724ca65a043494609f2309e46ca7723452bee131e4034b33531249c082e8f7355734d2c76b8ecfa1bcd0fd74aaaa4d", @ANYRES16=r7, @ANYBLOB="01000000000000000000030000000500040000000000"], 0x1c}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f00000000c0)=0xe8) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x144800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, [], 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) [ 826.869304][ T9420] bond314: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 826.973480][ T2526] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 827.057149][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 827.077873][ T2521] usb 4-1: new high-speed USB device number 19 using dummy_hcd 11:39:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x6, 0x2, 0x5, 0x4000, 0xffffffffffffffff}) dup(r3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xf8, r7, 0x1}, 0xf8}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x150, r7, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xb6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5f}, {0x6, 0x16, 0x3ff}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x96d}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x3}, {0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x24004910}, 0x40001) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x142c1d58, 0x20000000fb, 0x0, 0x0, 0x0, 0x3], 0x100000, 0x10504}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 827.188966][ T9461] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 827.241811][ T9461] 8021q: adding VLAN 0 to HW filter on device bond315 [ 827.242648][ T2526] usb 5-1: Using ep0 maxpacket: 16 [ 827.292991][ T2526] usb 5-1: device firmware changed [ 827.305042][ T2526] usb 5-1: USB disconnect, device number 19 [ 827.342923][ T2521] usb 4-1: Using ep0 maxpacket: 16 [ 827.360226][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() ptrace$setsig(0x4203, r1, 0x9440, &(0x7f0000000100)={0x2d, 0x0, 0x3}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x44050) memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)=ANY=[@ANYBLOB="1d000000897a5c76c912817ac9d8ea463222c09d909058000000000000000000002e24aee3e4b8381906fe9805c8f8e700be5ce043f2b2cc06581fa63256fc"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1}, {&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000080)}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000002675bf704ffbe6ec025452", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x80, 0x24000855}], 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) syz_genetlink_get_family_id$batadv(0x0) getpgid(r0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="52019b1be2020a51a113b0f98c7b16c751b38c3931e452b0c9d1be1502fde3d61bcc3cde8712cd1f37bd71700100831c9d3eef735adfd1e93882f608", @ANYRES16], 0x1a0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000b80)="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", 0xf00) sendfile(r2, r2, 0x0, 0x24002e00) 11:39:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf12, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 827.463071][ T2521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 827.492847][ T2521] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 827.502050][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.569074][ T2521] usb 4-1: config 0 descriptor?? 11:39:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x88) clone(0x80000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x80ba4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x128, 0x0, 0x0, 0x0, 0x128, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48], 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) read(r0, &(0x7f0000000000)=""/40, 0x28) [ 827.634707][ T2521] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 827.692778][ T2526] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 827.741110][ T9597] 8021q: adding VLAN 0 to HW filter on device bond316 [ 827.843500][ T2521] usb 4-1: USB disconnect, device number 19 [ 827.855666][ T9603] bond316: (slave veth659): Enslaving as an active interface with a down link [ 827.900004][ T9640] bond316: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 827.962713][ T2526] usb 5-1: Using ep0 maxpacket: 16 [ 828.082992][ T2526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 828.128257][ T2526] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 828.172658][ T2526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.225684][ T2526] usb 5-1: config 0 descriptor?? [ 828.263700][ T2526] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 828.367006][ T9597] validate_nla: 1 callbacks suppressed [ 828.367015][ T9597] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 828.440761][ T9603] bond316: (slave veth661): Enslaving as an active interface with a down link [ 828.453103][ T2521] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 828.474480][ T2518] usb 5-1: USB disconnect, device number 20 [ 828.693539][ T2521] usb 4-1: Using ep0 maxpacket: 32 [ 828.812908][ T2521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 828.831331][ T2521] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 828.843108][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.852741][ T2521] usb 4-1: config 0 descriptor?? [ 828.893832][ T2521] hub 4-1:0.0: bad descriptor, ignoring hub [ 828.900150][ T2521] hub: probe of 4-1:0.0 failed with error -5 [ 828.942745][ T2521] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 829.048913][ T2518] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 829.303305][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 829.422610][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 829.453517][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 829.473015][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.493050][ T2518] usb 5-1: config 0 descriptor?? [ 829.533526][ T2518] hub 5-1:0.0: bad descriptor, ignoring hub [ 829.539665][ T2518] hub: probe of 5-1:0.0 failed with error -5 [ 829.573069][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 829.877727][ T2518] usb 5-1: USB disconnect, device number 21 11:39:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079d4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@private1, @in=@remote, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x2b}, {0x0, 0xbd, 0x0, 0xfffffffffffffffe, 0x1bea40, 0x0, 0x8000}, {0x0, 0x400, 0x6}, 0x1, 0x6e6bb6, 0x0, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@multicast1, 0xffffffff, 0x0, 0x2, 0xf9, 0x0, 0x4}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'vcan0\x00', {0x4}}) socket$inet(0x2, 0x6, 0xfe9) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x2100, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x3182020000000010, 0x0, 0x8800000) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:39:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf13, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 830.252716][ T2521] usb 4-1: USB disconnect, device number 20 [ 830.314387][ T9706] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 830.467502][ T9706] 8021q: adding VLAN 0 to HW filter on device bond317 11:39:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000400)=0x6}) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e000000214000300fe80000000000000000000000000000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x4040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 830.573347][ T9713] bond317: (slave veth663): Enslaving as an active interface with a down link [ 830.582684][ T2517] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 830.592406][ T2521] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 830.631837][ T9749] bond317: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:39:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079d4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@private1, @in=@remote, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x2b}, {0x0, 0xbd, 0x0, 0xfffffffffffffffe, 0x1bea40, 0x0, 0x8000}, {0x0, 0x400, 0x6}, 0x1, 0x6e6bb6, 0x0, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@multicast1, 0xffffffff, 0x0, 0x2, 0xf9, 0x0, 0x4}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'vcan0\x00', {0x4}}) socket$inet(0x2, 0x6, 0xfe9) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x2100, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x3182020000000010, 0x0, 0x8800000) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 830.806549][ T9706] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 830.843082][ T2521] usb 4-1: Using ep0 maxpacket: 16 [ 830.855109][ T9713] bond317: (slave veth665): Enslaving as an active interface with a down link [ 830.864283][ T2517] usb 5-1: Using ep0 maxpacket: 16 11:39:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf14, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 830.963042][ T2521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:39:37 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4487, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001900080028bd7000ffdbdf251d01060008000a00", @ANYRES32=r7, @ANYBLOB="9b105a8a30ddcd73c50ce6e922889c6b5ab091a136fc7ef7848d3b5767ef5ba4e8ddb464c361bc42cd6462e4660e6cb7ef3cc7d60138bad57a2a2c79d19c4438858fe6c0326779e1a6134e9edacff3f4829b62442bd720cfe600a6dc200811976bb7ec15ae2cc674fa6d9351e9bb23000000bbd374730d7ba393bbff11853dfada54d2e120329f7e86317c5bac9f2f05078a8b5bc3fe770bb304099f4dc0bef5b42c0854d7082d06b034ee586d9891860864e90858f801693a4177d8bcefcc70ec3ba4deffab85cef217a8c4553724a6f6ca0836a473a1b74aa1724a6e46f98ca4d712fec1489eb7b5c5e5071820b3a387fe7cdcaabf63ee65fd9ee0a23c95cc780f32906764bb6cede1575338cd5cb63d325c43fda541fbd8aff892b853ff885deff588f05fbb6a5750d1a598ce6e020000000000000090280b74d9f30e898cdc522223ec6e6d8b1648098876048e6b745ef8c2879d3ef3ac8264f657952998796bb924aa3e1150e6146cdcd8d609af62b20da77739430194073e88d5b33e7e44bf73f9883330139422fd5d68c6f947720000a3ba4788292d69a89b2900"/440], 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r9, @ANYBLOB="26b67dde2ef19f140fb174abf43f3603e903b297629b59be6cac8347e490b29f1fd5cec42332c228a3c39b98ba533a026a21d1cd3366f37c2ff711f0b51816576417f1bfc7e81efb2dd64a453fbce19b7318847723774e901547ec321c8985ba60abf4903a80f38a6d171890b05779b50328a12865a72d0daa115ea7757245160d8ed50da17c6b4269f052af05c4dec6f1523963b77f43e29f575deadbdecd94f4a3a6987828de1924dd50cf1de0435756fa93cea7a1c4fb7a719cf0d5ff7b30fefe5108e5237557c8bf30d5f1a3e7", @ANYBLOB="5453d303368c105f3a901f98d6f9729845179d37f4d9f68dbcc301c6339af8ab9f76ea5d01004ab843443e0b3341d18793dd15104362"], 0x8c}}, 0x8040) [ 831.004587][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 831.010285][ T2521] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 831.036584][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:39:37 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) close(r1) [ 831.049168][ T9781] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 831.061251][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.070207][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.083106][ T2517] usb 5-1: config 0 descriptor?? [ 831.110669][ T2521] usb 4-1: config 0 descriptor?? [ 831.127252][ T9781] 8021q: adding VLAN 0 to HW filter on device bond318 [ 831.176717][ T2521] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 831.218065][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:39:37 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) close(r1) [ 831.274232][ T9790] bond318: (slave veth667): Enslaving as an active interface with a down link [ 831.310923][ T9823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.378621][ T2521] usb 4-1: USB disconnect, device number 21 [ 831.401126][ T2517] usb 5-1: USB disconnect, device number 22 11:39:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000ec00", @ANYRES32=0x0, @ANYBLOB="01000200bfc40904e300006c0012800e00010069703665727370616e00000058000280050008000900000006000f00010100000400120014000700fe8000000000000000000000000000bb060010000000000014000700ff0200000000000000000000000000010500160001000000060003000800000008000a00113b8fcbd8fc67d6d22eb0bc32c5d5800000005e1d00ede6e778e6ec3188b8310b568f2d52ecbecb6fae250ca62771a197a36f31c3f1651f51e40e64dafaaef866c003d23e18021fe3e3a898cd173468ccf6e8fa4a9910c06239cf89"], 0xd8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 831.462619][ T9829] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.494878][ T9821] bond318: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 831.750085][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.771328][ T9823] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 831.796168][ T9781] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:38 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) fcntl$addseals(r0, 0x409, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x881, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000000)) msgget$private(0x0, 0x400) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00390000000099ddd14a9a36962c87a16c6322da86e34f0790e841ef95a2fb681149ff8f8705543e1c87c624d3589f1b20092302d1919cb724"], 0x1, 0x0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) [ 831.864721][ T9790] bond318: (slave veth669): Enslaving as an active interface with a down link [ 831.942467][ T2521] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 831.982459][ T2517] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 832.195997][ T2521] usb 4-1: Using ep0 maxpacket: 32 [ 832.262301][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 832.314230][ T2521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.348371][ T2521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.379128][ T2521] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 832.421312][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.422572][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 832.456242][ T2521] usb 4-1: config 0 descriptor?? [ 832.459382][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 832.471019][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.481650][ T2517] usb 5-1: config 0 descriptor?? [ 832.494037][ T2521] hub 4-1:0.0: USB hub found [ 832.533290][ T2517] hub 5-1:0.0: bad descriptor, ignoring hub [ 832.539297][ T2517] hub: probe of 5-1:0.0 failed with error -5 [ 832.569532][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 832.792427][ T2521] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 832.801128][ T2521] usbhid 4-1:0.0: can't add hid device: -22 [ 832.832394][ T2521] usbhid: probe of 4-1:0.0 failed with error -22 [ 833.883416][ T2521] usb 5-1: USB disconnect, device number 23 11:39:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x9, 0x0, 0x0, 0x204, 0x0, 0x0, 0x6, 0x1]}, 0x5c) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x4d0e, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, [], 0x33}, 0x2}, {0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0xce21, 0xfffffffc, @mcast1, 0x916d}, {0xa, 0x4e23, 0x8651, @empty, 0x7}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffffffc]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, 0x0, 0x0) 11:39:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf15, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000700)='/dev/hidraw#\x00', 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000600)={0x200, 0x401, 0xff, 0x55, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000640)={r5}) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '\x00'}, 0x0, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000006c0), &(0x7f0000000740)=0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ocfs2_control\x00', 0x420403, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x2) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000000)) 11:39:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 834.229419][ T9899] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 834.310698][ T9899] 8021q: adding VLAN 0 to HW filter on device bond319 [ 834.389087][ T9947] IPVS: ftp: loaded support on port[0] = 21 [ 834.420286][ T9918] bond319: (slave veth671): Enslaving as an active interface with a down link [ 834.442386][ T2527] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 834.493986][ T9946] bond319: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 834.524041][ T2521] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 834.692211][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 834.752604][ T2527] usb 4-1: device firmware changed [ 834.765837][ T2527] usb 4-1: USB disconnect, device number 22 [ 834.782172][ T2521] usb 5-1: Using ep0 maxpacket: 16 [ 834.811179][ T9899] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 834.899810][ T9918] bond319: (slave veth673): Enslaving as an active interface with a down link [ 834.902692][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:39:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf16, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 835.012269][ T2521] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 835.031873][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.058006][ T2521] usb 5-1: config 0 descriptor?? [ 835.078529][ T9998] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 835.103940][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 835.172118][ T2527] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 835.176698][ T9998] 8021q: adding VLAN 0 to HW filter on device bond320 [ 835.290425][ T9905] IPVS: ftp: loaded support on port[0] = 21 [ 835.310484][ T2521] usb 5-1: USB disconnect, device number 24 [ 835.333472][T10001] bond320: (slave veth675): Enslaving as an active interface with a down link [ 835.405052][ T9998] bond320: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 835.422280][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 835.542466][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 835.570385][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 835.599523][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.625591][ T2527] usb 4-1: config 0 descriptor?? [ 835.693237][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 835.810248][ T7] tipc: TX() has been purged, node left! [ 835.840013][ T9998] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 835.862106][ T2521] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 835.888250][ T9998] 8021q: adding VLAN 0 to HW filter on device bond321 [ 835.919229][ T2527] usb 4-1: USB disconnect, device number 23 11:39:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf17, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 836.101539][T10106] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 836.107599][ T2521] usb 5-1: Using ep0 maxpacket: 32 [ 836.255383][T10106] 8021q: adding VLAN 0 to HW filter on device bond322 [ 836.255677][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 836.275713][ T2521] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 836.287572][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.299901][ T2521] usb 5-1: config 0 descriptor?? [ 836.343020][ T2521] hub 5-1:0.0: bad descriptor, ignoring hub [ 836.350089][ T2521] hub: probe of 5-1:0.0 failed with error -5 [ 836.378989][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:39:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4ad4ad658d861214acba1f9bc62400000034d08bf49fc972d31667cf3a5b4f02c39165e4ccd04f878e2359fe347b96b23c53927d0a8fc8688a85f79c5c098b0000000000000003f28afaba984ebf5f4af19500cf42add3921f72d50ca3a9a4c5ae55b55268b312ab5a2dab8d8dfabe2abeba1485db342484a8eeeed0cc681566da054a665f2817ede90b21707361f35ee550c8aa8a531ea975ce2b0e9f9450a31b97fbfd6f53a7e99dcf64bdf9648cb11d6492748438395d53ac5dc34aa184e65b838d876142a8039d5b99cfad0e8e0e9366a68cf497d5cb29781eacf2a9d20fd32988e8bd4dd515b53314dcf3523c3b028c7355de6b86353ae7bbe3a47dbc023f17e1af3ab23e9b16776b98b5a58ef89ceb2d454334e1074209a4e22af967d2ac5a142b54115248d96eac2dcbc02f385837b39913c66a1a15fa79e1b523bd6f1e7bf2f5aaefc1d9f04b11e0cbef5373079735a2c42fe2ad20475b9c8ef105c373686ebd8f3bee474eef6b3897b659af0cc8ea00000041ffa43bf5b03c96ff836a1ba4d6bd213a26727a08d2f0f5946b6dd2e5499b193d7e78dbde9aef578b46a573ef4cc98c8fa0168f8ac38d3df6979df5f3903e2719e86e614ce5e1408f6a938dc8699e2ecacaaaf601a2686a7c830caab76a93af76828e2656769694b0bfd4a111c11270bfa004564ea16a902b50f84b7e3abd581396057f7c2720d6b27a1ae8532558fba48b130e02d0b75f7a3265833450e08d424f8b2557d57138f9ad58e4af9d5c357a8c5d0ac58e0000000000000000000000000000d244539d05b9e9896a49a0cfa91e14b14f822bd1546c8980ae228f520e2f820a7c33011a1f2202d61ca2326e65a703a1ecc3681ab9e99b3ed0c49f486065a4cac893e3a8599655ef3798203c662fbd00e559322b97e78219f29c2206b4b37f061ec93cc7cf6ac1eda94534b5717260eaa482943db9931790097910b00000608180a99f2b3f8376c6617f9d282d976ea3206b66042d2d537b047732568d88035ae1ce9ee96d42d8df07f739fec7522f3d318a7cd06ec3ce607bd750da3cb3a7162af835980dc0182025de2c0bc31bf5b59cba635272a5a298ecea8ded225db20f98cad55ccce164d7defcb2a13da9f25dafbfa76ae4b36620bd4117b8b3c1f78d82b0c48d8105fab3514b0568007a37febfa3c5e98ba52b1a0b1054d7fd5633f1fee5b752f08703b72589997e6d0da264711cdcc2f5613236aed18f1af9076cee4c9d45266745717494c6aef9245c0870a1c278c73687963a0159ba7a4809dc7bbb68d8723c9a", @ANYRES16=r1, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xd, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40088d6}, 0x20000000) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000480)={0x0, &(0x7f0000000540)="638c2299826f918ede8a55c66f5ad38e0c47e75b49f61652feade95abe96474bcf37ceff5a8ff52ccd3d1952f2d20d5682fa28fd635a45192f94d16f60e11b6fc094ae90d294678b37d5d06d4cad06e527b6a0fc6cc9986a2e2223a2f2fe904c7199e3dc0c55d4af939f06d2102c865bffbdad2fd0f8086c876c4e500e97dc3eb80edd405fde", 0x86}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80004c82}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8001) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x58}}, 0x800) [ 836.436050][T10110] bond322: (slave veth679): Enslaving as an active interface with a down link [ 836.467995][T10146] bond322: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 836.529306][ T2527] usb 4-1: new high-speed USB device number 24 using dummy_hcd 11:39:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) flock(r0, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001600ff4700000000000000000a5891ac58fdbc3b8c6802f4d088b3c35f07fd6d50fd951c7326c7f94340ed7aeacfdd1794206dd06684bfcf8c52b85fdf71460cba4e1522838352040aa24f0e1782b929fea97191e8617128be82c065c92f9411ab8d45c24687c2e4d637cacede67c5ab60aa0bff468ae58a55ccfd34a29e8150acd156346fa573537c89fb11f72836a1714c86986d830570ca08e397be4cc99a5fc223f9d9ddfe4de480fb2c876a3e43aece9f9f704d453cc94bb5b758d2f13308a8b6d3229eea3a5b0d"], 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 836.745407][T10106] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 836.798737][T10110] bond322: (slave veth681): Enslaving as an active interface with a down link [ 836.832733][ T2527] usb 4-1: Using ep0 maxpacket: 32 11:39:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf18, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 836.952350][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.966458][T10172] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 836.981975][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.007146][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 837.028716][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.053715][ T2527] usb 4-1: config 0 descriptor?? [ 837.089641][T10172] 8021q: adding VLAN 0 to HW filter on device bond323 [ 837.102880][ T2527] hub 4-1:0.0: USB hub found [ 837.179920][T10175] bond323: (slave veth683): Enslaving as an active interface with a down link 11:39:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x100000001, 0x4}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ptrace(0x10, 0x0) ptrace$getsig(0x2, 0x0, 0x10000, &(0x7f0000000300)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfff8}, 0x0, 0x0, 0x0, 0x2, 0x7, 0x2, 0x9, 0x860e, 0x7, 0x7, r0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000400)={"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"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e23, 0xd7f5, @mcast1, 0x608}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0xb5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}], 0x94) setpriority(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x7b, 0x9, 0x7, 0xe1, 0x0, 0x800, 0x80877836154281f9, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfffffffffffffffb}, 0x104a2, 0x5, 0x1000, 0x4, 0x20, 0x81, 0x7ff}, r0, 0x8, 0xffffffffffffffff, 0x9) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 837.245517][T10212] bond323: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 837.322218][ T2527] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 837.331179][ T2527] usbhid 4-1:0.0: can't add hid device: -22 [ 837.372870][ T2527] usbhid: probe of 4-1:0.0 failed with error -22 11:39:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 837.588341][ T2527] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 837.779561][T10172] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 837.862142][ T2521] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 837.880173][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 837.932248][ T2527] usb 4-1: device firmware changed [ 837.937830][ T2527] usb 4-1: USB disconnect, device number 24 [ 838.131951][ T2521] usb 5-1: Using ep0 maxpacket: 16 [ 838.173857][ T2521] usb 5-1: device firmware changed [ 838.185200][ T2521] usb 5-1: USB disconnect, device number 25 [ 838.337873][ T2527] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 838.552452][ T2521] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 838.581847][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 838.702241][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 838.731289][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 838.751957][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.775500][ T2527] usb 4-1: config 0 descriptor?? [ 838.799800][ T2521] usb 5-1: Using ep0 maxpacket: 16 [ 838.833039][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 838.922259][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 838.942425][ T2521] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 838.951615][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.983170][ T2521] usb 5-1: config 0 descriptor?? [ 839.023118][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 839.045208][ T2527] usb 4-1: USB disconnect, device number 25 11:39:45 executing program 2: r0 = getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5a9, 0x12) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008085) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1ff}, 0x4005, 0x0, 0x4, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x101182) r5 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x4e23, 0x8000, @loopback, 0x8}}}, 0x88) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0xffffffffffffff2b}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) syz_genetlink_get_family_id$batadv(0x0) getpgid(r0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendfile(r4, r4, 0x0, 0x24002e00) ptrace$setregs(0xffffffffffffffff, r0, 0x6, &(0x7f0000000000)="566d7dccfa4a3407d4a9974b2e7b9ed489d19cc6d378264518802cb4eb7c4d69af7d33baac0b851c912e71358070239b3eabfb8aeb1bb0a13e7707dc672ef3a7f734a79cfd0cbaa99dc289156915a974b7caa6d9d9d6f2a87702f77751ac25b59a4ab23f3523d33744ef1bafc57bcf819be6888735095c") 11:39:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf19, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:45 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="e0ffffff1ea7b106de179a8967039a4510a045bb040000be3dfff6000c06000000657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000002800271500000000040000710000000049933c0d2411a1020d220801c22b539fee54779808c90e03d257fd423f7414dcf7cbfc1249543302e78f7224803008262ddf5850a707019b5b7e2b7a11c9f1b3013885499901ae244dcbeabb45a12f030d88ed387307a01969015383538cbd0a3ab3003be865dc88b04524efc2998e639f83993995f9fce416a63569852c83643b3a96bbbd64c61aaf1fd21ff2c35bb580463863af1d681aeb3af57a5a0f901951", @ANYRES32=r6, @ANYBLOB="2300000000000000000000000a000100727376703600000004000200060005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x48810) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="735be0bc95811478ff46e8fa95305938aa2bc7b185955feb2fe56016a25b614b499f67954dc12bf5d70fa1efe9278829c80c0b6f1b1086bf4f854b903058f1045a2662aaf39e6ceb0eccd449351e9892f965ece6ba02e34142a4c7a7bc4581dd7a298ac442b549f6633b65a1ee72c0537672890b060259dbd6b300"/136, @ANYRES16=0x0, @ANYBLOB="200028bd5000ffdbdf000000f4ff", @ANYRES32=r6, @ANYBLOB='\x00', @ANYRES32=r7, @ANYBLOB="06002800010000000a0009000180c20000030000050029000000000005002f000000000008002b0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040041) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="d9", 0x1}], 0x1}}], 0x1, 0x400407c) [ 839.174695][T10273] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 839.230187][ T2521] usb 5-1: USB disconnect, device number 26 [ 839.315398][T10273] 8021q: adding VLAN 0 to HW filter on device bond324 [ 839.378163][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.486110][T10299] bond324: (slave veth687): Enslaving as an active interface with a down link [ 839.537006][T10308] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.558185][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.598670][T10327] bond324: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 839.614870][ T2527] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 839.824977][ T2521] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 839.871798][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 839.935690][T10308] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.960591][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 839.991888][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.002966][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 840.021797][T10273] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 840.031266][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.073297][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 840.093308][ T2521] usb 5-1: Using ep0 maxpacket: 32 [ 840.117071][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.123084][T10299] bond324: (slave veth689): Enslaving as an active interface with a down link 11:39:46 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x850, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x4}}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) set_tid_address(0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$setopts(0x4206, r4, 0x0, 0x2) ptrace$getenv(0x4201, r4, 0x90000, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000340)="c4222daa16430f00529e2e66440f747f6a26440f30c4010df26e86b95d0300000f3244f1dfeb64660f388038b93e080000b86aac0000ba000000000f30", 0x3d}], 0x1, 0x52, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) gettid() ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 840.162426][ T2527] usb 4-1: config 0 descriptor?? [ 840.212957][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 840.233036][ T2527] hub 4-1:0.0: USB hub found [ 840.235610][ T2521] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 840.248797][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:39:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf1a, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 840.268438][ T2521] usb 5-1: config 0 descriptor?? 11:39:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) dup2(r4, r3) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sysfs$1(0x1, &(0x7f00000003c0)='-^-#&\x00') ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x401) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00022abd7000fddbdf250400000a080004000300000008000700", @ANYRESOCT=r6, @ANYRES32, @ANYBLOB="1abe713d5627983d0a210c0c2123cb32fb813f3413cbdb7bb10ba31f2c90348fa9701354fbcbacf3415efbc476ea1c04474ee658a50db16b4b95060a92d874972fd35838b4c20f93b983d571"], 0x24}, 0x1, 0x0, 0x0, 0xdf46d4208894e432}, 0x20000045) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000002c0)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x141282, 0x0) ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f0000000380)={0x0, 0x1}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00@\x00', @ANYRES16=r6, @ANYBLOB="020029bd7000fcdbdf250500000008000c0001000000080004000000000008000800ac1414aa080008007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x60001801}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x10, 0x1, '@@.\x10-}}[)@-\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x4c}}, 0x4000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 840.310592][T10353] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 840.324809][ T2521] hub 5-1:0.0: bad descriptor, ignoring hub [ 840.330953][ T2521] hub: probe of 5-1:0.0 failed with error -5 [ 840.434482][T10353] 8021q: adding VLAN 0 to HW filter on device bond325 [ 840.444479][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 840.481996][ T2527] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 840.490656][ T2527] usbhid 4-1:0.0: can't add hid device: -22 11:39:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 840.527923][ T2527] usbhid: probe of 4-1:0.0 failed with error -22 [ 840.543877][T10358] bond325: (slave veth691): Enslaving as an active interface with a down link [ 840.601381][ T2527] usb 4-1: USB disconnect, device number 26 [ 840.624905][T10353] bond325: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 841.091751][ T2527] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 841.156959][T10358] bond325: (slave veth693): Enslaving as an active interface with a down link 11:39:47 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000100000001"], 0x10}, 0x0) r0 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x4924924924926ed, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x10000, 0x9, 0x8, 0x8, "37e47d0c2e469624e35c8e5e7d9741fcce07973f2153fec5197e7fa7a256e8dc0347ecba5a666ea52c4bc09b8e3e332912fb497fde6b2f9e5606cc87f87306b5", "e2c9b1c5ea22c96fc96174d4801ff60d2715c931b0e9b2342a245095797e3747", [0x6, 0x8]}) [ 841.201779][T10353] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf1b, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1624}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 841.359786][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 841.366876][T10432] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 841.512011][T10432] 8021q: adding VLAN 0 to HW filter on device bond326 [ 841.513335][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 841.551365][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:39:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 841.574219][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.612184][ T2527] usb 4-1: config 0 descriptor?? [ 841.637059][T10434] bond326: (slave veth695): Enslaving as an active interface with a down link [ 841.683804][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 841.715939][T10473] bond326: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:39:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x6, 0x40, 0x8fb4, {}, {r4, r5/1000+60000}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x2d, 0x5, 0x0, 0x0, "c2788b8a6b7333e664969f8b9a9de15d65f9adf984d6a3b9da531b9ba2c0ad3fef701b1347e4280a03cfa9d06fbbc257c498590bc83cd014abde342bd20feab5"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x20004010) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400002, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000c0501012bbd7000fedbdf250a00000718008e8008001100", @ANYRES32=r7, @ANYBLOB="0c009000deb13d17cd070000000000000008006d000104000014002700fc00000000000000000000cc9f31d451202bcae736bee07e7335505bbe88ffc0ea785838cea179b6739a28ce197d39a258d32cac1b82749ebda008bb8e5875fc084173f0d70c32a0c48b6a5f5467d4bf38da19d7495911c564e11bf9a316749f51d500000000000000"], 0x48}}, 0x2604c004) [ 841.871875][ T2489] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 841.903335][ T2527] usb 4-1: USB disconnect, device number 27 11:39:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x401870cb, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x29a) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x66) socket$kcm(0x29, 0x5, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES32], 0x10132) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000180)={0x81, "5a7c98b0ab3cbe17508a4a8f710b51a6a8fc5b3c8196de2502df858d170c3203"}) fallocate(r0, 0x100000008, 0x0, 0x4000) [ 842.140005][T10432] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 842.208925][T10434] bond326: (slave veth697): Enslaving as an active interface with a down link [ 842.219698][ T2489] usb 5-1: Using ep0 maxpacket: 16 [ 842.249849][ T28] audit: type=1804 audit(1593603588.527:74): pid=10519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/481/file0/bus" dev="sda1" ino=15766 res=1 [ 842.271862][ T2489] usb 5-1: device firmware changed [ 842.290263][ T2489] usb 5-1: USB disconnect, device number 27 11:39:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x401870cb, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x29a) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x66) socket$kcm(0x29, 0x5, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES32], 0x10132) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000180)={0x81, "5a7c98b0ab3cbe17508a4a8f710b51a6a8fc5b3c8196de2502df858d170c3203"}) fallocate(r0, 0x100000008, 0x0, 0x4000) [ 842.365598][ T28] audit: type=1804 audit(1593603588.587:75): pid=10520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/481/file0/file0/bus" dev="sda1" ino=15767 res=1 [ 842.367699][T10517] bond326: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 842.446115][ T28] audit: type=1804 audit(1593603588.587:76): pid=10519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/newroot/481/file0/file0/bus" dev="sda1" ino=15767 res=1 [ 842.511729][ T2527] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 842.531442][T10349] debugfs: Directory '10349-5' with parent 'kvm' already present! 11:39:49 executing program 2: getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x20, 0x7, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, r1, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0x800, 0x2) r4 = inotify_init() r5 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x4000082) socket$pppoe(0x18, 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'bond0\x00', {}, 0x9}) sendfile(r5, r5, &(0x7f0000000080), 0xa198) ptrace$pokeuser(0x6, 0x0, 0xfffffffffffffffe, 0x7ff) [ 842.680752][ T28] audit: type=1804 audit(1593603588.957:77): pid=10531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/482/file0/bus" dev="sda1" ino=15766 res=1 [ 842.704120][ T2489] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 842.791961][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 842.952579][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.963677][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.967022][ T2489] usb 5-1: Using ep0 maxpacket: 16 [ 842.973867][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 842.989006][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.007385][ T2527] usb 4-1: config 0 descriptor?? [ 843.065737][ T2527] hub 4-1:0.0: USB hub found 11:39:49 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc) dup3(r0, r0, 0x0) 11:39:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf1c, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 843.113067][ T2489] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 843.173276][ T2489] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 843.202814][T10548] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 843.216611][ T2489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:39:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000200)={0xe, {0x0, 0x8, 0x9, 0xa5, "5a6ff2017f53bdb3bc9bd6b84c4a44eed59790a59503e4ae0d5c822daa3f362d3a96b449c0ab04036c79be4cd77fea1dd476ff4c8f1297b47cc4fc7e819f4104af04cea7a59a4d118347db2bad68ca3c21f72f1d50a4c3f91b127e196041cc0efed523ef919972bb23f1aa96c6fdd2b1240c026791904333889c1d4f6a9f977ce9446f2e0175ce47ff8be59d19030a49137305a9f1fd770e0086fed4458309953bb8b1d7b5"}}, 0xb1) personality(0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044940eeba71a4976e252922cb18f04000000000000012e0b3836005404b0e0301a4ce875f2fcff5f0300000000000000800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5f6db1c00010000000000000049740000000000000006ad8e5ecc1f003a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x48}}, 0x0) [ 843.259510][ T2489] usb 5-1: config 0 descriptor?? [ 843.322728][ T2489] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 843.356362][T10548] 8021q: adding VLAN 0 to HW filter on device bond327 [ 843.365339][ T2527] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 843.383843][ T2527] usbhid 4-1:0.0: can't add hid device: -22 [ 843.423351][ T2527] usbhid: probe of 4-1:0.0 failed with error -22 [ 843.454359][T10551] bond327: (slave veth699): Enslaving as an active interface with a down link [ 843.477325][T10593] bond327: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 843.529081][ T2489] usb 5-1: USB disconnect, device number 28 [ 843.712964][T10548] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 844.101541][ T2489] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 844.342053][ T2489] usb 5-1: Using ep0 maxpacket: 32 [ 844.463314][ T2489] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 844.476856][ T2489] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 844.487297][ T2489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.502252][ T2489] usb 5-1: config 0 descriptor?? [ 844.542505][ T2489] hub 5-1:0.0: bad descriptor, ignoring hub [ 844.548743][ T2489] hub: probe of 5-1:0.0 failed with error -5 [ 844.561909][ T2489] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 844.872302][ T2527] usb 5-1: USB disconnect, device number 29 11:39:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf1d, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:51 executing program 0: r0 = dup(0xffffffffffffffff) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = syz_open_dev$vivid(0x0, 0x1, 0x2) socket$kcm(0x10, 0x0, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="289b353b871a98bde0d2113bd99ec63a0000001000010800000500009aa50d32b5f10afa8dc4fdae482727e12761e464a6d5be6b7a23b30a81ea4eaee2a08ca339a6f1924c2838f37da1151dd25737b5761ebb22400f83a2db5a70c6cff710594d677bc56a57302822e9161fc9580904d7bdcf0ec6a175747c2786fe6a51add315cdf36f7e7d852ad10922bfa21c351ac84d5d000eafa832e17a460740c952cecf5e13bf70d9450635d2e9cec020dfb82768f38f98e1053e62818892dc55f6ae870f", @ANYRES32=0x0, @ANYBLOB="07000070c88a5cef33c6d76cc9d653df"], 0x28}}, 0x40001) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/32, 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x8000) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0xfffffffffffff83d) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x4}) sync() ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000380)={r5, 0x2}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030400f7000000000800000000008d67788b89aebbe9138d5c66b41c6db6ba2a2ab3eca0911f52758aec3a5b082b0ceb2575f671ec5943b60147a31a6ef3c6c0773b0d0d07c10e633466384d1e4721be30f875366009e4f524aff38f9c5de0a7fb759d1ba934b7f8d0c1ef2e457c483ad702f17241d439e10fbd908452713b509e68d28a3648c7f5b9dc37a4241fd5e63754ce2db96e48a8a8612c7950771101152696e9ac", @ANYRES32=0x0, @ANYBLOB="000000f6ffff07000000000000008100926b730130d1107eddd1c5d0c6697265c63d0c236f663bf5ae0c3e907c321d486a04f22630b7d80b2bb2714ceff1102b81b48b7671b4e18d5167810421a5fcf0bafe6e017eecb7ce1b71b425b92d6d78e3b20e230c5e8396a0dc4dedb5d51eba42b2b19aa71b163659d62b", @ANYRES32], 0x40}}, 0x0) 11:39:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10041c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1c, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1000}) fcntl$getown(0xffffffffffffffff, 0x9) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="9c3413940e3a5e270324e629b4e887760c5754d8e1816acffbd141af9c325e4e44fd56032abb2b150c5d0f5024def6a48b140ab180181f409fa12342402efbc57e25ee8361b412b8eed0c83102ce6342ca096a3e6d8390f00f00a7d78f0a9ef8292500cf5158e597803a207c75d578f8a4afa9d7f65c882a280c89034c3ae5c193e9080a61ed9fb77f82f19b2bcb461a2c7aa1086123c4476a7dcc4775fbb1e48216fec0405043d3b9cdb54dad2c67c1e1cde708d04ff96cf18f7395ae76f83b0a0a441b326c38eb004b6b129a873ce5cc88cdb00ede60d18d", 0xd9}, {0x0}], 0x2, &(0x7f0000000540), 0x0, 0x4000000}, 0x0) listen(r0, 0x10001) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 11:39:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x10, r3}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000003c0)={r3, 0x995400}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000f7ff000000080026000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800d2004005a2a3000500"/20, @ANYRES32=r6, @ANYBLOB="0000000000ffffff00000000090001006866736300000000080002b71808fde1fa0d769091d2f77189ab5eb64106c60ae440239e702739551c243776dd9e2d97d18eea217da80090e8996abc2212c1bd24ca62475979b1e4366c12a6083f4b4c10b6d44d16d6e600116ee1d6adad215f1470ac8a3d1bf8280faf9e4def1dd2013aa8e0"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6673}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6feab236}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x50179ed8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newchain={0x5a7c, 0x64, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0xfff1, 0xfff1}, {0x8, 0x5}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x404, 0x2, [@TCA_ROUTE4_ACT={0x400, 0x6, [@m_bpf={0x104, 0x13, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xc8, 0x6, "ba773fe127a20172c3fcc10c56ea63e9195c319c2f06e238299788e4d36f4698aa986834197667883b80b7cae7baf902acb2a19a34dc2a05376b2d6e2efa40063e36200ab7a1d4db64cbaff4d1dd994fcd3699d156eb4b711fd885a3cb68bb5bd8310e4d81dba37e81292cb4492db64cbc864e1658dc2cd37fb948234082c10c7dfeb53f2c73eb3c9bb80ffdbb83260d2d52296bdf533d0a5c2721f0acdd8eafa0ab702511d77d5f83b52f7d79b9e4e43ddb198fefacab7d5fad2890f25bd276bdc9e28c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1bc, 0x7, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x3, 0xa62b, 0x7fffffff}, @broadcast, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3f, 0x5, 0x8, 0x7ff, 0x7ff}, @remote, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18, 0x0, 0x2, 0x10000, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xffff, 0x1, 0xea, 0xd774}, @remote, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xf5c, 0x7, 0xffffffff, 0x2600000}, @private=0xa010101, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xdb, 0xf, 0xfffffff8, 0x6}, @broadcast, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x20000000, 0x6, 0x40}, @loopback, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe6, 0x57, 0x5, 0xfffff2f9, 0xfffffffc}, @empty, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0x951, 0xff}, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, 0xffffff}}]}, {0x29, 0x6, "8d1c1108430a61a2cff471fbea29854510801c98bc6db22a59d24c775a290298cb4b18ee20"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x13c, 0x6, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xb4, 0x6, "3d4b98a48e52f3c88d5d32101a5df4bac4a4f0f66495efaa9d0f1d96a02566197bbfaf0a8391e2dcdd3cec3405149d6daa2c9ee6d9f07d3110461c95c8e38347904c5dfe318d66aede0c7ccffdba257792b56a9c3ab6a1f0a74a4670ab25c7ca909371a11a1fada1f564d326879a266507eca29e5508271771daa3e5bb42d350eecd971e56282cfbc0b7ca98e51c96bf7ea7f9a89fabeb1fa5b51becb796b497829753f674c81b5eaf6546aee64b0a84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x563c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0xab, 0x2}, {0x3ff, 0x40, 0x5}, 0x67, 0x2, 0x3a}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_POLICE={0x10a4, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x8, 0x1f, 0x4, 0x6, 0x9, 0x8, 0x8, 0x9, 0x81, 0x9, 0x0, 0x7, 0x4, 0x101, 0x8425, 0xfffffff8, 0xfff, 0x7ff, 0x81, 0x5, 0x10001, 0x7f, 0x8, 0x0, 0x200, 0x3, 0x0, 0x80, 0x5, 0x6, 0x18c80000, 0x5, 0xfe, 0x100, 0x5, 0x80, 0x9, 0x5, 0xffffffc0, 0x8, 0x8, 0x7fffffff, 0x1000, 0x5, 0x8001, 0x7, 0x0, 0xffff, 0x10001, 0x101, 0x1, 0xffff45b3, 0x6, 0x4, 0x7, 0x0, 0x9, 0x1, 0xfeb, 0xffffffff, 0x0, 0x9, 0x3, 0x80000001, 0x44, 0x8eea, 0x3e, 0x2, 0x7f, 0x20, 0x7, 0xf54, 0x6, 0x5, 0x2, 0x7, 0x7, 0x100, 0x4, 0x1, 0x2, 0x9, 0x92bab0c6, 0x9, 0x9, 0x80000000, 0x101, 0x2, 0x0, 0x4, 0x0, 0x4, 0x3fa2, 0x3, 0xf061, 0x4, 0x1, 0x8, 0x3, 0x200, 0xffffffff, 0x400, 0x9, 0x4, 0x9, 0xffff, 0x7, 0xfffffffe, 0x1, 0x200, 0x9, 0x5, 0x0, 0x8, 0x100, 0x7f, 0x2, 0x2, 0x10001, 0x7, 0x7, 0x7, 0x7, 0x802, 0x1ff, 0x3, 0x8, 0x4b2167a2, 0xfff, 0x4, 0x1, 0x10001, 0x800, 0x6, 0x7, 0x2, 0x3, 0x800, 0xfffffffe, 0x3, 0x4, 0x20, 0x3, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x4, 0x8, 0x1f, 0x80000001, 0x90, 0x4, 0x9, 0x92, 0xa62, 0xfffffc00, 0xa07, 0x5768, 0x1, 0x8, 0x700000, 0xffffffe1, 0x1f, 0xe5, 0xbc, 0x81, 0x8, 0x8, 0x4d, 0x80000001, 0x8, 0xff, 0xad1b, 0xff, 0x3, 0x0, 0xff, 0x4, 0x6, 0x0, 0x4, 0x7, 0x3f, 0x6, 0x0, 0x1000, 0xffff7fff, 0x0, 0x8, 0x9, 0x7, 0x4, 0xe5d, 0xfffffff8, 0x4826d4f, 0x800, 0x1, 0x7, 0xfff, 0x7, 0x5a, 0x20, 0x5, 0x2, 0x0, 0x0, 0x3ff, 0x5, 0x2, 0x4, 0x0, 0x7ff, 0x5, 0x0, 0x8, 0xffffff7f, 0x20, 0x1, 0x80000000, 0x7, 0x9, 0x7fffffff, 0x10000, 0x2, 0x8, 0x1ff, 0x10001, 0x4, 0x5, 0x7fff, 0x8, 0x1, 0x0, 0x1, 0x6, 0x9, 0x40, 0x9, 0x3, 0x6, 0x8, 0x10000, 0x2000000, 0x1000, 0x6, 0x20, 0x4, 0x0, 0xfffffffa, 0x9, 0x1, 0x5ac72fb4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0xffffffffffffffff, 0x7f, 0x870, 0x80000001, {0x7, 0x1, 0x2, 0x3, 0x4, 0x3b1074e0}, {0x9, 0x2, 0x800, 0x7f, 0x6, 0xf55}, 0x8000, 0x7, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x7fff, 0x1000, 0x1, 0x9, 0x7, 0x7, 0x7, 0x0, 0x2, 0x8, 0xfffffff9, 0x9, 0x5, 0x3ff, 0x0, 0xb500, 0x80000001, 0x4, 0x1cac, 0x4, 0x5, 0x9, 0x0, 0x0, 0x41b, 0xe59, 0x6, 0x0, 0x8000, 0x200, 0x1, 0xb8, 0x8000, 0x6, 0x1, 0x5, 0x2, 0x9, 0x3, 0x1, 0x7f, 0x1000, 0x10001, 0x33, 0xffffffff, 0xffff6ac8, 0x1ff, 0x25f, 0x7, 0x3, 0x15a7, 0x2, 0x1014, 0x9, 0x80, 0x5376, 0xfffffffd, 0x0, 0x4, 0x7, 0x4, 0x6, 0x321, 0x6, 0x28000000, 0x6, 0x40, 0x5, 0x9, 0x3, 0x7fffffff, 0x9, 0x1, 0x7fff, 0x10001, 0x1f, 0xfffffc01, 0x7, 0x3, 0x80, 0x7, 0x1, 0x800, 0x3ff, 0x62a2fd8a, 0x8001, 0x6, 0x2, 0xfbe, 0x4, 0x5, 0xce, 0x7, 0x4, 0x8, 0x8, 0x57, 0x7, 0x2, 0x1, 0x1, 0x3, 0x1f, 0x4, 0x0, 0x6, 0x3, 0x2, 0x7, 0x3, 0x3, 0xfff, 0x1ff, 0x5, 0x7fff, 0x3, 0x7, 0x3, 0x9, 0x6, 0x62f, 0x0, 0x9, 0x5, 0x4, 0x5, 0x9, 0x6, 0x7, 0x100, 0x0, 0x0, 0x3, 0x9, 0x401, 0x0, 0x1f, 0x5, 0x8, 0x80000001, 0x5c, 0x5a, 0x400, 0x1, 0x5a8, 0x80, 0x1ff, 0x1, 0xfffffff7, 0x402a12ab, 0xcdb, 0x8, 0x4, 0x81, 0xa3, 0x7fff, 0x7fffffff, 0x0, 0x9, 0x5, 0x1, 0x8, 0x9, 0x823, 0x7fffffff, 0x4, 0x0, 0x8, 0x7fff, 0x4, 0x5, 0xfffffffc, 0x8da, 0x9, 0x80000000, 0x8, 0x6, 0xfffff800, 0x8001, 0x0, 0x10000, 0x6, 0x1, 0x8001, 0x4f34, 0x9, 0x3, 0xffffffff, 0x4, 0x9750, 0x7, 0x5f, 0xfff, 0x8000, 0x5b, 0x7f, 0x800, 0x73, 0x8000, 0x57b, 0x6, 0x400, 0x2, 0x5, 0x7, 0xffff1485, 0x8, 0x3, 0x101, 0xff, 0x7fff, 0x401, 0x1, 0x3, 0x5, 0x8, 0x7, 0x101, 0x6, 0x1, 0x5, 0x1, 0x7, 0x0, 0x1, 0x3e29c234, 0x76, 0x1, 0x7, 0x4, 0xcdd79ba, 0x100, 0xdd, 0x3, 0x1, 0xff0, 0x1, 0x0, 0x1800, 0x31b, 0x8, 0x1, 0x9, 0xfc7, 0x1ff, 0x0, 0x81, 0xfff, 0x46, 0x10, 0x1, 0x200, 0x56aa7a05, 0x7, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb4e}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xff, 0x0, 0x80000001, 0x4, 0x2, 0x8, 0x3, 0xfff, 0x1ff, 0x4, 0x2, 0x5, 0x2, 0x5, 0x10000, 0x2, 0x6, 0x8001, 0xff, 0x20a, 0x0, 0x7, 0x1, 0x7, 0x9, 0x80, 0x7ff, 0x4, 0x8000, 0x5, 0x7451b859, 0x400, 0x9, 0x6, 0x3f, 0x72, 0x9, 0x8, 0x1, 0xff, 0x8, 0x6, 0x3ff, 0x7b5, 0x6, 0xfffffffd, 0xff, 0x7, 0xdf17, 0x7fffffff, 0x5, 0x89fb, 0x8, 0xfffffffe, 0xfffffff8, 0xffff, 0x7f, 0x80000001, 0x0, 0x40, 0x3, 0x6327, 0x401, 0x4, 0x1, 0x1, 0x3, 0x100, 0x3, 0x7, 0x8, 0x0, 0x9, 0x81, 0x8000, 0x910, 0x87fc, 0x5, 0x400, 0x5817b7b1, 0x3, 0x10001, 0x8, 0xffff7fff, 0x1, 0x200, 0x0, 0x10000, 0xaf, 0x0, 0x4, 0x1, 0x92, 0x8, 0x9, 0xb7a7, 0x5, 0x1, 0x800, 0x5, 0x80000001, 0x8, 0x0, 0x3, 0x1ff, 0x10001, 0x0, 0x40, 0xe19, 0x40, 0x8, 0x3, 0xfff, 0x3, 0x9, 0x0, 0x100, 0x1, 0x80, 0xffffffce, 0x8001, 0x9, 0x6, 0x8, 0x0, 0x3, 0x6fa6, 0x0, 0x0, 0x5, 0x1, 0x3, 0x72b5, 0x1, 0x4, 0x6afc7714, 0x1, 0x81, 0x3, 0x4, 0xfff, 0x2, 0x2, 0x8, 0x2, 0x0, 0x100, 0x4, 0x401, 0x7, 0x6182, 0x6, 0x7, 0x3, 0x0, 0x58, 0x4, 0x4a, 0x3f, 0x7, 0x6a, 0x3, 0x9755, 0x400, 0x8, 0x10000, 0x932c, 0x4, 0x9, 0x9e, 0x152e, 0x20, 0xffffffc1, 0x6, 0x9, 0xac6e, 0x4, 0x1, 0x0, 0x7, 0x3f, 0x7fffffff, 0x0, 0x7ff, 0x7f, 0x1, 0xe72, 0x7, 0x5, 0x5, 0x4, 0x7, 0x8, 0x3, 0x6, 0x8000, 0x23b, 0x2, 0x81, 0x6, 0x7ff, 0x800, 0x7f, 0xde5d, 0x81, 0x474, 0x0, 0x8, 0x7f, 0x7ff, 0x6, 0x3, 0x7ff, 0x2, 0x401, 0x5, 0x6, 0x6, 0x4, 0x3, 0x2, 0x7, 0xfff, 0x5, 0x5, 0x5, 0x80000001, 0x6, 0x0, 0x467, 0xfffffffc, 0x28000000, 0x5, 0x6, 0x7f, 0x1, 0x92, 0x3f, 0x3, 0xffffffff, 0x9, 0x7, 0xffffffff, 0x9, 0x4, 0x8, 0x67, 0x2, 0xc0000, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x400, 0xdc, 0x200, {0x1, 0x1, 0x2, 0x6, 0x800, 0x5c}, {0x4, 0x6, 0xf7, 0x9, 0x1ff, 0x3}, 0x0, 0x5, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0x6, 0xfffffffe, 0x10000, 0x10000, 0x3, 0x1, 0x5, 0x7fff, 0x0, 0x6, 0x0, 0x0, 0x2, 0x7, 0x9, 0x7, 0x3, 0x0, 0x20, 0x9, 0x81, 0x81, 0x4, 0x32f, 0x100, 0x0, 0x597, 0x1, 0x4010, 0x3, 0xb5, 0x3f, 0x8, 0x6, 0x4, 0x1, 0x7f, 0x9, 0x4, 0x1f, 0x2, 0x100, 0x808, 0x1, 0x9, 0x81, 0x5, 0x3, 0x7ff, 0x8, 0x1, 0x2b6, 0x40, 0xfffffce3, 0xad9, 0x1, 0x7, 0x8, 0x7, 0x8001, 0x6, 0x10001, 0x6, 0x6, 0x9, 0x7, 0x3, 0x8000, 0x0, 0xffffffff, 0x6, 0x80000000, 0x9, 0x7, 0x6, 0x10001, 0xffff, 0x8000, 0x7b7, 0x9, 0xffffffff, 0xfff, 0x8000, 0x6, 0x0, 0x0, 0x3, 0x5, 0x10001, 0x1ff, 0xae39, 0x9, 0x3ff, 0x4218, 0x800, 0x200, 0x8, 0x0, 0x40, 0x8001, 0xac, 0x7fff, 0xfffffff8, 0x5, 0x4, 0x8, 0x1, 0xcc, 0x2f3d, 0x2, 0x0, 0xc69, 0x8, 0x7, 0x0, 0x7fffffff, 0x6, 0x1f, 0x1000, 0x3, 0x0, 0x400, 0x20080, 0xc7, 0x9, 0x101, 0x9e5, 0x7fffffff, 0x8, 0x81, 0x1, 0xa8aa, 0x6e, 0x8, 0xf8000000, 0x1000, 0x1000, 0x3, 0x2, 0x2, 0x9, 0xd48e, 0xa9, 0x7, 0x800, 0xffff, 0x8000, 0x2, 0x2000, 0x5, 0x2, 0xf9b8, 0x6b00000, 0x4, 0x1, 0x1, 0xfc4, 0x4, 0x2, 0x6, 0xfffffffe, 0x80000000, 0x5, 0x20, 0x7, 0xe7e, 0x9e, 0x2, 0x2, 0xe8a, 0x7, 0x8001, 0x200, 0x7fff, 0x7, 0x9, 0x7f, 0x7f, 0xfffffffa, 0x5, 0x100, 0x7fff, 0x7f, 0x6f0, 0x100, 0xfffffff7, 0x50b4022, 0x200, 0x4, 0x5, 0x400, 0x7, 0x0, 0xb6d, 0x2, 0x87a3, 0x4, 0xfff, 0x4, 0xa5d, 0x3, 0x0, 0x9, 0x9, 0x56, 0x2, 0x4, 0x30, 0x5, 0x1, 0x0, 0x8, 0x8, 0x2, 0x0, 0x0, 0x3, 0xb4b, 0x4, 0x7, 0x9, 0x79, 0x6, 0x6, 0x20, 0x6, 0x82d, 0x6, 0x905a, 0x6, 0x7, 0x1, 0x9, 0xc, 0x40, 0x5, 0xe1, 0x8, 0x9, 0x5b, 0x7, 0x798, 0x2, 0x8, 0x0, 0x9, 0xc4, 0x9, 0x8, 0x4, 0x4, 0x4, 0xfff, 0x3ff]}]}, @TCA_RSVP_ACT={0x40e4, 0x6, [@m_mpls={0xb8, 0x18, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x80f3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}]}, {0x73, 0x6, "6c78f86b071ec679d170b437060b0f522c753d4386c45c2f8a09b839ad06700cd72b4f7bc8e2203ea88c635472a1f10f4ef25e4d8782b4d3a3073b44435745706b86f4b7b249014a48e388cf3504f06a69c4578da30881da0452291b313f1da4bd12b6749dd721520a2e6d4411a248"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x144, 0x16, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x0, 0x8, 0x8, 0x8}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="66f2e3c24d92"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x800, 0x20000000, 0x3, 0x3}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xea39}]}, {0x86, 0x6, "2a838b875e30eb9ead1ed9c4506233909f918c5b424ce5d71d33ed961fdd1145c757635608b2a0ac59c8af246dce7d57b5a5d31405f617714f51bd18cd6d3a720a8fb8127bfa9a45d2e00615c38380e5b7f85f52857c1e555b743b8474ca9dc987dba8416545a30d6c1a6022e4b1b3166c44443069a3eb7f9e4c5594b7e35cb7d539"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x194, 0xa, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0xfffffc01, 0x8, 0x0, 0x833b}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x9, 0x0, 0x40, 0x6}, 0x9e40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0xffffffffffffffff, 0x9, 0x4}, 0xfe00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0xffffffff, 0xffffffffffffffff, 0xcb, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x78fe, 0x20000000, 0x81, 0x100}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x1, 0x10000, 0x7}, 0x3ff}}]}, {0xb9, 0x6, "28ccff9fa7dcea0710ad225aebdd91da8bf4fe176c6b90acfc2fbbf9903617155f5542cad08499d11ec460873aa448a278279e5fad32ece03633f83411e2bb8ac2cae114723080fabe50a5d7c274d4ddf315417bc3b258018479847a4a1ce0fdb2c573f3e7d1409bceeb2d2146e40a576d9fb133f40b2495155c1ec29dc65521c15baf7ecde14a2ebaf0e7eae0a2727576409f6e1ccdaccb724763bde68930161c0579c3c088689e75489221cf023261103064581d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x39dc, 0xa, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x3974, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7fff, 0x8, 0x20000000, 0x66, 0x1}, 0x5, 0x4, [{0x6, 0x490b0eaa, 0x2460, 0x5, 0x5744, 0x3}, {0xaa, 0x1400, 0xffff6716, 0x7de19910, 0x74, 0x8}]}, [{0x1, 0x8, 0x2, 0x1, 0x1f, 0x4c}, {0x9, 0x6, 0x7, 0x1f, 0x48, 0x429ac927}, {0x0, 0x9, 0x11, 0x1, 0x4, 0x3}, {0x1, 0x9, 0x0, 0x9ad, 0x9, 0x800}, {0x5, 0x7fff, 0x8, 0x5, 0x10001, 0x9}, {0xfffffffc, 0x2, 0xfffffffa, 0x491, 0xdc7, 0x7}, {0x200, 0x7ff, 0xfffffcce, 0xcb59, 0x2, 0x2}, {0x7, 0x100, 0xffffff81, 0x1, 0x8, 0xffff}, {0xfff, 0x6, 0x2, 0x4, 0xfffff989}, {0x2, 0x4, 0x0, 0x55d1, 0x8}, {0x7ff, 0x2, 0x9, 0x1, 0x6}, {0x2, 0xffffffff, 0x4, 0x1, 0x3, 0x2}, {0x8, 0x4, 0x4c, 0x3, 0x5, 0x400}, {0x4, 0x2, 0x1000, 0x80, 0x9bf6}, {0x9d, 0x401, 0x2, 0x200, 0x5, 0x37e}, {0x1, 0x3, 0xad, 0xfffffff8, 0x0, 0x7f}, {0x1, 0x5, 0xfffffffd, 0x9, 0x9, 0x7fffffff}, {0xb2d, 0x4d88, 0x0, 0xfffffffb, 0x9e, 0x9}, {0x4, 0x44800000, 0x9, 0x7, 0x9, 0x5}, {0x8, 0xff, 0x9, 0x4, 0xab70, 0x7}, {0x8, 0x7, 0x5, 0x1, 0xc4f, 0x87}, {0x4, 0x3c2d, 0x5, 0x1, 0x2, 0x2}, {0x7fff, 0x20, 0x10001, 0x4, 0x2, 0x5}, {0x0, 0x200, 0x8, 0xed2a, 0x9, 0x40}, {0x2, 0x9, 0x3f, 0x80, 0xffffffff, 0x9}, {0x7, 0x4, 0x5, 0x3, 0x4, 0x9}, {0x8, 0x8, 0x10000, 0x9ff, 0x3, 0x200}, {0x6, 0xce0, 0xfff, 0xed, 0x3, 0xe30b}, {0x7fff, 0x7, 0x7, 0x5, 0x3ff, 0x80000000}, {0x7f, 0x5, 0x42, 0xfff, 0x4, 0x5}, {0x200, 0x6, 0x40000000, 0x3ff, 0xfff, 0x2}, {0xffffffff, 0xc6f, 0x80000001, 0x5, 0x4, 0x800}, {0x7, 0x0, 0x6, 0x5, 0x18000, 0x2}, {0x1, 0x1ff, 0xcd, 0x6, 0xffff, 0x3}, {0x1, 0x3, 0x8000, 0x5bf, 0x7, 0x4}, {0x0, 0x4800, 0x0, 0xbe, 0x80000001, 0x1000}, {0x1, 0x8, 0x391b, 0x1ff, 0x2, 0x5}, {0x0, 0x7fff, 0x1a, 0x3, 0x8, 0x4}, {0x7, 0x8, 0x5, 0x40, 0x4, 0x10000}, {0x2, 0x6, 0x4, 0x3d34, 0x5, 0x7ff}, {0x4, 0x3, 0x2, 0x4, 0x0, 0x1}, {0x3, 0x2, 0x1, 0x0, 0x87, 0xe8}, {0x4, 0x8000, 0x400, 0x4, 0x20, 0x9}, {0x6, 0x8a5, 0x4, 0x5, 0x40, 0xffc}, {0x939, 0x2, 0xff, 0x3, 0x9, 0x7}, {0x9, 0x311, 0x8000, 0x400, 0x3}, {0x2, 0x400, 0x7, 0x2, 0x1, 0x4}, {0x400, 0x8000, 0x7dd, 0x80000000, 0x3, 0x8000}, {0x1, 0x4, 0x4, 0x19, 0x100, 0x7fffffff}, {0x0, 0xfffeffff, 0x0, 0x8000, 0x1, 0x4}, {0x5, 0x2, 0xf02, 0x9, 0x2, 0x3}, {0x4, 0x200, 0x5, 0x3, 0x0, 0x3}, {0xf47, 0x7, 0x62b4, 0x90}, {0xffffffff, 0x4, 0x7f, 0x8d1, 0x5, 0x66701b7c}, {0x1, 0xffffffc0, 0x3ff, 0x4, 0x54, 0x4}, {0x5, 0x3f, 0x52, 0x5, 0x1, 0x6fe}, {0x4, 0x9, 0x3, 0x2, 0x5, 0x6}, {0x101, 0x13, 0x4, 0x1, 0x2, 0x8}, {0x5, 0x5c6, 0x5, 0x19, 0x40, 0xffffffff}, {0x9, 0x1000, 0x7f27, 0x81, 0x91, 0x5}, {0x4, 0x400, 0x5, 0xffffffff, 0x30000, 0x6729}, {0x3, 0x7, 0x7, 0x7, 0x7, 0x2}, {0x3, 0xffff, 0xa2d, 0x1f, 0x9, 0x20}, {0x0, 0x1, 0x101, 0x3, 0x80000001, 0x1}, {0x4, 0x5, 0x7, 0x400, 0x1, 0xfffffff8}, {0xfffffff8, 0x5, 0x8000, 0x2, 0x2, 0x400}, {0x101, 0x9, 0x10001, 0x1, 0x5, 0x2}, {0x0, 0xffffffff, 0x2, 0x5, 0xfffffffd, 0x2}, {0xfff, 0x200, 0x3, 0x1, 0xf7a, 0x4}, {0x45473264, 0x8ad, 0x80000001, 0x5, 0xfff, 0x3f}, {0x7, 0x3, 0xc1c9, 0x0, 0x352, 0x5}, {0x9, 0x7, 0x6, 0xff, 0x1, 0x10000}, {0x43b53a2, 0x1, 0xb877, 0x200, 0x9, 0x800}, {0x4, 0x3, 0x5, 0x4ee0, 0x8, 0x10001}, {0x5, 0x59037a2f, 0x2, 0x3f, 0xb7ba, 0x5}, {0x42, 0xffffffff, 0x800, 0xffffffff, 0xfff, 0x784}, {0x7, 0x6, 0xc8a, 0x9, 0x9f1, 0x6}, {0x20, 0xede, 0x74, 0x2, 0x1, 0x1}, {0x5, 0x7, 0x5, 0x9, 0x4}, {0x6, 0x4, 0x4, 0xf47, 0x0, 0x2e}, {0x8, 0x7, 0x400, 0x8000, 0x1272, 0x94}, {0x8, 0x0, 0x5, 0xbe64, 0x6, 0x6}, {0x6, 0x3, 0x1, 0xfffff801, 0xffffff00}, {0x2, 0x7ff, 0x7, 0x5, 0x1, 0xffffff48}, {0x6b8, 0x5, 0x8, 0xffff8a1a, 0x1, 0xfff}, {0x0, 0x3, 0x6, 0xfff, 0x0, 0x7fff}, {0x8, 0x3ff, 0x1f, 0x2, 0x9}, {0x5, 0x67, 0x8001, 0x8, 0x5, 0x9}, {0x5, 0xc198, 0x101, 0x6, 0x81, 0x15}, {0x3f, 0x7fffffff, 0x2, 0x9c5, 0xcb1c, 0xd3}, {0x4, 0x8, 0x9a42, 0x1f, 0x9a7a, 0xa06e}, {0x4, 0x9, 0x94, 0x1, 0x1ff, 0x9}, {0x7f, 0x40, 0x2, 0x1, 0x1, 0x2}, {0x59d, 0x4, 0xfffffffb, 0x3, 0x1, 0x1}, {0x0, 0x6, 0x81, 0x1, 0x9b, 0x3}, {0x800, 0x3, 0x100, 0x4, 0x8532, 0x9ff1}, {0xb57, 0x80, 0x1000, 0x90, 0x4, 0x9}, {0x6, 0x8, 0x100, 0xfffffc0d, 0x7, 0x6}, {0x0, 0x2, 0x7, 0x81, 0x1, 0x3cbc3793}, {0x7, 0xa000, 0x3, 0x5, 0x3, 0x5fb}, {0xc65a, 0x2, 0x8, 0x1, 0x8000, 0x20}, {0x9, 0x5, 0x8, 0x10000, 0x0, 0x8}, {0x80000001, 0x5, 0x8, 0xac, 0x1, 0xc9ca}, {0x3, 0xfffffffd, 0x2, 0xff, 0x8001, 0x101}, {0xf4, 0x0, 0x1, 0x9, 0x40, 0x4}, {0xffff, 0x5, 0x4, 0xc5f5, 0x5, 0xfff}, {0x9a, 0x7ff, 0x0, 0x200, 0x8}, {0x3e, 0xf307, 0x7ff, 0x3, 0xffffffff, 0xfffffaf2}, {0x20, 0x80000001, 0x7, 0x1, 0xab77, 0x401}, {0x80000001, 0x0, 0xfffffffa, 0x40, 0x9, 0x9}, {0x10001, 0xffffffff, 0x0, 0x9, 0x8, 0x4}, {0x800, 0x18000, 0x7fffffff, 0x1, 0x8, 0xf6f}, {0x200, 0x1, 0x2, 0xdc1c0000, 0x3, 0x3ff}, {0xad, 0x3f, 0x3f, 0x20, 0x20, 0x7}, {0xfffff763, 0x9, 0x7, 0x200, 0x9, 0x8001}, {0x1e68, 0x1, 0x10000, 0x5d1, 0x1, 0xfffffff7}, {0x88, 0x2, 0x10001, 0x6, 0x5, 0x8}, {0xffff8001, 0x1, 0x8, 0x1, 0x9, 0xbb}, {0x200, 0x80000000, 0x4, 0x7, 0x8, 0x7a5e}, {0x6, 0x2, 0x1f, 0x81, 0x7fff, 0x7ff}, {0xffffffff, 0x3, 0x1, 0x1, 0xee, 0x5c34}, {0xfff, 0x1f, 0x10000, 0x4, 0x504, 0x1ff}, {0x80000001, 0x200, 0xe8, 0x7ff, 0x3f, 0x1}, {0x2, 0x1, 0x4128, 0x6, 0x5, 0x7}, {0x80000000, 0x98d, 0x9, 0x5, 0x0, 0x3}, {0x8, 0x1000, 0x9, 0x80000000, 0x8001, 0x400}, {0x7fff, 0x4, 0x80000000, 0xfffffc00, 0xfffffc01, 0x8}, {0x400, 0x2, 0x3897, 0x2, 0x792, 0x9}], [{0x2}, {0x1}, {}, {0x4}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0xc45b66278e647cfc}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x4d2860f7bbb62111}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0xff75428f8703de91}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {}, {0x4, 0xc0b34341f5bb773a}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x87b9209ff7b319e2}, {0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0x10000, 0xfffffffffffffff8, 0x760, 0x10001}, 0x1, 0x0, [{0x6, 0x640, 0xff, 0x9655c0f3, 0x7, 0x3f}]}, [{0x3, 0x81, 0x2, 0x1, 0x1, 0x9}, {0xc98, 0x3f, 0x4, 0x8000, 0x5, 0xffffffff}, {0xff, 0x2, 0x2, 0x401, 0x9, 0x100}, {0x7fff, 0x1000, 0x1ff, 0x7, 0xf1, 0x7fff}, {0x7f, 0x1, 0x3, 0x9, 0x4d2, 0x20}, {0x4, 0x7, 0x81000, 0x3a85, 0x5, 0xfc}, {0x54, 0x30, 0x1f, 0x2, 0x600, 0x6}, {0x40000, 0x5, 0x7, 0x4, 0x9, 0xfffffffe}, {0x5, 0x9, 0x1, 0x0, 0xfff, 0x9}, {0x400, 0xfffff0e3, 0x9, 0xffff, 0x6, 0x8149}, {0x610, 0x0, 0x200, 0x9, 0x1, 0x1}, {0x2, 0x0, 0x4, 0x5, 0x5, 0x1}, {0x3, 0x4, 0x7, 0xfffffffa, 0x4, 0x7f}, {0x81, 0x5, 0x1000, 0x10001, 0x1, 0x2}, {0x8, 0x4, 0xae65, 0xfa, 0x6, 0x7}, {0x7, 0x3, 0x3, 0x6, 0x9, 0x7}, {0x81, 0x9, 0x47, 0x6, 0xff, 0x7fffffff}, {0x1000, 0x9cea, 0x1, 0x3, 0x20}, {0x8, 0x909d, 0x5, 0x2, 0x2, 0x7}, {0x10000, 0x4, 0x8000, 0x6, 0x5, 0x101}, {0x3ff, 0x9, 0x86, 0x80000001, 0x4, 0x4}, {0x1, 0x7ae, 0x4, 0xffffffe1, 0x8001, 0x5}, {0x40, 0xffffffc1, 0x53e58627, 0x80000000, 0x2, 0x3}, {0x9, 0x1, 0x9, 0x0, 0x6}, {0x81, 0x1, 0x7fffffff, 0x8, 0x3}, {0x6, 0x1000, 0x7, 0xfa90, 0x3, 0x1}, {0x1, 0x4, 0x1000, 0x6, 0x2, 0x7}, {0x4, 0x98000000, 0x3, 0x5, 0x1, 0x9}, {0x3, 0x10001, 0x800, 0xfff, 0x100, 0x5}, {0x10000, 0x1, 0x8, 0x60ab, 0xe2c, 0x1ff}, {0x100, 0x5, 0x80, 0x1, 0x1, 0xffff}, {0x7, 0x4, 0xc3, 0x800, 0xffffffff, 0x6}, {0x4e9cc4bd, 0xbb9, 0x100, 0x0, 0x200, 0xfffffff9}, {0x3ff, 0xf3b, 0x3ff80000, 0x800, 0x3, 0x3}, {0x6a7, 0x8, 0x1, 0x0, 0x8, 0xea3}, {0x91b, 0x3, 0x2, 0x7, 0xfffffffc, 0x8}, {0x9, 0x465426f, 0xfffffff8, 0xfffffff7, 0x5, 0x1f6}, {0x3ff, 0x5, 0xffff, 0x88, 0x20, 0x9}, {0x4, 0x4, 0x1f, 0x100, 0x5, 0x1000}, {0x1, 0x9, 0x8, 0x81, 0x10001, 0x9}, {0x0, 0x808, 0x10001, 0x8000, 0xf5, 0x7}, {0x3, 0x5, 0x3, 0xff, 0x100, 0x200}, {0xfffffffd, 0x9, 0x9, 0x8001, 0x8001, 0x9}, {0x1, 0x7, 0x770, 0x6, 0xf77, 0x81}, {0x8000, 0x40de, 0x1000, 0xba1, 0x7, 0x4049}, {0x4, 0xe4, 0x9, 0xa66e, 0x4}, {0x1, 0x7fffffff, 0x0, 0x7, 0x7, 0x6}, {0x7, 0x2, 0x3, 0x4, 0x3, 0x4}, {0xe0000000, 0x4, 0x10001, 0xfff, 0x8, 0x8}, {0x1f, 0x5, 0x20, 0xfffffffe, 0x800, 0x3}, {0x3ff, 0x8, 0xfffffffd, 0x9, 0x200, 0x1}, {0x7, 0x1, 0x9, 0x5, 0x0, 0x6}, {0x24, 0x5, 0x8, 0x2, 0xfffffff8, 0xd3e}, {0x13, 0x6a4, 0x506, 0x40, 0x9, 0x3}, {0x0, 0x5, 0xfffffffc, 0x5, 0xea2, 0x2}, {0xfc1, 0x5, 0x0, 0x0, 0x9dcf, 0x8000}, {0x8, 0x7, 0x7, 0x8, 0x8, 0x1ff}, {0xfffffff8, 0x4, 0x3ff, 0xc6, 0x5, 0xffff}, {0xb1, 0x9, 0x7ff, 0xf6, 0x7f, 0x4}, {0x60000, 0xfffffff8, 0x6, 0x1, 0x2, 0x67}, {0x1, 0x7, 0x8, 0x2, 0x7, 0x1}, {0x8, 0x89, 0x6, 0x5, 0x1, 0x7}, {0x81, 0x100, 0x3c, 0x7, 0x80, 0x1}, {0x4, 0x7f, 0xfffffc12, 0x2, 0x7, 0x7fff}, {0x7, 0x80, 0x6, 0x8, 0x3bfbb0c9, 0x3}, {0x5, 0x1000, 0x8000000, 0xffffffff, 0xddd, 0x7}, {0x2223, 0x2, 0xfffffff7, 0x4, 0x1f4e, 0x208}, {0x8000, 0x3, 0x8, 0xece, 0x2, 0x8}, {0x2, 0x20, 0x9, 0x4, 0x0, 0x7}, {0xfffffffb, 0x80000001, 0x0, 0x9, 0x1, 0x401}, {0x2, 0x1ff, 0x47912f01, 0x6, 0x80000000, 0x3f}, {0x9, 0xab2a, 0x7, 0x29f, 0x1, 0x401}, {0x10001, 0x3, 0x8, 0x10000, 0x9, 0xc7}, {0x3f, 0xfff, 0x3, 0xfffffffb, 0xac, 0x10000}, {0x6, 0x3, 0x5, 0x0, 0x10001}, {0x6, 0x1f, 0x4, 0x9, 0xfffffffc, 0xffff}, {0x3, 0xfd, 0x1ff, 0x7fff, 0x3b, 0x800}, {0x3ff, 0xd40, 0x0, 0xffffff11, 0x4, 0x800000}, {0x6, 0x68c, 0xc000, 0x5, 0x4, 0xffffeb1c}, {0x315c, 0x0, 0x300000, 0x1, 0x3ff, 0x4}, {0x7fff, 0x1, 0x7, 0x0, 0x7, 0x3}, {0xffffffa6, 0x1, 0x5, 0x3f, 0x4, 0x10000}, {0x3, 0x3, 0x1, 0x4, 0x1ff, 0x5}, {0xfff, 0x0, 0xc9, 0x0, 0x1, 0x4}, {0x7, 0x8, 0x4, 0x3f, 0x1ff, 0x5}, {0x100, 0xfffffffb, 0x2, 0x4, 0x3b7, 0x7f5e}, {0x3f, 0x5f, 0x2dd1, 0x1000, 0x1, 0x6}, {0x12, 0x5, 0x3, 0x80000000, 0x8, 0x3}, {0x49e4a578, 0x7, 0xb1a3, 0x6, 0x81}, {0x2, 0x2, 0xa0, 0x1, 0x40, 0x9}, {0x7, 0x1, 0x7, 0x9, 0x2, 0x3fe0000}, {0x3, 0x7f, 0x1f, 0x9fa2, 0xfdc, 0x80000000}, {0x76185838, 0x9, 0x9, 0x1000, 0x2, 0x8001}, {0x9, 0x3f, 0x100, 0x8001, 0x10001, 0x1}, {0x1, 0x4ed, 0xfff, 0x6, 0x8, 0x1}, {0xfffff800, 0xad, 0x3, 0xb2e, 0xffff0000, 0x101}, {0x7b5c, 0x1, 0x7fffffff, 0x1, 0x7, 0xb227}, {0x828, 0x5a7, 0xd696, 0x3fbd, 0x5, 0x6}, {0x0, 0x3ff, 0x7, 0xfffffffa, 0x3f, 0x1}, {0x1ff, 0x6, 0x5, 0xfffffff9, 0xffff, 0x1c}, {0x6, 0x0, 0xffff, 0x8000, 0x5ba3, 0x8}, {0x5, 0x7ff, 0x6, 0x54a, 0x9, 0x101}, {0x7fffffff, 0x80, 0x7fffffff, 0xfffffff7, 0x1, 0x6}, {0x9a, 0xff, 0x80000001, 0x4, 0x0, 0x2}, {0x2, 0x7f, 0xffffffff, 0x9, 0x3, 0x8}, {0x2, 0x2, 0xffffffff, 0x400, 0x4, 0x6}, {0x4, 0x4, 0x1, 0xeaa, 0x9, 0x200}, {0x6, 0x80, 0x0, 0x0, 0x100, 0xf2}, {0x1ff, 0x6, 0x3, 0x40d83139, 0x10000000, 0x8000}, {0x10000, 0xbe7, 0x80000000, 0xa66a, 0x7fff, 0x1}, {0x8001, 0x5, 0x7, 0xf0, 0x8001, 0x5}, {0xfffffff8, 0x9, 0x6, 0x3, 0x400, 0x4}, {0x3660ce77, 0x5, 0x1, 0xe0, 0x1f, 0x1000}, {0xc00, 0x7, 0xfff, 0x2, 0x15, 0x9}, {0x9, 0x5, 0x6, 0x412d163e, 0x0, 0x8000}, {0x81, 0x10001, 0xa002f8, 0x1, 0xd9, 0x46}, {0x1, 0x100, 0x3f, 0x1, 0xbf28, 0xd2}, {0x2c, 0x2, 0x4, 0x3, 0x5, 0x7f}, {0x5, 0x4, 0x8000, 0x6, 0x87421544, 0x4}, {0xfffffff8, 0x3f, 0x800, 0xd8, 0x800}, {0x7fffffff, 0x6f, 0x2fff0cef, 0x5, 0x2df, 0x1f}, {0x3, 0x9, 0x7a, 0x7, 0x3, 0x1ff}, {0x7b, 0x401, 0x1, 0x4, 0x800, 0x9}, {0x3, 0x447, 0x8, 0x0, 0x8, 0x1}, {0x9, 0x81, 0x101, 0x1, 0x9, 0x24ba}, {0x1, 0x7ff, 0xfffff800, 0x2, 0x7ff}, {0x81, 0x1fc000, 0xed1, 0x82, 0x7ff, 0x4}, {0x8ced, 0x9, 0x5, 0x7, 0x1, 0x3}], [{0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2}, {0x5}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x8, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x6fcd7d9efecfd42c}, {0x30c7fcb31badfa41, 0x1}, {}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x21093ce1dcd970d5, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x7, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x2, 0x6, 0x80000001, 0x5}, 0x5, 0x0, [{0x9ed, 0x62d, 0x4, 0x20, 0x4, 0x6}, {0x6, 0x800, 0x7fff, 0x3, 0x0, 0x200}, {0x8001, 0x6, 0x1, 0xffffffff, 0x1, 0x200}, {0x7f, 0x8, 0x2, 0x5, 0x22, 0x2}, {0x8c9d, 0xdc7e, 0x5, 0x9, 0x3, 0x8}]}, [{0x5, 0x2, 0x6, 0xfffffffa, 0x1, 0x48}, {0x0, 0x75e, 0x280, 0xffff720a, 0x8, 0xdaf}, {0x80000001, 0x6, 0x689, 0x8a, 0x5, 0x6412}, {0x6, 0x4, 0x800, 0x3f, 0x7fff, 0x1}, {0x3, 0x40, 0x55ff5190, 0x7ff, 0x8, 0x40e}, {0xe9c, 0x7f, 0x7, 0x100215eb, 0xffff, 0x22}, {0x0, 0x7, 0xffffffff, 0x4, 0x6, 0xffff}, {0x7, 0x92d5, 0xffff0000, 0x200, 0x5, 0x4}, {0x5fa, 0x6, 0x1, 0x4, 0xfff, 0xa73}, {0x15a, 0x80000000, 0x1ff, 0xb79, 0x86eb, 0x63}, {0xff, 0x231, 0x1, 0x1, 0x5}, {0x4, 0xff3c, 0x80, 0x3, 0x8, 0x4}, {0x81, 0x1, 0x35, 0x2, 0x40, 0x3ff}, {0x2, 0xfffffffb, 0x7a93, 0x80000001, 0x4, 0xfffffff9}, {0xff, 0x5, 0x6, 0x5, 0x3, 0xb6}, {0x9, 0x1, 0x3, 0x100, 0x9, 0x5}, {0x1, 0x2, 0x4, 0x1500, 0xffffff81, 0x8}, {0x7f, 0xff, 0x3, 0x1, 0x86, 0x800}, {0x4, 0x5, 0x7ff, 0x8, 0xffffffff, 0xd4a2}, {0x3, 0xfffffffa, 0x8001, 0x7, 0x0, 0x400}, {0x20, 0x1, 0x7, 0x7ff, 0x9, 0x3}, {0x9404, 0x4, 0x8001, 0x100, 0x2, 0x7}, {0x9, 0x2, 0x0, 0xfffffff7, 0x5, 0x40}, {0x81, 0xd42, 0x0, 0x9428, 0x10001, 0x101}, {0x1, 0x40, 0x0, 0x4, 0xadd}, {0x101, 0x3, 0x4, 0x7, 0x9, 0x81}, {0x7, 0x400, 0x400, 0x1, 0x3}, {0x54b8, 0x8, 0x7, 0xa3, 0x1f, 0x89}, {0x2, 0xffffffff, 0x0, 0xe1f, 0x1}, {0x20, 0xa04b, 0x5c, 0x219, 0x1a8c00, 0x9}, {0x18, 0x1, 0x8001, 0x5, 0x81, 0x44}, {0x80000001, 0x0, 0x0, 0x2, 0x9, 0x401}, {0x1, 0x0, 0x6, 0x3b27, 0xffffff97, 0x5}, {0x7, 0xfffffffe, 0x4, 0x5ac, 0x0, 0x2}, {0x200, 0x6, 0x8001, 0x1f, 0x2, 0x100}, {0x2, 0x3, 0x9, 0x1, 0x3ff}, {0x1, 0x7, 0x6, 0x1, 0x6, 0x3}, {0x7, 0x10000, 0x8, 0x0, 0x7, 0x4}, {0x40, 0xe3be, 0x70e5c65a, 0x8, 0x8, 0xfff}, {0x7fff, 0x2, 0x1cd, 0x100, 0x3, 0x1}, {0x0, 0x9, 0x8, 0xffffffff, 0x9, 0x7392}, {0xffff5e60, 0x1, 0x1, 0x4, 0x8d75, 0x5}, {0x1000, 0x4, 0x4, 0x7fff, 0x3, 0xf88}, {0x7f, 0x2c78, 0x10000, 0x800, 0x3f, 0xc4a7}, {0x401, 0x1, 0x8, 0x7, 0x9, 0x9}, {0x80000000, 0x9, 0x1000, 0xca, 0x1f, 0x2}, {0x0, 0x3, 0x8, 0x0, 0x8c, 0x1}, {0x0, 0x460, 0x7, 0x4f8, 0x2, 0x6}, {0x400, 0x30, 0x8, 0xfffffffe, 0x0, 0x10000}, {0x7, 0xa3af, 0x8, 0x8001, 0x4, 0x400}, {0x4, 0x0, 0x6, 0x0, 0x6, 0x5}, {0x7fff, 0x9, 0x81, 0xa7, 0x4b4, 0x1}, {0x8001, 0x3, 0x7, 0x4, 0x6, 0x3}, {0xdfd, 0x7, 0xff, 0xb6a7, 0x4}, {0x9, 0x40, 0x6, 0x4, 0x1000, 0x3ff}, {0x8, 0x3, 0x8246037, 0x0, 0x3ff, 0x6}, {0x6, 0x0, 0xffffffff, 0xfff, 0x653, 0x2}, {0x764, 0x2, 0x5, 0x3, 0x4, 0x3}, {0x3, 0x2, 0x4, 0x7, 0x2}, {0x80000001, 0x3, 0x7, 0x6, 0xffff, 0xfffffffd}, {0x9, 0xfffffffe, 0x5, 0x5, 0xfffffff9, 0x6}, {0x1, 0x3, 0x7, 0x4, 0x100, 0x1}, {0xf58, 0x0, 0x2, 0x1000, 0x6, 0x1f}, {0x2, 0x4, 0x76, 0x9c8, 0x2000000, 0xfb}, {0x100, 0x101, 0x8, 0x8, 0x7, 0x200}, {0x6, 0x400, 0xaa, 0x0, 0x0, 0xda}, {0x8, 0x5, 0x0, 0x4, 0xffffff81}, {0x10000, 0x9d40, 0x1f, 0x7c, 0x0, 0x7}, {0x6, 0xd2a, 0x1f, 0x2, 0xb, 0x5}, {0x4, 0x0, 0xac25, 0xfff, 0x8d, 0x80000001}, {0x0, 0xffffffff, 0x2, 0x6, 0x9, 0x1}, {0x7, 0x3, 0x3, 0x8, 0x66a, 0x200}, {0x5, 0x6, 0x6, 0x6, 0x5, 0x10001}, {0x2, 0x1c000000, 0x7, 0x20, 0x5, 0xe5}, {0x80000001, 0x110, 0xa073, 0x1f, 0x8, 0x5}, {0x7, 0x9, 0x8e4c, 0x9, 0x0, 0x8}, {0x1b, 0x101, 0x6, 0x200, 0x8, 0x77b63a91}, {0xfffff800, 0x0, 0x34c7973c, 0x9, 0x7, 0x7e7e}, {0x1, 0x5, 0x3, 0x4, 0x9}, {0x81, 0x469, 0x8000, 0x2, 0x6f741c80, 0x5b}, {0x7f, 0x3, 0x4, 0x4, 0xc2, 0x34d3}, {0xfffff000, 0x41614ffc, 0x400, 0xfffffffb, 0x0, 0xfffffde4}, {0x6, 0x5, 0x2, 0x5d4e, 0x8, 0x1ff}, {0x80, 0x7, 0x100, 0x5, 0x1, 0x3}, {0x0, 0x81, 0x0, 0x3, 0x3, 0x5}, {0x80, 0x20, 0xff, 0x100, 0x400, 0x2}, {0x80, 0x4f, 0x6, 0x9, 0x0, 0xdb40}, {0x11, 0x3ff, 0xf7, 0x5, 0x400, 0x81}, {0x1, 0x0, 0x2, 0x2e09, 0x269dcbe4, 0xffff7fff}, {0x9, 0x4, 0x8, 0x1, 0xff4}, {0x8000, 0x6, 0x7, 0x3, 0x4, 0xfff}, {0x7ff, 0x1ff, 0x10000, 0x7, 0x7, 0xffff}, {0x0, 0x6, 0x7, 0x3, 0x8, 0x8}, {0x6, 0x1, 0x80000001, 0x6d2, 0x87, 0x59}, {0x3ff, 0x5e4, 0x2, 0x10000, 0xffff, 0x6}, {0x9, 0x3, 0x3, 0x10000, 0x2, 0x3aa2}, {0x664de8f, 0xe9, 0x2, 0x8, 0x4, 0x3ff}, {0x295, 0x6b2, 0x5, 0x7ff, 0x1, 0x73}, {0x8c1, 0x10000, 0x5da, 0x8000, 0x1, 0x8}, {0x4, 0x7fffffff, 0x9, 0x4, 0x7, 0x3}, {0x2, 0x3ff, 0x5, 0x6, 0x2, 0x1f}, {0x9, 0x7e, 0x2, 0x9, 0x7, 0x1}, {0x7f, 0x8de8, 0x1b, 0x745, 0x9, 0x6b}, {0xfffff800, 0x1, 0xd293, 0x6, 0x1414, 0x7}, {0x10000, 0xffff, 0x7, 0x5, 0xcd3c, 0xff}, {0x6, 0x6, 0xfffffffe, 0x3, 0xfffffffe, 0x2}, {0x6, 0xffffff81, 0x100, 0x486, 0xd7b4, 0x6}, {0x7f, 0x7, 0x4, 0x0, 0x6d87, 0x2}, {0x20, 0x92e, 0x2, 0x2af0, 0x7, 0xffffffe0}, {0x7fff, 0xffffffff, 0xcbc, 0x0, 0x0, 0x5}, {0x8, 0xfffffe00, 0x1, 0x7, 0x1f, 0x4d14}, {0xb9c, 0x6, 0x4762, 0x7, 0x0, 0xfdd}, {0x9, 0x1f, 0x5, 0x5, 0x2, 0x8}, {0x5, 0x72, 0x8e3, 0x8, 0x2, 0x3}, {0x1, 0x45, 0x0, 0x3, 0x7, 0x9}, {0x9, 0x5, 0x3ff, 0xab, 0xa5, 0x4}, {0x5bb, 0x0, 0x2, 0x1b89, 0x2d1, 0x9}, {0x101, 0x8, 0x7f, 0xffffff01, 0x7fffffff}, {0x5, 0x1ff, 0x60, 0xfff, 0x3, 0x7ff}, {0x5, 0x30, 0xfffffffc, 0x9, 0x0, 0x8}, {0x800, 0x1, 0x11, 0x7, 0x6, 0x8}, {0x9, 0x5, 0x2, 0x200, 0xc8, 0x2}, {0x6, 0x10001, 0x4, 0x5, 0x8000, 0x4}, {0x100, 0x8, 0x5, 0x8, 0xfff, 0x10000}, {0x1, 0x9, 0x1ff, 0xffffffff, 0x6, 0x7fffffff}, {0x6683, 0x9, 0x3ff, 0x5, 0x5, 0x3}, {0x0, 0x7fffffff, 0x10000, 0x8000, 0x8, 0x80}, {0x1, 0x8, 0x9, 0x8, 0x9}], [{}, {0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x6}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x3}, {0x5}, {0x2}, {}, {0x5, 0x1}, {0x3}, {0x6, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x1, 0xce854fa2b0fcc24f}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3, 0xef3, 0x0, 0x2, 0x3}, 0x12, 0x4, [{0x5, 0x4, 0x4, 0x3, 0x8, 0x699d}, {0x3, 0x4, 0x3, 0x54d9, 0xe00, 0xfffffff8}]}, [{0xd1, 0xff, 0x2f484d64, 0x706, 0x0, 0x20}, {0x1799, 0x5, 0x1, 0x0, 0x2f, 0x100}, {0x2, 0x80000001, 0x9bb4, 0x3, 0x4, 0x4}, {0x2, 0x6, 0x80000001, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x2, 0x5, 0x0, 0x10001}, {0x0, 0x7f, 0x0, 0x101, 0x8, 0x1f}, {0xff, 0xe1b, 0x0, 0x9dc, 0x8, 0x1}, {0x100000, 0x0, 0xdd, 0x101, 0x3fe, 0xfffffffc}, {0x0, 0xa6b, 0x1, 0x8001, 0x2, 0x1}, {0x0, 0x7fff, 0xc3, 0x80, 0xb9, 0x8000}, {0x9, 0x7, 0x9, 0x4, 0x40, 0xfffffe01}, {0x2, 0xfffffffe, 0x1, 0x9, 0x6643, 0x5}, {0xde2, 0x3, 0x7fff, 0x7ff, 0x400, 0x6}, {0x9, 0x6, 0x1, 0x401, 0x3f, 0x7fffffff}, {0x3, 0x9, 0x6, 0xfffffffd, 0x80000001, 0x1000}, {0x8, 0x7ff, 0x0, 0xffffffff, 0x10000, 0x8}, {0x67f, 0x3, 0x6, 0x9, 0x2, 0x2}, {0x5, 0x5, 0x5, 0x5, 0xf02, 0x5}, {0x4, 0x81, 0x80000000, 0x1, 0xd93, 0xc3a}, {0x2, 0x7, 0xa1b, 0x7, 0x10001, 0x6}, {0x8, 0xf1, 0x7fff, 0x3, 0xb581, 0xfffffffd}, {0x6, 0x5, 0x800, 0x20, 0x6, 0xffffffae}, {0x7, 0x3, 0x1000, 0x60, 0x10001, 0x4e}, {0x2, 0x40af, 0xffff, 0x3ff, 0x0, 0xfffffff7}, {0xe2a0, 0xfff, 0x401, 0x9, 0x5b7, 0x5}, {0x8, 0x2, 0x2, 0x52, 0xa6, 0x81}, {0x6, 0x3ff, 0x8, 0x3, 0x6, 0x3}, {0x6, 0x8dde, 0x7, 0xaea, 0x3ff, 0x3}, {0x101, 0x10000, 0xb3be, 0x99cd, 0x7fffffff, 0xfffffffe}, {0x1, 0xdf7, 0x1000, 0xffffff42, 0xfffffff9, 0xfffff217}, {0x5, 0x11990bff, 0x3, 0xe52b, 0x652, 0x213a}, {0x4047471f, 0x10001, 0xd45c, 0x0, 0xc82e, 0xfb}, {0x6, 0xc90, 0x3, 0x0, 0x400, 0x401}, {0xa1d4, 0x4, 0x23b6, 0x6, 0x3, 0x8}, {0x0, 0x5, 0x0, 0x4, 0x2, 0x80}, {0xffffffff, 0x7fffffff, 0x40, 0x10001, 0x6, 0x8}, {0x7, 0x4, 0x7, 0x42a, 0x1ff, 0x8}, {0x5, 0x1, 0x3c4, 0x1000, 0x4, 0x8}, {0x7fffffff, 0x5b, 0x70000, 0x1e3, 0x6, 0x8001}, {0x3, 0x6, 0x5, 0x4, 0x537, 0xffffffff}, {0x4000007, 0xfffff000, 0x6, 0x6, 0x9, 0x7ff}, {0x7, 0x600000, 0x8, 0x401, 0x1, 0xfffffffa}, {0x3, 0x0, 0x4, 0x2, 0x660, 0x400}, {0x9, 0x0, 0x8, 0x7fff, 0x564, 0x4}, {0x3, 0x7ff, 0x5, 0x10000000, 0x7, 0x64d}, {0x6, 0x1, 0x7, 0x2, 0x101, 0x7}, {0x2, 0x401, 0x5, 0xfed1, 0x5, 0x8}, {0x40, 0x6a564d79, 0x5, 0x0, 0x66, 0x200}, {0x80000001, 0x1, 0x800, 0x9, 0x9}, {0x13, 0x1000, 0x5, 0x7fff, 0x7, 0x5}, {0x800, 0x40, 0x6f, 0x80, 0x4, 0x400}, {0x100, 0x4788636e, 0x10000, 0x8, 0x2, 0x4}, {0x1000, 0xfff, 0x2, 0x5, 0xff, 0xfffff800}, {0x800, 0x9, 0x2, 0x8, 0x4, 0x400}, {0x101, 0x10000, 0x9, 0x8, 0x3, 0x80000000}, {0x10001, 0x7000, 0x7c, 0x5dc, 0xffffffff, 0x2d46}, {0x6c09, 0x8, 0x8, 0x2, 0x3ffc000, 0xe2}, {0x9, 0x5, 0x9963, 0xfffffffa, 0x5, 0x1f}, {0xa20, 0x8, 0xd2d4, 0x7, 0x5, 0x3f}, {0x7fffffff, 0xe4, 0x77, 0x32, 0xffffffff, 0x2}, {0x1, 0x5, 0x8, 0x6, 0x7, 0xfffffff8}, {0x400, 0x2, 0x3ff, 0xb7, 0x7, 0x10}, {0x10001, 0xff, 0xb645, 0x3, 0x6, 0xf3}, {0xffffffff, 0x6, 0xc88, 0x0, 0x0, 0x2}, {0x1000, 0x9, 0x7, 0x1f}, {0x10001, 0x10000, 0x1000, 0x6, 0x0, 0x5}, {0xffffffc9, 0xda, 0x7226, 0x3, 0x6, 0xfff}, {0x18e9, 0x3, 0x6, 0xfffffffe, 0x1, 0x800}, {0x1000, 0x8000, 0x5, 0x3, 0x8, 0x2}, {0x8c1, 0x800, 0xb041, 0x6, 0x60, 0x100}, {0x5, 0x7, 0x2, 0x89, 0x400, 0x21}, {0x7, 0xff, 0x5, 0x9, 0x5, 0x2}, {0x4, 0x9, 0xffffffff, 0x20, 0x4c0, 0x7ff}, {0x401, 0xa04, 0x1, 0x71000000, 0xfffffffb, 0x1}, {0x3f, 0x2, 0x6, 0x3, 0x100, 0x1}, {0x401, 0x9, 0x0, 0x64, 0xfffffffe, 0xffff8000}, {0x1, 0x80000000, 0x3, 0x4, 0xa020, 0x81}, {0x0, 0x1f, 0x3, 0x86, 0x9443, 0x4}, {0xc8, 0x2b, 0x116, 0x1, 0xc39a, 0x8}, {0x3e, 0x9, 0xe5d, 0x2, 0x1ab, 0x1}, {0x85, 0xffffff81, 0x4, 0x0, 0x101}, {0x5, 0x9, 0x4, 0x6, 0x5, 0x2}, {0x7, 0x5, 0x9f9, 0x5, 0x63, 0xd7b}, {0x100, 0xdf, 0x101, 0x1, 0x7, 0x1}, {0x3, 0x9, 0x0, 0x6, 0x6, 0x8}, {0x6, 0x8, 0x4, 0x8, 0x7, 0x2}, {0x401, 0x20, 0x9, 0x10000, 0xe57, 0x8}, {0x7, 0x80000000, 0x0, 0x88e, 0x2, 0xffffffff}, {0xffffffff, 0x8, 0x8, 0x5, 0x9, 0xc0}, {0x7fffffff, 0x57d, 0xff, 0x80, 0x401, 0xc2b}, {0xda9, 0x3, 0x400, 0x7, 0x279, 0x4}, {0x0, 0x20, 0x4, 0xfff, 0x35, 0x8c8d}, {0xdef, 0x1, 0x8000, 0x401, 0x0, 0x9}, {0x4884934c, 0x7ff, 0x1, 0x2, 0xde, 0x2}, {0xf12, 0x1d1, 0x1f, 0x0, 0x0, 0x80000001}, {0x0, 0x8, 0x40, 0x2, 0xffffffff, 0x992}, {0xffffffff, 0xd71, 0x0, 0x4, 0x40, 0x5}, {0x40, 0x9, 0x0, 0x9, 0x2, 0x1}, {0x81, 0x8, 0x5, 0x2, 0x7f, 0x2}, {0x0, 0x10001, 0x800, 0x1f, 0xfee2, 0x3}, {0x4, 0x1, 0x2, 0x2, 0x9f, 0x7}, {0xfffffeff, 0x2, 0x10001, 0x1, 0x8, 0x5}, {0x7, 0x94e, 0x1, 0x2, 0x2d2, 0xfff}, {0x7fffffff, 0x8, 0x3, 0x0, 0xb3d, 0x10000000}, {0x1000, 0x1, 0x2f451fcf, 0x1000, 0x7, 0x4}, {0x0, 0x0, 0x1, 0x3ff, 0x1cf, 0xbaf0}, {0x200, 0x16, 0x8000, 0x2, 0x748e8fb6, 0x80000000}, {0x9b, 0x84d, 0x3f, 0x80000000, 0x7, 0x100}, {0x1f, 0x7fff, 0x1, 0xfff, 0x3, 0x200}, {0x0, 0x81, 0x2, 0x3, 0x0, 0x1000}, {0x6, 0xd9e, 0x4, 0xc48, 0x995}, {0x1ab, 0x2, 0x4, 0x3, 0x6fa2, 0x3}, {0x198, 0xffffe6f5, 0x8, 0x6, 0x4, 0x3}, {0x6, 0x9, 0x0, 0x2, 0x10000, 0x7}, {0x0, 0x2, 0x5, 0x1fffe0, 0x1, 0x3521}, {0xc08000, 0xffff, 0x80000001, 0x400, 0x7ff, 0xba}, {0x800, 0x2, 0x80000000, 0x2, 0x7, 0xc31}, {0x80000001, 0x2, 0x4, 0x3, 0x40000000, 0x4}, {0x4, 0x7fffffff, 0x9, 0xff, 0xc707, 0x400}, {0x7, 0x1, 0x292f, 0x7fff, 0x4, 0x1}, {0xfffffc01, 0xffffffff, 0x9e93d53, 0x4, 0x1, 0x2}, {0xa5, 0xe71, 0x2, 0xfff, 0x1, 0x7}, {0x5, 0x7, 0x40, 0x1, 0xfffffffa, 0x42}, {0x7fffffff, 0x1, 0x3f, 0x8, 0x100, 0x7}, {0x80000001, 0x700000, 0x1, 0x1ff, 0x101, 0x1}, {0x4, 0x3ff, 0x9a, 0x2, 0x3, 0xfffffff7}, {0x2, 0xdb22, 0x200, 0xff, 0xfffffffe, 0x8000}, {0x30d, 0x81, 0x1, 0xffffff7f, 0x6f93, 0x40}], [{0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x4}, {0x2}, {}, {}, {0x1}, {0x4}, {}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x3}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}]}}]}, {0x3d, 0x6, "ae811fc3904ec1f35009ee24bc62bbc40b73ab40fb5ca798bc23c2ecf23d9b69ff4bdc5adda239104f10c64ff40e690ab4a99c813c670933fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x74, 0x1d, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x41, 0x6, "9ca23634228302ed59f22bcb916baca7424fbfa58eb62932e18acc4c70d54337a70964d13a289c5827e5064926fe286f289261cf4b83ca8d6c9ce8b5d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x100, 0x20, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0xd96, 0x7, 0x80000001, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x9a, 0x6, "316c84336ae01999db8e6de04847ef159a0d1f55ac8e86f02a4f193e8e1f80c6065ee3f0357eae13f74642867c2bc59437b1b89035c112a7747d168d90e79c3cd988f67e9223f7882dc111b8231040846585fc8a0058a32707de4ebed85c6c4e03eac42252a323c8b19427ae920541bdd3209351b7dce684b434bc41c387932d192e4b83be6a0c855e2cfeb850c29230af8fbaef60fe"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x200, 0x12, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x114, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x65a7, 0x6, 0x4, 0x3}, {0x2c3, 0x7, 0x87, 0x3}, {0x4, 0x1, 0x1, 0x6a80000}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x8, 0x9, 0x20, 0x6}, {0x9, 0x5, 0x3, 0x6}, {0xff, 0x15, 0x80, 0x4}, {0x530, 0xcb, 0x1, 0x81}, {0x7, 0x43, 0x1c, 0x3ff}, {0x7fff, 0x75, 0xef, 0x369}, {0x8, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfff9, 0x3f, 0x71, 0x6}, {0x7, 0x86, 0x0, 0x81}, {0x3f, 0x1f, 0x20, 0x9}, {0x100, 0x2, 0x7f, 0x2f6d}, {0x9, 0xf7, 0x7, 0x3}, {0x1, 0x3f, 0x8, 0x4}, {0x0, 0xff, 0x40, 0x4f}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x9, 0x64, 0x9, 0x5}, {0x4, 0x7, 0x5}, {0x78, 0x3f, 0x9, 0x2}, {0x1000, 0x1f, 0x1f, 0x4}, {0x101, 0x1, 0x2, 0x40}, {0x1, 0xff, 0x8d, 0xa71}, {0x100, 0x1f, 0x1, 0x800}, {0x20, 0x1, 0x6, 0x3}, {0xff, 0x3, 0x86, 0x7}]}]}, {0xc8, 0x6, "77c52113f4777e3861ddabdaa28c86b7017ee17f6ed7f5d9a00b469750f16c0dbf1aafee54170021d36cb589b1e1af35dcadff183bbcdfe97828f6ddac44a1184a40a855c6b2e81ac85156d0a1783d5fab44ebe640ccc0b4d6a49c4d2ec8eb9554428cbe3b06dda3240b86ce7d4e35f1bd3b0d3a33a705a96d3713abbb125f6bd9cefcc40bcd286b45706221aa4204351f6a5103a7b5fdee58f8227304196df135241be584cf93650c1effbc5fbfb331299d74a43ea9b5252a560d9fad8544499fca5a1f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xffff}}, @TCA_RSVP_POLICE={0x44c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x3, 0x4, 0x0, 0x8, {0x0, 0x2, 0x7, 0x0, 0x1}, {0xfb, 0x0, 0x9, 0xfff, 0x98}, 0x10001, 0x1, 0xffffffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc6, 0x0, 0xfff, 0x0, 0x7, 0x200, 0x80, 0x4, 0x4, 0x9, 0x4, 0x200, 0x3, 0xffffffff, 0x8, 0x1, 0x9, 0x6, 0x401, 0xfffffff9, 0x0, 0x3, 0x8, 0xa0c, 0x4902, 0x6, 0xfffffff8, 0x1f, 0x5, 0x3ff, 0x0, 0x5, 0x1, 0x1ff, 0x8c, 0x81, 0x401, 0x1, 0x2e, 0x2, 0x400, 0x81, 0x9, 0x3, 0x80, 0x1, 0x200, 0x1, 0x7fff, 0xfffffffe, 0x1ff, 0x7f, 0x6, 0x4, 0x8, 0xffffffff, 0x671, 0x7, 0x0, 0x0, 0x93, 0x1, 0x5, 0x80, 0x5, 0xaf, 0x1000, 0x3ff, 0x6, 0x0, 0x17e6, 0x1, 0x0, 0x8, 0x9, 0x4, 0x37, 0x7fff, 0x40, 0x7, 0xfffff67c, 0x4, 0x4, 0x9, 0x5, 0x1, 0x6fb3, 0x4, 0x49, 0x4, 0x8, 0x9f7, 0x3, 0x1, 0xffffffff, 0x6ed68f99, 0x4b1afad4, 0x4, 0x3, 0x81, 0x2, 0x401, 0x9, 0xda, 0xfffffffe, 0x4, 0x7, 0x80000000, 0x1, 0xde07, 0x329, 0x400, 0x3, 0x6, 0x3ff, 0x3ff, 0x4, 0x9, 0x7, 0xa614, 0x3ff, 0x9, 0x3ff, 0x1, 0x0, 0x349f, 0x7, 0x400, 0x7, 0xffc00000, 0x8f, 0x1ff, 0x906, 0x401, 0x21a, 0x0, 0x1, 0x5, 0x4, 0x1f55, 0x9, 0x6, 0x0, 0x1, 0xbb7d, 0xfff, 0xe1a, 0xfffffffb, 0x7f, 0x9, 0x8fd, 0xfff, 0x7, 0x101, 0x8d1, 0x5, 0x5, 0x5, 0x2, 0xe78f, 0x8, 0x4, 0x8001, 0x6, 0x2, 0xffff, 0x80, 0x5, 0x80000000, 0x3, 0x8, 0x80000001, 0x1, 0x1f, 0xde3f, 0x8, 0x8001, 0x1, 0x4, 0x0, 0x6, 0x7fffffff, 0x0, 0x40, 0xc199, 0x3c6, 0x8, 0xe408, 0x9, 0x401, 0x0, 0x7, 0x5, 0x1ead, 0x7fff, 0x3ff, 0x40, 0xfffffffa, 0x8, 0x8, 0x7, 0x405a, 0x8f5, 0x0, 0x1, 0x0, 0x5, 0xfffffff7, 0xdd, 0x86c, 0x7f, 0x1, 0x3, 0x29, 0x1f, 0x6, 0x9, 0x400, 0x80000000, 0xffffe967, 0x9, 0x0, 0x400, 0x8, 0x7, 0x1ff, 0x8, 0x0, 0x4000000, 0x6, 0x0, 0x101, 0x1ff, 0x800, 0x5, 0x6, 0x0, 0x8000, 0x6, 0x5, 0x3, 0x3ff, 0x7fff, 0x2, 0x39, 0x91, 0x3f, 0xad3, 0x5, 0xffff8000, 0xfffffbff, 0x6, 0x0, 0x6, 0x4, 0x7]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xce56, 0x3, 0xffff}, {0x7fff, 0x0, 0x20}, 0x88, 0x1f, 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}]}}]}, 0x5a7c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 845.108544][T10645] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 845.230413][T10645] 8021q: adding VLAN 0 to HW filter on device bond328 [ 845.239406][T10647] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 845.273567][T10656] bond328: (slave veth703): Enslaving as an active interface with a down link [ 845.285512][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 845.300630][T10671] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.322057][ T2527] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 845.333240][T10645] bond328: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 845.403723][ T2489] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 845.445507][T10647] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 845.460481][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 845.472103][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 845.482794][T10649] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fsopen(&(0x7f0000000040)='aio\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000000)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fe) dup2(r0, r1) [ 845.497926][T10645] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:39:51 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x5b) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080)=0x30, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r3, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000400)={{0x108, 0x3, 0x3, 0x2a, 0x134, 0x88, 0x3d, 0x400}, "ac58466d69c93b7aca493f8b1d916f0dbff0f51e037b63b0869226326730dee7c16e6ec8b7e0f30c648840f72a874404d63ca94c3c707ed09612129f650475b161abd79f876fbe54b59d5997362698b32a42", [[], [], [], [], [], []]}, 0x672) 11:39:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf1e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 845.559941][T10656] bond328: (slave veth705): Enslaving as an active interface with a down link [ 845.572795][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 845.621783][ T2527] usb 4-1: device firmware changed [ 845.627534][ T2527] usb 4-1: USB disconnect, device number 28 [ 845.661529][ T2489] usb 5-1: Using ep0 maxpacket: 16 [ 845.693357][T10716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 845.709255][T10726] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 845.777647][T10726] 8021q: adding VLAN 0 to HW filter on device bond329 [ 845.785120][ T2489] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 845.799851][ T2489] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 845.811392][ T2489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.826521][ T2489] usb 5-1: config 0 descriptor?? [ 845.873478][ T2489] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 845.918536][T10730] bond329: (slave veth707): Enslaving as an active interface with a down link 11:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x120) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000400)='./file0\x00', 0x0) [ 845.959794][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:39:52 executing program 0: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0xffffffde}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x40801) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_genetlink_get_family_id$mptcp(0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x282) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000240)={0x0, 0xc0, 0x0, 'queue0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0), 0x8) [ 846.005304][T10726] bond329: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 846.031292][ T2527] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 846.076168][ T2517] usb 5-1: USB disconnect, device number 30 11:39:52 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[], 0x1f) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x2000008}}}, 0x60) ftruncate(r0, 0x4000009) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x6, 0x40) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000200)={0x4, {{0x2, 0x4e23, @remote}}, 0x1, 0x3, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x210) sendfile(r3, r4, 0x0, 0x8000fffffffe) shutdown(r3, 0x1) [ 846.255358][T10730] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 846.292571][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 846.421431][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 846.434813][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 846.437980][T10730] 8021q: adding VLAN 0 to HW filter on device bond330 [ 846.445092][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.461585][ T2527] usb 4-1: config 0 descriptor?? [ 846.513087][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 846.627162][T10791] QAT: Invalid ioctl [ 846.671468][ T2517] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 846.725915][ T2489] usb 4-1: USB disconnect, device number 29 [ 846.746643][T10791] QAT: Invalid ioctl [ 846.922089][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 847.061548][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 847.091284][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 847.100602][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.126826][ T2517] usb 5-1: config 0 descriptor?? [ 847.198212][ T2517] hub 5-1:0.0: bad descriptor, ignoring hub [ 847.221570][ T2517] hub: probe of 5-1:0.0 failed with error -5 [ 847.228028][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 847.311403][ T2489] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 847.561562][ T2489] usb 4-1: Using ep0 maxpacket: 32 [ 847.681348][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.695636][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.707836][ T2489] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 847.717599][ T2489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.728764][ T2489] usb 4-1: config 0 descriptor?? [ 847.772379][ T2489] hub 4-1:0.0: USB hub found [ 848.071939][ T2489] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 848.082562][ T2489] usbhid 4-1:0.0: can't add hid device: -22 [ 848.088785][ T2489] usbhid: probe of 4-1:0.0 failed with error -22 [ 848.532223][ T2527] usb 5-1: USB disconnect, device number 31 11:39:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf1f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:39:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001e00c28e"], 0x2c}}, 0x0) r1 = socket(0x10, 0xa, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5701dc02421ddbcc}, 0x200c050) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x87ff}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x159, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 11:39:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x56, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x2000000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11:39:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x6, {0x6, 0x37385ef6f197895f, "a385334c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0xc, 0xab, {0xab, 0xf, "de24a56147fc4e43d94bdbdec700c340c1419208b0bfa4f66cc7037048acc66b0de368fbcf473ea54119171191ba7be9331ee2d991f7913af6870495a5ccb6cd979b8aa7ddeebfe7e1999b0ea80274c69b130652aaaab3261d53f5c2fe91bfc34adeab533e9fc35185b17e0960e2d73d708c4c1b4ca502f03ff1383663d14d857abde96584163e9d6043ee80243f4235751df523932a45e2960533bd3d839bada3337347de16abb6a3"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0x13, 0x4, "84dfeaed"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8, 0x5, 0xfffffffe, 0x5, 0x8, 0x40, 0x9, 0xb85, 0x100, 0x81, 0xfe01, 0x2}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20c301e2, r4}) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0xfc00) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000080)) 11:39:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:39:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 849.846970][T10900] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 849.911490][T10900] 8021q: adding VLAN 0 to HW filter on device bond331 [ 849.920385][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 850.024095][T10931] team0: Port device veth31 added [ 850.032082][ T2489] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 850.111162][ T2517] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 850.130828][T10924] bond331: (slave veth711): Enslaving as an active interface with a down link [ 850.184868][T10953] bond331: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 850.291261][ T2489] usb 4-1: Using ep0 maxpacket: 16 11:39:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x5c, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 850.331511][ T2489] usb 4-1: device firmware changed [ 850.337302][ T2489] usb 4-1: USB disconnect, device number 30 [ 850.369914][T10900] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 850.391236][ T2517] usb 5-1: Using ep0 maxpacket: 16 11:39:56 executing program 0: msgget$private(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, 0x0) rmdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) [ 850.425123][T10924] bond331: (slave veth713): Enslaving as an active interface with a down link 11:39:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf20, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 850.552432][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:39:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d30a8efc06850000ffffffe9"]}) r7 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r7, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030476", @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf253fcc642f0200000008000600ed00000088000500030000004400035f31000000000600040007000000060007004e2200000500080001000000140006050000000000000000000000000000000020000380080005007f000001140002006d61637365633000000000000000000008ba7200a80a0000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xd0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x98, r7, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x17}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x11}, 0x884) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010003904000000000000000000000039", @ANYRES16, @ANYBLOB="03000000000000003000128008000100736974002400028008000100", @ANYRESOCT, @ANYBLOB="08000300ac1414aa06000f0002000000060011004e220000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 850.611267][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 850.636271][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 850.668434][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.710456][ T2517] usb 5-1: config 0 descriptor?? [ 850.721098][ T2489] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 850.752098][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 850.802335][T11052] 8021q: adding VLAN 0 to HW filter on device bond7 11:39:57 executing program 0: msgget$private(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4040ae79, 0x0) rmdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) [ 850.849871][T11053] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 850.942020][T11053] 8021q: adding VLAN 0 to HW filter on device bond332 [ 850.959306][ T2517] usb 5-1: USB disconnect, device number 32 [ 850.967333][T11063] bond332: (slave veth715): Enslaving as an active interface with a down link [ 850.978205][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 11:39:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000280)={{0xde, 0x2}, 'port1\x00', 0x0, 0xc08, 0x321, 0x4, 0xfc5, 0x6, 0x4, 0x0, 0x2, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002800270d000000000400000000000000", @ANYRES32=r8, @ANYBLOB="2300000000000000000000000a000100727376703600000004000200060005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="127cbd8c8a94727b239b4b2a485cd6728d68a7b1f634b3bf71c5f753dccb", 0x1e}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @end, @generic={0x7, 0x4, "8dc6"}]}}}], 0x38}}], 0x1, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020006003900090035000c020b00000019000b4023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x7, 0x6e, 0x4, @local, 'lo\x00'}) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x464eb69030a5456, 0x0) [ 850.991653][ T2489] usb 4-1: Using ep0 maxpacket: 16 [ 851.010580][T11101] bond332: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 851.121316][ T2489] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 851.158520][ T2489] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 851.182248][ T2489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.203208][ T2489] usb 4-1: config 0 descriptor?? [ 851.223667][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 851.250766][T11155] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 851.258225][ T2489] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 851.269485][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 851.303369][T11055] bond8 (uninitialized): Released all slaves [ 851.323830][T11065] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 851.339423][T11152] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 11:39:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000001200e7ef007243b717af", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x92171cfb126ec2a7, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4096, 0x1011}, {&(0x7f00000000c0)=""/119, 0x79}], 0x2, 0x0, 0xfffffffffffffd18}}], 0x4000000000001d9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 851.363685][T11151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 851.422548][T11053] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 851.456304][T11063] bond332: (slave veth717): Enslaving as an active interface with a down link 11:39:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execveat(r1, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='{}\x00', &(0x7f0000000140)='./cgroup.net/syz1\x00'], &(0x7f0000000480)=[&(0x7f0000000200)='&\x00', &(0x7f0000000280)='$\']\'\x00', &(0x7f00000002c0)='./cgroup.net/syz1\x00', &(0x7f0000000300)='./cgroup.net/syz1\x00', &(0x7f0000000340)='$\x00', &(0x7f0000000380)='./cgroup.net/syz1\x00', &(0x7f00000003c0)=']\\-\xb4(}%)\x00', &(0x7f0000000400)='#@]]]\x00', &(0x7f0000000440)='\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$revoke(0x3, r2) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r5, 0x7ffffc, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x1a0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) [ 851.472357][ T2489] usb 4-1: USB disconnect, device number 31 [ 851.488368][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 851.539809][ T28] audit: type=1800 audit(1593603597.818:78): pid=11186 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15751 res=0 [ 851.563822][T11186] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 851.568546][ T2517] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 851.586815][T11186] File: /489/file0/bus PID: 11186 Comm: syz-executor.5 [ 851.915186][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 852.031897][ T2489] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 852.051529][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 852.065164][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 852.075485][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.089211][ T2517] usb 5-1: config 0 descriptor?? [ 852.143696][ T2517] hub 5-1:0.0: bad descriptor, ignoring hub [ 852.149720][ T2517] hub: probe of 5-1:0.0 failed with error -5 [ 852.187990][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 852.270955][ T2489] usb 4-1: Using ep0 maxpacket: 32 [ 852.280026][ T28] audit: type=1800 audit(1593603598.558:79): pid=11186 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15753 res=0 [ 852.392567][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.406336][ T2489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.418225][ T2489] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 852.429083][ T2489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.443045][ T2489] usb 4-1: config 0 descriptor?? [ 852.483319][ T2489] hub 4-1:0.0: USB hub found 11:39:59 executing program 2: rseq(&(0x7f0000000040), 0xffffffffffffff96, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000400)=0x6}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e000000214000300fe80000000000000000000000000000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) rseq(&(0x7f0000000000), 0x20, 0x100000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000024000705aa9774ce06d46a5db12e093ed1875cc70000004007a2a30005000000e0f9ec48e0173c3a49376388162a8804d96a7045bafbfeb0eff4c24adbe0dd8d4ce1017857fb58c2e17aed5704338d985c9b10df25e163096db82b24fc9bc912c4661d04177a45c6", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00%\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00001000000000a5df0100000010d1f02c20ae25e1000f0000000877b61218345da6a63850729a6499f9000000000000"], 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xe}, {0x6, 0xfff2}, {0x6, 0xfff3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x538536668101e9c8) write$capi20(r2, &(0x7f00000002c0)={0x10, 0x0, 0x4, 0x83, 0x8, 0x1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x20000040) [ 852.781025][ T2489] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 852.792885][ T2489] usbhid 4-1:0.0: can't add hid device: -22 [ 852.799047][ T2489] usbhid: probe of 4-1:0.0 failed with error -22 [ 852.855440][T11210] device geneve2 entered promiscuous mode 11:39:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 853.631140][ T2527] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 853.880834][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 853.922267][ T2527] usb 5-1: device firmware changed [ 853.927824][ T2527] usb 5-1: USB disconnect, device number 33 [ 854.331225][ T2527] usb 5-1: new high-speed USB device number 34 using dummy_hcd 11:40:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf21, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x8, 0x2, 0x90, 0x4, 0x6b}) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000007, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') 11:40:00 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r1, 0x400, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf8958855b1a677e85fbcedfda"}]}, 0x38}}, 0x88) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28eef3589d000700", @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf25150000000c0099001f000000030000000c00990007000000ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40894) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000000)={0xe, 0x1}) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0xfc, 0x0, 0x0, 0x0, 0x61c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x8108, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) pipe(0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x235) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) unshare(0x40000000) 11:40:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x56dc0100, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3c]}]}, 0x40}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r3, &(0x7f0000001400)={@void, @val={0x0, 0x0, 0x18}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "4b694be8c1b98adb8d6e88205f33cd8c58231293e0cebdea3eb92130feb761b93cba1d917f0b6bff5cda111631215c3695417f3b1fc134d2eabce5952ec16be421353fc463cf517a42ba1d1dea78912c68559bf32e5921a8d6f849e146f3d814ff8ea1488a6c5a8dca4c0bb5a5805df15e9637560ba748bca5f0a23beb426e188924f144c4124e317061e6d08d4998a61bc3270019fc6bb78aff172d1b311bddced44d1409b3c282ba59171d1fa9ae2ec63aea543f4d399b4f6c235ed315e4326a247700b29a532e83690eb3911d73f8f03f4111b83ea19d6f93a48ec0d2401fa63b9b94bac962fd8c80001e3b8b703f74fb34873d03a3860b4f2780392ebb02a3620921a973cb5ca02d3003d8fd673ca25db503a78853ea976859858a6a4a5e9e144819661db3b0551e11340dc6b755b4cdf7b4df0b948109bb9a9d7b1ff585bb43ec74077085105752776f5d7a477743bb040e320765d33449d1df17dec0407e7fbc07a035b26ccd4f2f16aaeecff53c73dd4ac49f2f061f67889e04297daed05a6a2e2d4c58a0b99d1afc5d9c7add9b117d7786c8c4fc8909c67ad3605d1a9c6c4a97bb0162048146c373060f8538ddd074212cbfde1896512d46fa2724ac76fd1f5978c32f50c3b2c567e0dd88892c84856d3d964bcd05be0bf13a6f9c49eef61c31a54ceee5e6c8e2a4cb5ac294589f1efd387567c5906236a656f1a9836ba4da332e5137dd4398652dbcbbffe2afeffa3143726a8129a8c032b85150c13ac8f99f56cc4ed41f5ec56590e9d5c84510167f28d32db2a4e7450265a868d099b37d8ad6f6c381435769d2c573422cfb2e6ced643f0f8607df01805cfc9992e18fa4c6c8bce2f341bd6a3013e56a186491129dd65d1ff125ef7f2dcd0ca70cb059045d56309e8ce0307dbac0616013ef50968aef621f425c9f3348bdc9809c13dad6e047d74207b7a627b1f2658cc66f376078f0dca939fccb280a67df2485c67e19ff8e874da964a106d3c658198342ae542b01c07fd44066edb1a94ef611ad1dc94a808cc8bc2fec8f993ad315b80d15f6362d110479e5fdf5fed5e6379169a6b327b0faf8211ea880554f051f70bd55f8198067ed874a67f73943a0ed6a0626efaccb96a0edea375c514f2b4a41007bd9b1def76abe67c4ec8538d1087c04e0a4d0498bd1ba32a406818ed5e7dcccce3aba8d7a7ccfd06ad8a2008075e68f04501561309cafb337e2d97dc4383bef96924c4e1ba67a5b9b43f49a5e43092dacaa78bb890e751037238cf385625cd9a70ee468eab2a8477bcdf9dab5e71c57dcc49efa75727694d40e91c30440c45817e908e8adab775088863f8fb2a60b452c3f00ada34877882be2d3f837d460f8a4c9de9ebe8d6c11ed3f0bfd4306eadeaddd8277596139725b624a4e242c91232b954f12448951c6f56662f998edb22557adb237901585c0a871fc0d5b1e1462ddc7e0e68f138e724cee7b7d74b1966eddaf71ddafb8b13910ced717cc2a1aee8b942d431763a5acf62896c0ec7538371cac7ffecddd50864a68b7e0fb65611b22dedc46b051611d684b5d7338595380a601680cc558c0673698955d006225d689369388cbb2c558736a9a2bce867204e936e9199defc6d82001d3de70278919442cd34be83bb25c553a88345c56fc0f5631e5db2c6cf500b04e926c1de2e24bc3c929de0afb795596546b8d5c972153fcddb1c5cba0ed34bab89924facb0a9c58c9155ecd946e660758b0dfa04384b9fd011f0e3d4a6e9c8fa7ff6c5d57f63a7437cde4979bbdd8a6a32013cfc03f6cf90bdc27554b40f8eda758c8865e5dea86d09e8fe1c91251e9b2d9dc31e0e5937bdc56673339782f7920b4d397f7f345c308b1315d84f91827c178260dddd837b8d614ba0bd492913b8f6369d6a4824e2e53da910247c34e7c483d9d178ccf07cf4a8fd73fd170099dbe9a6292a816a979c082d0fa4ca2275e6fdc364b6a684bc536022929b99cfdb4c4bac6760f86eedd9b14e0835c578ac5a639a5e7ec2b6abe15755e1da36d5763d7c85e1c3822ca4911be5f58fb3c60d8524f13e20372e79bd92b5a7ab9afb13770d230c69787b7e6492ccd6c45fb8877af53f76803f9b746d1849f6c42a4a68a944c3542fc1d2cc7e2690ac1e592ea6a8882b5537aaed2ff133143560d3091e7376625549318575501f489d2cc9cc87e2d360b6e91a48a2a867d41d859523d33bcab10b192d8895d597a14f59f4a656f841df8da81d5a02245800a9296f7547b72109c529f0103cc07e859435d9a88f89e89fb5788cadafbe18b6ba688076cbf795699bc2cefaccfaf311eeace44bdf7193c0e132917f459ea9d3289ab86b2f63686a8606559f4e0f3791a8dce6693264b85a73bae47a39b5d99e2bed4e2a2f27c86350b49084e489a5c25af7ec0d6a2c14a00b770b9c9ccb21e84b8186272f96eb04f7507d9fb1e2e61f70c4012221cd29ba0b6399b70eecf62cabd321e1c894b8dc31ef21c3ee3191d6dda1f9ffae012c9a88c3e0c745dacbd9576b7e54338fdf49f9736c5719c28f13b3ed063c6e653c5c2bd75e7153507c6bf2abf015681185130d6792efc533fe54bd647c05996e49c4b53354cd58a7c68b75e633cd90d6ef17b4fd0bc49d8ef2918a6506f9ef79b86df5d920bfa0ea92f3ea48356883050660f5ab47250aa99706d35b8daf11f98558779a1bf6a882516655862febdddacedd406076edafd0a1cfab782c3ad746f5c9486389c11caf4ad85ee2060a22389b45c4cbefd75f675ee9c2981225fea301a9ec1da50d798d8729bf71f885e943c23dda9ce1a33894f8318d05a40c1e2d5a4fbb9de539f3120588ab0a93ec6e7d69911af3c27790b03b0e62615bce3c3c3f075b04a5cda5358783a10477603d1a970e6e1af0956861c0c1591b317be968710d7a2091d604bc7826bf5ed829b36b8838c5a442dcd5e61d4320426477805d410ba33d03075cdd8de528e7aed4aeee31ade48716213b8f487299df14da6628f2444f5fda3bb5d0a327f25d6e256d65ec1da7275e960fc0233020b404cd5b5665cd5a0ff3e9dd727db48c687f60eadcaa80719522b1cc403390b05a3c86d41fba4c856dba891207e14af91afd63e1f840caf33873b6919b34df1e289a95841ac850be41698f95782e1952531ede1d940c9d6cab0861f87caf65d6a3bdd7f78d14b3706c0c2741d27810cc3560d37f8697e056112d23392ab3be659173c64116d7ed5c0f7e0c2d7a5e56fba09b7ae604af8fcbeb898a575b07e28b8d11d18c41ca927579a78d609a4a0c52ef325112d46d686de7c053c8fadbe8fac07109e6ed25939c5f6b51b9dc12b92652343d1c493972fac4f0e138fea46b9712d75ce5db78ca61d54e5bfc0758afee0833486a3562ebb7bba6f3fe44e467150899dc8aa9c207e4f5a8a1f68c2c25dc10c97cded0796324ecffb92ddbc73b19087e18df24a16fc3d6528b6992dba986f417cd5dc3276f398122581814996bbff004dcddaa66369413f824a1248f1f2743912d9a9a8bbe0c057664293c7ef174eff220c7a2fc842788a1b0f459e2f4fc068f8ba2b65a5513f759bbf7e3a22398f870482a655fd053dfd249c2740302906b9ba5feec6c9ca94be6dd738c6420ef0dc68a2df7ae8bad60e90317de84c7548402fb255e7f953f572cd02258cbc711f6eb508e7d1429064311c375de8386f38eacef77507e40876ed70c11f4ea752a721060694b5084879092a626c07245700e7304777ce9e6d5526ab6bdbcd8a1bb1f842ca0db42dd1c5991bba0666ba3b5fd224d3812d287bc27d27e9803cf5c68309859ca1fdc2c9037e44c96bbc0e012c7dd2cf700c295e6e9f79e0aa20565789bde8df6400776cf03cce828bb3c9bc92e257242b9b80d6de2ba07e4d454afd33c10ec83f057d5cdffff43d6a6e10b69e440ecfd72336e294a3a6e0127ea935f288d63ab5d02dfb2ce806bb3e93e9b3e865c62406b204318d79673d50753113b3af12fb0c74d2ade02cb7c4591a5b673fdebe41e3a850b36a5d2e17fb7445b6b125c0a784a01f0014b8e6eb2aa79980c82da5ae7166d6a3a33665aee298ce9186754fe065f3dca40056b0476604bd615b5fd066518cb1c60112af9f12eb2fdd281e00f46320f6f508cefdb40f7c92b80fd7096f10e33a0c4ecbd5aa67c4f66643707092a6da66ed717899c5aaaccf5aeac6db492f392d6e191192d3b4b2757f2ea24b3087fcb346b3545e3a55351f37dbbd438c3593bcf3275f7bb2d0d1251a452faa01c04c19d030694a08400fa30c09ca8efcd0d638cb2bdb92d1fade20a03e80d1011aed207347bd59400dcd1719776f5eb26d2cc3c60e52698705d44ee9b43633a0ca6a1c45710fc479864267a64cc589bba3c7549305476f4a8c4931a96761eb3870acebc83d866c74b52bc3051faadfec0d2af15e75af7864264ce02807ccaf4b036f6b14a0c7d38def12c1d44b40d43da62ebd70636d2de80ea813ae3dc302afe13a4688d591432c885e61771e58d155dc5c74ec67d6d02241ccedb227c5dff04052749e3e6a0232939f332e511267e69a8ae3dddbe239b81351fe767cf1cd6fff3881a6774473fedbd90976675fe9c2fe256a086d5ebf3a08e050d0301d8750406364828c421a81198b0d85ec6a032b2ee8c8dc4e5853ca4536d626168e6730fa929f3b4a70a4fd8d08df4c1e104f420d434c8e12c19d03616425a0d65f4ec3b2e499b402dcd4f43bcf90e1cb0b5a5f3b4b40fb70118d11bfd03f9b675b8ec8c121243392fa84dab99cffd0ee7531c35ba68e806be4667ff35f60b68ef5e595bc3b261e467c6bb6f80f00c98ecdf1b6fe07a1f88d08042402212575845e3ce0b179dc9e9d1a3187036910538cfb05e55831edb1e604a93fa1cd15129cde0056f5fb5d88a44dc2fac9da4cb5e0cc73505617f517d5a319e5ca6131baa3a0f2ccd9772fe3348b299fbcd0b359d54c581ffbb0ff82b827e486ea0bb6329567544ce3f51a73d66a13cfb69b9960a7398c98347b70b34d62ed81460ff251f55dfda90595d63a54e71dfd771491c0edf1d897692700b94ddc4458af03880eee6940d63fc08a00e270fcf239809b005e1aec84566ed7c0147d8fa5c661e9d610760c1bac551b7164ba1ace2162dd4966f5585e9ef9ed500e24cc7eb8d93d3d50bf764cb07b1ad63dc424744c0a79d725eda752c280013470af04718a47f8b4ffc16ebb201a4d120751828a666ac7723b0e19e0a8050ce1e50d65bdd0351378b57834769244fa2b3853785e6b65d334bd7cca0e80e759d3381db2e847a9035482901876c0c22c96dea93008f78c367dfb78dd99fb97e7925062743748d07ef01dd7fc39594239d514fc546ce44b82d48b67bc30a957e18149a78d549ca44dc025862acdeba81aae1d509480217a3d43635d439733e973b11c8d9f314f768b0db2bb61d7d0ebce78fdc0db1f32b979ef6dd82c3ffca9c9f85fa2ab04d28950cc1de66a2de7bbf064022effa830d3e6d64014a13b03743169cab7855f04f789f4d7cd2553f03e3537c0b322598798265b4ea001"}}}}}, 0xfca) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) write$vhci(r1, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "5ec53aebf8f387bf5b57410509814f8b40217249103fb366468bbba5c3b40514fb0b9b2c87ca770b6d4c6bc18e9a95c0d7db3f5d763953621b5c3ff51dc50e4275e776d7564e356a660b9e4f29bd890c8310a6012fdc61a78353ce1b6c783381b472e10c757ee6cdcbf2fc4ea077084fbc6525562af2a80a39873013061311ef322ccf3c614b4ab402e2fdfd8d63caa6e59d2225162b295a1b4595af3c420dde74ae6af1705e8279"}, 0xa9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIASn={0xfffffffffffffe5f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) splice(r5, &(0x7f0000000200)=0x7, r6, &(0x7f0000000240)=0x5, 0x200, 0xe) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1ff, 0x220000) [ 854.508006][T11233] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 854.547791][T11233] 8021q: adding VLAN 0 to HW filter on device bond333 11:40:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 854.560200][T11236] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 854.580792][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 854.643777][T11280] IPVS: ftp: loaded support on port[0] = 21 [ 854.721437][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 854.730562][T11273] bond333: (slave veth719): Enslaving as an active interface with a down link [ 854.745203][ T2489] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 854.750734][ T2527] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 854.788554][T11285] bond333: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 854.823171][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.856310][ T2527] usb 5-1: config 0 descriptor?? [ 854.916924][ T2527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 855.001741][ T2489] usb 4-1: Using ep0 maxpacket: 16 [ 855.022912][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 855.051042][ T2489] usb 4-1: device firmware changed [ 855.062837][ T2489] usb 4-1: USB disconnect, device number 32 [ 855.121667][ T2521] usb 5-1: USB disconnect, device number 34 [ 855.289552][T11233] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 855.319456][T11273] bond333: (slave veth721): Enslaving as an active interface with a down link 11:40:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf22, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc0028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x2bcf) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3ff, 0x7, 0x5, 0x7f}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x20048090) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000001c0)=0x101) [ 855.456247][ T2489] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 855.595649][T11352] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 855.654960][T12281] tipc: TX() has been purged, node left! [ 855.661522][T11352] 8021q: adding VLAN 0 to HW filter on device bond334 [ 855.692900][T11355] bond334: (slave veth723): Enslaving as an active interface with a down link [ 855.702583][T11354] tipc: Started in network mode [ 855.707567][T11354] tipc: Own node identity 7f, cluster identity 4711 [ 855.710887][ T2521] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 855.716312][T11354] tipc: 32-bit node address hash set to 7f [ 855.727486][ T2489] usb 4-1: Using ep0 maxpacket: 16 [ 855.749088][T11361] bond334: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 855.851553][ T2489] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 855.884557][ T2489] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:40:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x6000) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = socket$inet6(0xa, 0x3, 0x5) close(r4) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)) fcntl$notify(r6, 0x402, 0xb1c661d398500c73) fcntl$setownex(r6, 0xf, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x111) ftruncate(r7, 0x208200) sendfile(r4, r5, 0x0, 0x8000fffffffa) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 855.908926][ T2489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.934223][ T2489] usb 4-1: config 0 descriptor?? 11:40:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66baf80cb8d2de3888ef66bafc0cb04aee66400f38806ece66b8a1000f00d0410f00d30f234ab9800000c00f3235001000000f3066b833018ec8410f214f2e0f01df0f20c035080000000f22c0", 0x4d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000100)=0x7, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 855.965592][T11352] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 855.977266][ T2489] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 855.987640][ T2521] usb 5-1: Using ep0 maxpacket: 32 [ 856.065667][T11355] bond334: (slave veth725): Enslaving as an active interface with a down link 11:40:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf23, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 856.111008][ T2521] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.151703][ T2521] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.183708][ T2527] usb 4-1: USB disconnect, device number 33 [ 856.200352][ T2521] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 856.256612][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.295743][T11427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 856.311314][ T2521] usb 5-1: config 0 descriptor?? [ 856.382996][ T2521] hub 5-1:0.0: USB hub found 11:40:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 856.420440][T11427] 8021q: adding VLAN 0 to HW filter on device bond335 [ 856.510907][ T2521] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 856.519969][ T2521] usbhid 5-1:0.0: can't add hid device: -22 [ 856.525448][T11429] bond335: (slave veth727): Enslaving as an active interface with a down link [ 856.573057][ T2521] usbhid: probe of 5-1:0.0 failed with error -22 [ 856.628137][T11449] bond335: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 856.800294][ T2521] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 856.811249][ T2527] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 856.915111][T11427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 856.956832][T11429] bond335: (slave veth729): Enslaving as an active interface with a down link [ 857.060715][ T2521] usb 5-1: Using ep0 maxpacket: 16 [ 857.090781][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 857.100989][ T2521] usb 5-1: device firmware changed [ 857.106410][ T2521] usb 5-1: USB disconnect, device number 35 [ 857.220750][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.236405][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.248575][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 857.259262][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.270239][ T2527] usb 4-1: config 0 descriptor?? [ 857.311583][ T2527] hub 4-1:0.0: USB hub found [ 857.480777][ T2521] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 857.600952][ T2527] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 857.613231][ T2527] usbhid 4-1:0.0: can't add hid device: -22 [ 857.655710][ T2527] usbhid: probe of 4-1:0.0 failed with error -22 [ 857.720570][ T2521] usb 5-1: Using ep0 maxpacket: 16 [ 857.840830][ T2521] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 857.870523][ T2521] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 857.890514][ T2521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.899939][ T2521] usb 5-1: config 0 descriptor?? [ 857.951591][ T2521] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 858.158548][ T2517] usb 5-1: USB disconnect, device number 36 [ 858.780596][ T2517] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 859.040471][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 859.171999][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.182974][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.194874][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 859.206247][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.216199][ T2517] usb 5-1: config 0 descriptor?? 11:40:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x6000) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = socket$inet6(0xa, 0x3, 0x5) close(r4) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)) fcntl$notify(r6, 0x402, 0xb1c661d398500c73) fcntl$setownex(r6, 0xf, &(0x7f0000000080)) r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x111) ftruncate(r7, 0x208200) sendfile(r4, r5, 0x0, 0x8000fffffffa) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 11:40:05 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0x3}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') recvmmsg(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/124, 0x7c}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000004c80)=[{0x0}, {0x0}, {&(0x7f0000004b80)=""/249, 0xf9}], 0x3, &(0x7f0000004cc0)=""/235, 0xeb}, 0x4}, {{0x0, 0x0, &(0x7f0000006000)=[{0x0}, {&(0x7f0000005ec0)=""/196, 0xc4}], 0x2}, 0x3df2}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f00000060c0)=""/15, 0xf}, {&(0x7f0000006100)=""/75, 0x4b}], 0x2}, 0xb95}, {{0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000006340)=""/74, 0x4a}, {0x0}, {&(0x7f00000073c0)=""/140, 0x8c}, {&(0x7f00000000c0)=""/100, 0x64}], 0x4}, 0x7e47}, {{0x0, 0x0, &(0x7f0000007940)=[{&(0x7f0000007740)=""/248, 0xf8}, {0x0}], 0x2}, 0xfff}, {{&(0x7f0000007980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007c40)=[{0x0}, {&(0x7f0000007b00)=""/16, 0x10}, {&(0x7f0000007bc0)=""/117, 0x75}], 0x3, &(0x7f0000008f40)=""/4107, 0x100b}}], 0x9, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x7e, 0x4, 0x8, 0x7}) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f8"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 859.277006][ T2517] hub 5-1:0.0: USB hub found 11:40:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf24, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 859.348474][T11530] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 859.549458][T11530] 8021q: adding VLAN 0 to HW filter on device bond336 [ 859.575989][ T2514] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 859.593402][ T2517] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 859.623362][T11538] bond336: (slave veth731): Enslaving as an active interface with a down link [ 859.631074][ T2517] usbhid 5-1:0.0: can't add hid device: -22 [ 859.651325][ T2517] usbhid: probe of 5-1:0.0 failed with error -22 [ 859.657274][T11556] bond336: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 859.840374][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 859.880944][ T2514] usb 4-1: device firmware changed [ 859.886819][ T2514] usb 4-1: USB disconnect, device number 34 11:40:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0x3}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') recvmmsg(r0, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/124, 0x7c}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000004c80)=[{0x0}, {0x0}, {&(0x7f0000004b80)=""/249, 0xf9}], 0x3, &(0x7f0000004cc0)=""/235, 0xeb}, 0x4}, {{0x0, 0x0, &(0x7f0000006000)=[{0x0}, {&(0x7f0000005ec0)=""/196, 0xc4}], 0x2}, 0x3df2}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f00000060c0)=""/15, 0xf}, {&(0x7f0000006100)=""/75, 0x4b}], 0x2}, 0xb95}, {{0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000006340)=""/74, 0x4a}, {0x0}, {&(0x7f00000073c0)=""/140, 0x8c}, {&(0x7f00000000c0)=""/100, 0x64}], 0x4}, 0x7e47}, {{0x0, 0x0, &(0x7f0000007940)=[{&(0x7f0000007740)=""/248, 0xf8}, {0x0}], 0x2}, 0xfff}, {{&(0x7f0000007980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007c40)=[{0x0}, {&(0x7f0000007b00)=""/16, 0x10}, {&(0x7f0000007bc0)=""/117, 0x75}], 0x3, &(0x7f0000008f40)=""/4107, 0x100b}}], 0x9, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x7e, 0x4, 0x8, 0x7}) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f8"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 859.998985][T11530] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:06 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2b8, 0x190, 0x190, 0x0, 0x190, 0x0, 0x220, 0x240, 0x240, 0x220, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) rt_sigpending(&(0x7f0000000000), 0x8) 11:40:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf25, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 860.141894][T11600] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 860.196481][T11600] 8021q: adding VLAN 0 to HW filter on device bond337 [ 860.245669][T11632] bond337: (slave veth735): Enslaving as an active interface with a down link [ 860.272809][T11600] bond337: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 860.320679][ T2514] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 860.474403][T11600] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 860.538428][T11632] bond337: (slave veth737): Enslaving as an active interface with a down link [ 860.580377][ T2514] usb 4-1: Using ep0 maxpacket: 16 11:40:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf26, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:06 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffecf}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390600001000090468fe07002b000000018dd9fb65000000450001070300001419001a00", 0x24}], 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002800270d000000000400000000000000", @ANYRES32=r7, @ANYBLOB="2300000000000000000000000a000100727376703600000004000200060005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'batadv_slave_1\x00', r7}) sendmsg$nl_route_sched(r1, &(0x7f0000001fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001b40)=@deltclass={0x440, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff1, 0xf}, {0xffe0, 0xe}, {0xa, 0x18}}, [@tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x414, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x6}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0x401, 0x7, 0x8, 0x9, 0x1000, 0x2, 0x62, 0x8001, 0x5, 0xe4180000, 0x101, 0x2, 0xfffffffe, 0x7f, 0x7, 0x6, 0x40, 0x80000001, 0x81, 0x6, 0x6, 0x5, 0x9, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x4, 0x6, 0x0, 0x20, 0x2, 0x4, 0x1, 0xffff, 0x100, 0x1, 0xfffffffc, 0x6, 0x800, 0x80, 0x2bf9, 0x770, 0x8, 0x3777, 0x7, 0x8, 0x1f, 0x2, 0x9, 0x7f, 0x4, 0x80000001, 0x3dfd7692, 0x7f, 0x8000, 0xff, 0xc07, 0xc1, 0x5, 0x1, 0x8001, 0xfffff801, 0x4, 0x0, 0x1ff, 0x6, 0xfffffffe, 0x0, 0x4, 0x1, 0x0, 0x10001, 0x2, 0x9, 0x5, 0x1, 0x0, 0x1, 0x3, 0x85, 0x790, 0x6, 0x7fff, 0x0, 0xac7, 0x6, 0x4, 0x10000, 0xb0, 0x6462ce05, 0x0, 0x2c, 0x9, 0x7d42, 0x6, 0x2, 0x0, 0xf8, 0x3, 0x1, 0x9, 0x7f, 0x7, 0x101, 0x7, 0x2, 0x5, 0x400, 0x9, 0xbeab, 0x6, 0x4, 0x0, 0x4, 0xffffff01, 0x8, 0x7af3, 0x9, 0x5b73, 0x8, 0x401, 0x80000000, 0x5, 0x4, 0xd4, 0x7ff, 0x3, 0xffffffff, 0xffff, 0x9, 0x9, 0xffff, 0x1ff, 0x10001, 0x5, 0x0, 0x7f, 0x3, 0x1, 0xfffffffc, 0x7, 0x5d77, 0xd47a, 0x0, 0xa39, 0x295ea256, 0x6, 0x8, 0x1, 0x8148, 0xff, 0x2, 0x564a, 0x7, 0x7, 0x7, 0xff, 0x10000, 0x20, 0x200, 0x3, 0x0, 0x8, 0x8001, 0x0, 0xfff, 0x8, 0x6, 0x7ff, 0x4, 0x9, 0x1, 0x9, 0x7ff, 0x9, 0x66, 0x7f, 0x6, 0x3, 0x0, 0xffffffff, 0x3, 0x81, 0x3a7, 0x7, 0x6, 0x4, 0xe83, 0x5, 0x9, 0x1f, 0xdf, 0xec, 0xff, 0x9, 0xfffffffc, 0x598, 0x4208, 0x2, 0x40, 0x80000001, 0x8, 0x80, 0x8, 0x5, 0x14, 0x7fff, 0x2, 0x2, 0x0, 0x4, 0x5, 0x7ff, 0x3ff, 0x96, 0x0, 0x1, 0x5, 0x5, 0x8, 0x3, 0x20, 0x400, 0x797, 0xcd7, 0x7f, 0x7, 0x1, 0x80000001, 0x9, 0x5, 0x401, 0xffffff81, 0x0, 0x7fff, 0x2, 0x7f, 0x3, 0x7, 0x8, 0xffffa404, 0x200, 0xb3, 0x7ff, 0x7f, 0x7, 0x8, 0x80000000, 0xffffffff, 0x44d26698, 0x1ff, 0x100, 0xfffffff7]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x4c000}, 0x20005000) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) [ 860.687928][T11655] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 860.700811][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 860.724605][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 860.758612][T11655] 8021q: adding VLAN 0 to HW filter on device bond338 [ 860.763324][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.812375][ T2514] usb 4-1: config 0 descriptor?? [ 860.891791][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 860.908029][T11656] bond338: (slave veth739): Enslaving as an active interface with a down link 11:40:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 860.950767][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.063001][T11655] bond338: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 861.096926][ T2521] usb 4-1: USB disconnect, device number 35 [ 861.278849][ T2518] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 861.344140][T11695] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.373757][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.419031][T11655] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 861.464516][T11656] bond338: (slave veth741): Enslaving as an active interface with a down link [ 861.498198][T11695] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 11:40:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf27, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 861.518004][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.530587][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 861.562751][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.574311][ T2518] usb 5-1: device firmware changed [ 861.583745][ T2518] usb 5-1: USB disconnect, device number 37 [ 861.640792][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 861.650856][T11738] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 861.686050][ T2521] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 861.724542][T11738] 8021q: adding VLAN 0 to HW filter on device bond339 [ 861.794232][T11747] bond339: (slave veth743): Enslaving as an active interface with a down link [ 861.859815][T11738] bond339: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 861.932368][ T2521] usb 4-1: Using ep0 maxpacket: 32 [ 861.960313][ T2518] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 862.059631][ T2521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.085458][ T2521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.117895][ T2521] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 862.149186][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.175417][T11738] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 862.188593][ T2521] usb 4-1: config 0 descriptor?? [ 862.210351][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 862.235340][T11747] bond339: (slave veth745): Enslaving as an active interface with a down link [ 862.241109][ T2521] hub 4-1:0.0: USB hub found [ 862.337796][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 862.363057][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:40:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0e0000008e00660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f0114240f01c40f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000005e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:40:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf28, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 862.394221][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.461966][ T2518] usb 5-1: config 0 descriptor?? [ 862.470281][ T2521] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 862.487036][ T2521] usbhid 4-1:0.0: can't add hid device: -22 [ 862.516832][T11810] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 862.539166][ T2521] usbhid: probe of 4-1:0.0 failed with error -22 [ 862.561229][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 862.663914][T11848] kvm [11802]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 862.700437][T11810] 8021q: adding VLAN 0 to HW filter on device bond340 [ 862.760429][ T2521] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 862.782233][T11816] bond340: (slave veth747): Enslaving as an active interface with a down link [ 862.782410][ T2518] usb 5-1: USB disconnect, device number 38 [ 862.818819][T11857] bond340: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 862.886995][T11848] kvm [11802]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x10 [ 863.020315][ T2521] usb 4-1: Using ep0 maxpacket: 16 [ 863.061337][ T2521] usb 4-1: device firmware changed [ 863.066909][ T2521] usb 4-1: USB disconnect, device number 36 11:40:09 executing program 0: r0 = socket$inet(0x2, 0x5, 0x33) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) [ 863.208124][T11810] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 863.250748][T11816] bond340: (slave veth749): Enslaving as an active interface with a down link 11:40:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf29, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 863.329230][T11896] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 863.340932][ T2518] usb 5-1: new high-speed USB device number 39 using dummy_hcd 11:40:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r0 = getpid() r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x240000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000faff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000fbff000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000020080000000073797a300000000000000000000000090000005b00000000000000b90000e7ff0000000000000000000000000000000000000000000000000000000000000000000000020000dd0000ffffff7f00800000b60000"], 0x118) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, 0xffffffffffffffff, 0x0) waitid(0x1, 0x0, 0x0, 0x8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0xd0, {0x8, 0x9, 0x0, 0x7, 0x1ff, 0x3}}) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000500)=""/198, 0xc6}, {0x0}], 0x4}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='limits\x00') mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 863.419311][T11896] 8021q: adding VLAN 0 to HW filter on device bond341 [ 863.470207][ T2521] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 863.493698][T11933] IPVS: ftp: loaded support on port[0] = 21 [ 863.509461][T11917] bond341: (slave veth751): Enslaving as an active interface with a down link [ 863.566628][T11896] bond341: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 863.591412][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 863.710325][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.721385][ T2521] usb 4-1: Using ep0 maxpacket: 16 [ 863.748259][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.770318][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 863.779773][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.807257][ T2518] usb 5-1: config 0 descriptor?? [ 863.840277][ T2521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 863.868065][ T2521] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 863.879758][ T2518] hub 5-1:0.0: USB hub found [ 863.899814][T11896] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 863.900321][ T2521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.958591][ T2521] usb 4-1: config 0 descriptor?? [ 864.002057][ T2521] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 11:40:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 864.071504][T11917] bond341: (slave veth753): Enslaving as an active interface with a down link [ 864.126040][T11950] bond341: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 864.160308][ T2518] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 864.169046][ T2518] usbhid 5-1:0.0: can't add hid device: -22 [ 864.196779][ T2518] usbhid: probe of 5-1:0.0 failed with error -22 [ 864.220711][ T2514] usb 4-1: USB disconnect, device number 37 [ 864.349096][T11938] IPVS: ftp: loaded support on port[0] = 21 [ 864.390335][ T2518] usb 5-1: reset high-speed USB device number 39 using dummy_hcd 11:40:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf2a, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 864.552780][ T7] tipc: TX() has been purged, node left! [ 864.573080][T12007] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 864.630764][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 864.634535][T12007] 8021q: adding VLAN 0 to HW filter on device bond342 [ 864.670355][ T2518] usb 5-1: device firmware changed [ 864.676730][ T2518] usb 5-1: USB disconnect, device number 39 [ 864.708777][T12036] bond342: (slave veth755): Enslaving as an active interface with a down link [ 864.810113][ T2514] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 864.833158][T12036] bond342: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 865.050154][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 865.081658][ T2518] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 865.144692][T12007] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 865.170308][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.188378][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 11:40:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf2b, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 865.216759][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 865.234347][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.263593][ T2514] usb 4-1: config 0 descriptor?? [ 865.312677][ T2514] hub 4-1:0.0: USB hub found [ 865.320148][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 865.373476][T12068] 8021q: adding VLAN 0 to HW filter on device bond343 [ 865.399522][T12073] bond343: (slave veth759): Enslaving as an active interface with a down link [ 865.444179][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 865.463862][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 865.478417][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.524230][ T2518] usb 5-1: config 0 descriptor?? [ 865.534903][T12106] bond343: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:40:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 865.594179][ T2514] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 865.603892][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 865.622596][ T2514] usbhid 4-1:0.0: can't add hid device: -22 [ 865.650224][ T2514] usbhid: probe of 4-1:0.0 failed with error -22 [ 865.806839][ T2517] usb 5-1: USB disconnect, device number 40 [ 865.870192][ T2514] usb 4-1: reset high-speed USB device number 38 using dummy_hcd 11:40:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x38, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf8958855b1a677e85fbcedfda"}]}, 0x38}}, 0x88) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f731f1d41efcca63f0d5e56322"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x3, 0x5, 0x2}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x44d47f98}}, 0x4, 0x1e0}, 0x90) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x12003, 0x0) sendmsg$key(r5, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x44080) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0xfc, 0x8, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10ff00}) [ 866.120274][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 866.160434][ T2514] usb 4-1: device firmware changed [ 866.166257][ T2514] usb 4-1: USB disconnect, device number 38 [ 866.379118][T12068] validate_nla: 1 callbacks suppressed [ 866.379127][T12068] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 866.421079][ T2517] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 866.449770][T12073] bond343: (slave veth761): Enslaving as an active interface with a down link 11:40:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf2c, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 866.559907][ T2514] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 866.676876][T12155] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 866.684417][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 866.736392][T12155] 8021q: adding VLAN 0 to HW filter on device bond344 [ 866.764019][T12158] bond344: (slave veth763): Enslaving as an active interface with a down link 11:40:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x2, 0x5}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = dup2(r5, r2) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250300000008000100000000000c000800a1000000000000000c0004007f000000000000000c00030003000000000000000c00060001000000000000000c00040058090000000000000c00080000000000000000004c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="aa3ef2d097b366b1baaf562b18e1ff0640e8c15d8cdb3f2bead33a8e7e2b49654f10c102da4658f5e236990e3dbc22ad2b2d4e651a9b46c5acef2bbd7580a319de30e800"/78, @ANYRES32=r6, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x40810}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000000000000ac3a77ce724a0530dfbf000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500050001000000"], 0x44}}, 0x0) [ 866.787963][T12195] bond344: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 866.806926][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 866.846324][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.876628][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.917433][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 866.930219][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 866.943043][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.948156][ T2517] usb 5-1: config 0 descriptor?? [ 866.959595][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 866.970244][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.984115][ T2514] usb 4-1: config 0 descriptor?? [ 867.010799][ T2517] hub 5-1:0.0: USB hub found [ 867.034190][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 11:40:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 867.200629][ T2517] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 867.209186][ T2517] usbhid 5-1:0.0: can't add hid device: -22 [ 867.227332][ T2517] usbhid: probe of 5-1:0.0 failed with error -22 11:40:13 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) modify_ldt$read(0x0, &(0x7f00000013c0)=""/209, 0xd1) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x500) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000020026001b0000000000"], 0x28}}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @ethernet={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @nl=@kern={0x10, 0x0, 0x0, 0x400}, @phonet={0x23, 0xff, 0x2}, 0x386a, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='veth0_to_batadv\x00', 0x2, 0x8, 0x7}) [ 867.269557][ T2525] usb 4-1: USB disconnect, device number 39 11:40:13 executing program 2: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400e7e55669ce3415d96c00", @ANYRES16=r2, @ANYBLOB="050200000000000000000500000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000580)={0x0, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) [ 867.396250][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 867.416534][T12155] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:13 executing program 5: unshare(0x60060280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4786, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000000180)={'tunl0\x00', @ifru_flags=0x3001}) [ 867.461616][ T2517] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 867.548895][T12158] bond344: (slave veth765): Enslaving as an active interface with a down link [ 867.597397][T12248] IPVS: ftp: loaded support on port[0] = 21 [ 867.729873][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 867.786194][ T2517] usb 5-1: device firmware changed [ 867.792222][ T2517] usb 5-1: USB disconnect, device number 41 [ 867.812647][T12249] : renamed from tunl0 [ 867.859796][ T2525] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 868.110085][ T2525] usb 4-1: Using ep0 maxpacket: 32 [ 868.218133][ T2517] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 868.260516][ T2525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.277919][ T2525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.296269][ T2525] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 868.305817][ T2525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.328096][ T2525] usb 4-1: config 0 descriptor?? [ 868.377296][ T2525] hub 4-1:0.0: USB hub found [ 868.484306][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 868.591204][ T2525] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 868.631636][ T2525] usbhid 4-1:0.0: can't add hid device: -22 [ 868.652377][ T2525] usbhid: probe of 4-1:0.0 failed with error -22 [ 868.666044][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 868.688491][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 868.713916][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.726157][ T2517] usb 5-1: config 0 descriptor?? [ 868.770909][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 868.984144][ T2517] usb 5-1: USB disconnect, device number 42 [ 869.601840][ T2517] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 869.630841][ T7] tipc: TX() has been purged, node left! [ 869.870604][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 869.920456][ T2518] usb 4-1: USB disconnect, device number 40 [ 870.000147][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.011363][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.023110][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 870.033035][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.050663][ T2517] usb 5-1: config 0 descriptor?? 11:40:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf2d, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r6 = dup2(r5, r4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{r9, r10/1000+60000}, {r11, r12/1000+10000}}) dup3(r6, r3, 0x0) 11:40:16 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0275002f002b0001000bfc270000007f005d975fa5cece345667abe17576545ae77a0e461a2380e0fa9ab25bc65e8b5b91702bd19c1a73b9b35159561c78829a8af1d7d46f8d0779b171408c46854ab4a2ad6731343ab4f03614abcf9f650b2384a26840c4aafc536b1073a4352b8f41d82df667f04935ba40952bdefb9c0998099a14f90c71bb73e98a53806e594608174755fc357d2712e62da5eaf9567f52ce2b2e274940601b6f5b8dd307756926f60509098c5495a9a1430cb0ab2ae811db2f6919db9fd523063f4578c6a7155468351d057e1f2c8243d1494cce18b8e9"], 0x34) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@dev, 0x0, 0x32}, 0x2, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x4}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="72b00a57415d5e4467b9bcdfa8f1f708336068404c84f49cf14a1549a919efc7c484142fed50e055f37256875fbedb9b50db47fad64038ec14cb9e9a5c7b0af9857041afd32c6f0e091b8e93da11b62ba898f9e508a069095326", 0x5a}, {&(0x7f0000000400)="c7a82a38db8db7c32c3e80283cef313615eb19c511e265c3ee3c3831c98b4d0b75d69f6bc09fa45f54773eb06b30184bb22614a218a0589ea3f34ddfe5cd5971577bc9f887695a88572a709a99f87004bceea29f0d76475ccede9aa24c37c9f6485ba83eaa9d5c5e23f491395523789a2fdb629322e36773ca81d05b74408a7a9db6dcf5dc24b3f60f7e38cf651d0ece15a8fcd43ffcc6b9f6a400078d41a2529c8a2f639c3df2e762f76771bc5518f1c492a85e1e33649ba362839cc83bcccca3a75c4cb4e0555c0b3ec5782ccca8697283f12196e2126b44c2eab4", 0xdc}], 0x2, &(0x7f0000000500)=[{0x18, 0x110, 0x81, "bb482105453ef0"}, {0xa0, 0x103, 0x0, "ea16284536d715b703296910d946c07b21a85ad5f73a62de8a34e3d34877f223d6a3216659a9fd6764db155328fa60bdd432cc11b5712a0a7c3343da8be4b916dd62980995e8e15437437f54546dca5ff47dbcc90d6013d2939b6266fa129d5a25ec79df5d02f6bae763737dd9f5f081cff221c24cc8ad766ad9c5a69f830f0194e2f68010990158992bedf3c85f2b"}, {0x58, 0x1, 0xfffffffa, "3e8e96e5a23e0eaa96d5752afd650a5c01451808376cd8d68d716a5474042d8b7b6b69fc81584890c5a5f83d431a9fab7a3daadf443af399d88950be42761760d34598f4ce35"}, {0x30, 0x3a, 0x800, "cacdc142c7f8bfb3783ae8e17d3011582b26dffabd0cd44a07996330"}, {0xe0, 0xff, 0x5, "be1a3c3e0b75204476ed0576370a916b5274c4beffe6f2b92233b49d6b65795d03df41f5f9d9ae5fb1568b150e2b5b6e8f471baff79a4c2c0670499aedd5a4703ca9bfc190794d1d4c1fbe5dc1f1fb2c5a83723899ef5f4a5f8fa57a3bda4a56238fca77c7079c4c2661b91227ba0c1cfd9799ec336e160f391a1edd347b32ac2da9a7253b1af8f2c991e7153f1040f7f148b06e7f4f217ece95b9067f3b377faf52c418ca0bdb51b8d023b3aa84a3a2cdd6cd13931fa28aea9e5ffb36d77bc12bf4815ad165fe061e44"}, {0x30, 0x109, 0x80, "9bca57e3c3d0c4335309911d8dd635c19df80d42c0cad44f836a4a5c3ea7"}], 0x250}}], 0x2, 0x11) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) [ 870.101257][ T2517] hub 5-1:0.0: USB hub found 11:40:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:16 executing program 0: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x3) r2 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x100) pselect6(0x40, &(0x7f0000000040)={0x5, 0x5, 0x8001, 0x0, 0x0, 0x80000001, 0xff, 0x2}, &(0x7f0000000080)={0x8, 0x6, 0x0, 0x6, 0xaf5, 0x100000001, 0x3f}, &(0x7f0000000180)={0xb4, 0x3, 0x23b8f3b0, 0x6, 0x20, 0x1, 0x1ff, 0x8}, &(0x7f0000000240), 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x6}, 0x1c) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) 11:40:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 870.187362][T12321] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 870.218434][T12321] 8021q: adding VLAN 0 to HW filter on device bond345 [ 870.293705][ T2517] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 870.333330][ T2517] usbhid 5-1:0.0: can't add hid device: -22 [ 870.354481][T12363] bond345: (slave veth767): Enslaving as an active interface with a down link [ 870.368399][ T2517] usbhid: probe of 5-1:0.0 failed with error -22 11:40:16 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8, 0x8001, 0x7, 0x5, 0x480, 0x7, 0xfffffffc}) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x40000000) [ 870.444007][T12376] bond345: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 870.469987][ T2518] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 870.530331][T12386] IPVS: ftp: loaded support on port[0] = 21 [ 870.639798][ T2517] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 870.711486][ T2518] usb 4-1: Using ep0 maxpacket: 16 [ 870.818713][T12321] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 870.840289][ T2518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 870.868523][T12363] bond345: (slave veth769): Enslaving as an active interface with a down link [ 870.873593][ T2518] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 870.889882][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 870.909427][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.938203][ T2518] usb 4-1: config 0 descriptor?? [ 870.950398][ T2517] usb 5-1: device firmware changed [ 870.956434][ T2517] usb 5-1: USB disconnect, device number 43 11:40:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf2e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:17 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000004d50104"], 0x92) [ 871.002496][ T2518] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 871.105122][T12427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 871.189402][T12455] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 871.189402][T12455] program syz-executor.5 not setting count and/or reply_len properly [ 871.202511][T12427] 8021q: adding VLAN 0 to HW filter on device bond346 [ 871.212101][ T2518] usb 4-1: USB disconnect, device number 41 11:40:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4100000000000077, 0x8040) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rds(0x15, 0x5, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002800270d000000000400000000000000", @ANYRES32=r10, @ANYBLOB="2300000000000000000000000a000100727376703600000004000200060005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfdd0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newaddr={0x78, 0x14, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x99, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_ADDRESS={0x0, 0x1, @multicast2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r3, r4, r5], 0x4) [ 871.391340][ T2517] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 871.513972][T12431] bond346: (slave veth771): Enslaving as an active interface with a down link [ 871.577443][T12471] bond346: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 871.669607][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 871.789913][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 871.799718][ T2518] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 871.828507][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 871.859645][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.893282][T12427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 871.911511][ T2517] usb 5-1: config 0 descriptor?? [ 871.934945][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 871.970964][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:40:18 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000004d50104"], 0x92) [ 872.017686][T12482] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 872.058170][ T2518] usb 4-1: Using ep0 maxpacket: 32 [ 872.126941][T12431] bond346: (slave veth773): Enslaving as an active interface with a down link [ 872.175954][ T2514] usb 5-1: USB disconnect, device number 44 [ 872.182493][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.216716][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.245001][ T2518] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 11:40:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf2f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:18 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(0xffffffffffffffff) r1 = open(0x0, 0x0, 0x0) ftruncate(r1, 0x200002) fremovexattr(0xffffffffffffffff, &(0x7f00000002c0)=@random={'osx.', 'wlc\x00'}) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40402}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c8, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x160507ec}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7da39abb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38e47a15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2330102b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x546c32d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40b86bfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c907f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55dde817}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74844ba0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f8bbb0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b0854f6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb258}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1087}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44b3c20e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fee}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004080) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x2f0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4236505}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ccf9ed2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d769289}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x297e162e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd55895e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x534d8b84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b3ab2b4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x694fd5e7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba2ce6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b72fa97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59bc9fc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cd00207}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51f1d01f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5d2125}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bd559bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cf64fb6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd30a6ed}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5add}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54dc0e15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c8fc93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x439cc7f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6806ad15}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6affc39d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34cda26d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7feef427}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x906}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4086}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7abd9013}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f5fecdf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d34acf8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358dce66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3274ffa7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c03d311}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53154b23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15e2976f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1782}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7de7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41cd}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3388}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb63}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54c0178d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d1e6109}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf44}]}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x24000004}, 0x1) recvmsg(r2, 0x0, 0x0) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8923, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000f42ad512d4738dad069d6d2edcfded40b63718d4b39953068905cba471a7d3948267661e010d186e295a68bcc59da42b4b5a758831e4ad7f26443b2d9b6de4dd233a3d521834945ae9fb2361dbb14b2f595c47f13875e706d649c2f56b835f83274434dd70445ef683037f4022de3fd255b082919df1195608e52d66b7100b59a4f09e6fad85d4f6897a463683813a57d2cbbc9d2158ec0c8bc30c158412a7fbacd69fd9cd34027f0da5dab55f2873774167534f92311b19040f1ea9", @ANYRES16, @ANYBLOB="02002dbd7000fedbdf2504000000280001800c0007003600000015000000080009006b000000060004004e21000006000200ff00000054000180060004004e21000008000600776c630008000b00736970000c0007002200000008000000080009001a0000000c00070017000000010000000c00070020000000000000000c000700020000002000000050000380060004000180000008000500ffffffff050008000000000008000100010000001400020073797a6b616c6c6572310000000000000600040001040000060007004e23000005000800010000000800040000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000014}, 0x4080) [ 872.265586][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.266824][T12509] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 872.266824][T12509] program syz-executor.5 not setting count and/or reply_len properly [ 872.283351][ T2518] usb 4-1: config 0 descriptor?? [ 872.340427][ T2518] hub 4-1:0.0: USB hub found [ 872.421972][T12513] @: renamed from ip6gre0 [ 872.498054][T12516] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:18 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="ca7ce258ed1405428fa898c3ba392dd855a9656b3c68df96f50d86868c3e5f15a297a12ca0ad374ed305502c449e58d0f49d791f08e6cc6c8b670b433fb62e400b0aefbf7a60b3c184eb1c6d73b209593cfbf14fcc37c4630579d2475ff8e0470ffdbbd503c8e32e921e6f85a5a5c90698326d5ee8cde930c6ecd6dd7bc70b43c54e282c07d302b685441847a4f5ec9041c6a962923b6c5934191a67e8f03ad80cab487e67d86213619b4402ebc99e5daccfbf853556ae393b469472b17bd5f2ae3dd47e826ade9f6453db40099a50ad439097541d1d9243fdecb2bf2745c24a2721247c51a96875462aa6ae638e8b8028c7a35bcc3b48c565989703973d4992") syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000004d50104"], 0x92) [ 872.560580][ T2518] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 872.565482][T12516] 8021q: adding VLAN 0 to HW filter on device bond347 [ 872.608994][ T2518] usbhid 4-1:0.0: can't add hid device: -22 [ 872.620860][T12520] bond347: (slave veth775): Enslaving as an active interface with a down link [ 872.640722][T12516] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x48, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000080)="9c5963ce9528017c2751bbb55e0447b5", 0x10}, {&(0x7f0000000040)="328da01e65d586a9c68a28f1b6767f0cf53ac14b8dcb6f7c26d8e51a4603000000000000009f", 0x74}, {&(0x7f0000000240)="f0650ae0ae7df841a6954d3368b3415664637bf3d1c85fddf4431524634f665345bf772e8bc320c5b1d6b7b8c968750ca45084d4496d172b193084cc86fd91166cc2e84179c9aff3f732924c1a3ca3ecfaae20a5963eddadd0ecb27faf51dd7ec2b09bee4bb489ea425d3983789e84f15a680000c7a5cc612335093ce082f7c04d3199b8a75a3c2144e3ed143cf66025756069da0b35c4a90f880f442f24ae37dd5ccb2ffc2f0b66bfaf642a9fc12470f9e7601990bb8c6b3e6236572d", 0xbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="6048ce550fb3b26995c145bd0ae6da892b4244d894d14372cbc054cdbd281232cb292864f82755210be8ca8e2f8b782d3866251c259386b4f68545062ac0f3768848ce309fe0a0796f2d6d6b00781a14acf17c0a139e60b7b2c3cd78730b33d6eeb7012768a633a4455020a5f9f0174211a044106cbc9a1bd6dd3b6acd6a9554895e552d8ab2aae1ef0e28b1c12cada099e39c58ae5e636d5322270e9cc3700bb0881d783052c68d93ee4438160a42930693bb4bb362805eea14c61898d826c32b27b01155", 0xc5}, {&(0x7f0000002240)="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", 0x64a}], 0x2}}], 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f02000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b80"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 872.692815][ T2518] usbhid: probe of 4-1:0.0 failed with error -22 [ 872.755686][T12520] bond347: (slave veth777): Enslaving as an active interface with a down link [ 872.769788][ T2514] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 872.835465][T12576] sg_write: data in/out 262577/104 bytes for SCSI command 0x0-- guessing data in; [ 872.835465][T12576] program syz-executor.5 not setting count and/or reply_len properly [ 873.009548][ T2514] usb 5-1: Using ep0 maxpacket: 32 [ 873.145329][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.177852][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.207424][ T2514] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 873.232188][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.256809][ T2514] usb 5-1: config 0 descriptor?? [ 873.308065][ T2514] hub 5-1:0.0: USB hub found [ 873.430158][ T2514] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 873.438916][ T2514] usbhid 5-1:0.0: can't add hid device: -22 [ 873.461774][ T2514] usbhid: probe of 5-1:0.0 failed with error -22 [ 873.501027][ T2514] usb 5-1: USB disconnect, device number 45 11:40:20 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c6530806f77100407459f00000000000092290a7e4555a763c15ceda085e2da58f729fa6680d7b0ec89b551c676ed3ae7a274467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149000014f0771b65d33e129933dd93f99f00cd6b3e5903e100000000"], 0x80) lchown(0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, &(0x7f0000000000), 0x20000000, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) ptrace$pokeuser(0x6, r2, 0x0, 0x0) readv(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/189, 0xbd}], 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r4, 0xa, 0x11) fcntl$setlease(r4, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) 11:40:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf30, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pkey_alloc(0x0, 0x2) ioctl$KVM_NMI(r2, 0xae9a) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x2b, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vlan1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x4c080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r4, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000140)={r4, &(0x7f0000000300)=""/80}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={0x0, 0x5}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) 11:40:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r0, 0x80000101, 0x0) write$dsp(r0, &(0x7f0000000040)="ae2db12e36214fb8f414284e4a9c1701c5dbe78602156ba4caf113f1fceeb6329f74536bf53e7324996471c576d4d55f6aa7ca473fdf63015d45cb4958fe1e1c1a747a09764ab4ae66445693c5ed016d397beb041ddb394327b3c26f24f2201d189daf888658e099f128a48136b3561cedfe1f8f118f4b76e7b5316d394c2495d6328711adbe090462884b48da914aed5f6fb2ebabbd97103783c70c647d380ff7461db2b26fae95ccf523e4f9aeef9b778e0063483c1b9af41c3d301c5e9a0fcf2b3239f034a53b5830c9df74bccee58844f4a71cc3aaa25e4f", 0xda) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x12159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec603d9afa29cb3, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x1}, 0x2) r5 = dup3(r4, r3, 0x0) write$binfmt_misc(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x91, 0x5844, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 11:40:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 873.847877][T12607] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 873.892642][ T7] tipc: TX() has been purged, node left! [ 873.920409][ T2527] usb 4-1: USB disconnect, device number 42 [ 874.040717][T12607] 8021q: adding VLAN 0 to HW filter on device bond348 11:40:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xec02a100, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680)='/dev/snapshot\x00', 0x8000, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000140)=0x209d1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) 11:40:20 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x11a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 874.150238][T12617] bond348: (slave veth779): Enslaving as an active interface with a down link [ 874.159602][ T2518] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 874.222089][ T2527] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 874.250981][T12656] bond348: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:40:20 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001200b99756da58e2bfff0000000000005d8e687fa17558e588393338851a8f299af98696be2ccfd11aaa19c6feeca81b1a9c79538b50de449c7a1eca338fa4805610bb224e8be6d21d537d28e502aa4204a8674ae1fda0f570022c34a5dcd9996db630e36ef6b2", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035"], 0x34}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 874.267903][T12681] IPVS: ftp: loaded support on port[0] = 21 [ 874.391938][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 874.401794][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 874.489536][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 874.520575][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 874.545886][T12686] IPVS: ftp: loaded support on port[0] = 21 [ 874.569385][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 874.579169][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.595483][ T2518] usb 5-1: config 0 descriptor?? 11:40:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000100)) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000180)=0x7) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) fallocate(r1, 0x100000003, 0x0, 0x8001) [ 874.629839][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 874.646208][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 874.661135][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 874.731981][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.749722][T12607] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 874.772301][ T2527] usb 4-1: config 0 descriptor?? 11:40:21 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="2000001168001308007500f5a803000202000000000000000800050001"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) [ 874.814344][T12617] bond348: (slave veth781): Enslaving as an active interface with a down link [ 874.830656][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 874.848759][ T2518] usb 5-1: USB disconnect, device number 46 11:40:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x300000d, 0x4000010, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$CAPI_GET_SERIAL(r9, 0xc0044308, &(0x7f0000000180)=0x10001) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r10 = dup2(r7, r5) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r6, 0x800}, &(0x7f0000000140)=0x8) dup3(r10, r4, 0x0) 11:40:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf31, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 875.034437][ T2526] usb 4-1: USB disconnect, device number 43 [ 875.053979][T12728] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 875.137757][T12728] 8021q: adding VLAN 0 to HW filter on device bond349 [ 875.320511][T12735] bond349: (slave veth783): Enslaving as an active interface with a down link 11:40:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000fbdbdf250a000000f1be70aa70ab1dfa63828538d11966bf57af3a744ce61bc0e019681411ce1e1e01cc71ab4b32c3f9dcb14a5260c18fb258275f39c26af40d908acfb20c65e5c46c03f1fbf626897372b1f289cd3b79026c89b745d040cefa0eba3cbc88d52f3453"], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x0, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x154, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6b74}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf9ba}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000da00d5f994c2c99f00000000000000000000000000000000000000000000000000000000000000000000000002000000ff03000000000000a30000000000000000000000000000009b00"/108]) fchownat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x1000) write$binfmt_elf64(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1a0) fallocate(r1, 0x100000003, 0xe, 0x80019c) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000001c0)=""/83, 0x53}) open(&(0x7f0000000180)='./bus\x00', 0x60403, 0x11a) [ 875.414719][T12772] bond349: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 875.439480][ T2518] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 875.619778][ T2526] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 875.635515][ T28] audit: type=1804 audit(1593603621.909:80): pid=12786 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/507/file0/bus" dev="sda1" ino=15755 res=1 [ 875.679467][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 875.803822][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.838391][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.884416][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 875.889343][ T2526] usb 4-1: Using ep0 maxpacket: 32 [ 875.937881][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.978289][ T2518] usb 5-1: config 0 descriptor?? [ 876.029732][ T2526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.054026][ T2518] hub 5-1:0.0: USB hub found [ 876.055673][ T2526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 11:40:22 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000048680000000800190000000000"], 0x28}}, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000280)={0x5, 0x5}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x9c, &(0x7f0000000140)="fe6ebc1e662d6567f3a94e0e7a1bed55261f5ef256fbaa3d5b3528feda30cbdb275809d362d79116ba54337bd178008334fff2e81835218ef4d20c79c72995a2d2b21a17f768a44899b8749eb8e6525477b81561ff5cb2c400121cdb441a7d3d51e6526cecd2de0f5e591fb14a0526e865efcd1dedc514b8d58e1269151792b900463dc2b8604667d63cc903494ab805367adf82119e4a65e0e11e56", 0x29, 0x0, &(0x7f0000000080)="923f698f78ddfd0f5fc3663b39cb043150d5d6ec70c46366d7de117edca3aeddef26f8acdba2dbf683"}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='com.apple.system.Security\x00') [ 876.104502][ T2526] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 876.142084][ T2526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.217517][T12728] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 876.226458][ T2526] usb 4-1: config 0 descriptor?? [ 876.312264][ T2526] hub 4-1:0.0: USB hub found [ 876.341459][ T2518] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 876.355725][ T2518] usbhid 5-1:0.0: can't add hid device: -22 [ 876.408475][ T2518] usbhid: probe of 5-1:0.0 failed with error -22 [ 876.529403][ T2526] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 876.542791][ T2526] usbhid 4-1:0.0: can't add hid device: -22 [ 876.571024][ T28] audit: type=1804 audit(1593603622.839:81): pid=12807 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/507/file0/file0/bus" dev="sda1" ino=15757 res=1 [ 876.580866][ T2526] usbhid: probe of 4-1:0.0 failed with error -22 [ 876.639666][ T28] audit: type=1800 audit(1593603622.879:82): pid=12807 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15757 res=0 [ 877.903052][ T2527] usb 4-1: USB disconnect, device number 44 11:40:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf32, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) timer_create(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xf5000) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000140)=0x5) keyctl$get_persistent(0x16, r4, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xcbd0}, {0x0, 0xb8c2}, 0x0, 0x6e6bb0}}, 0xb8}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x646d02, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x202, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) [ 878.141117][T12826] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 878.197809][T12826] 8021q: adding VLAN 0 to HW filter on device bond350 [ 878.325051][T12856] bond350: (slave veth787): Enslaving as an active interface with a down link [ 878.359279][ T2518] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 878.395144][T12867] bond350: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 878.563598][T12826] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 878.613511][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 878.631455][T12856] bond350: (slave veth789): Enslaving as an active interface with a down link [ 878.649747][ T2518] usb 5-1: device firmware changed [ 878.655645][ T2518] usb 5-1: USB disconnect, device number 47 11:40:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf31, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000090000001ac800"], 0x28}}, 0x0) fstat(r2, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00', 0x0}) sendmmsg$sock(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000780)=@can={0x1d, r3}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)="ab65f30b30b4cbb01c4019e478fa7fa8891bee93615f20e9f41db8159aa7339f8f1c925030b0edf9cb22626460bd4cf9ba6910428c2ffa702a5febfd06971c7f157bd11a0dacd68862518af074b836758037666023df484445d05e5ddec7570b7c416f6e", 0x64}, {&(0x7f0000000880)="07bd7019821f2baadfa585e627db9a88a477d4313e2a2b0d12afee97f4b8c94bba80f42b866f648d130fbe7ff5001330254fc2eedef4986edbbc24618443ee90a1e2d8c32128ac8eb09b06136e8b01127a1dc30754f0db60615ca410f3ce90daa0d27bed2e29069f53b8dd96a0f9917c5d5194f2a15e43cd1981fe6f4413441939371badc686effcfd774c32d31e8feb3e9f4152f8e75e193b0de2524ec256bbaf4bde8be6efac5a20c9e7dcd7e0b720e7f46f305401fed35ac84968cbe8046e85540fcd3b605e", 0xc7}, {&(0x7f0000000980)="3e32ee21e8f65ab34b6a2bedce697564a12591ba54cc17d594fec72e789519d87bb945f10361740c998a853c543bddae454261f1b2d34ba0c58c03740b0248fb3858298606252e9fc5528889720aae0b4fdc53d974b9447dc2866ef5083668a89f700ed6a4f4370efd6424d80e7d3817d08bc206d661008669b8764a99bbe3debc9b484581e8c4c66b41b36d397dc86a54e063a08672fa5633b5eb8385b835b60f86e7d4", 0xa4}], 0x3, &(0x7f0000000a80)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5ba4}}], 0x30}}], 0x1, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x20000000, {}, [@IFLA_GROUP={0x8, 0x1b, 0x100}]}, 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000080)) syncfs(r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') sendfile(r1, r7, 0x0, 0x7fffefff) 11:40:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf33, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000000c0)={0x9b0000, 0x8000, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a61, 0x0, [], @value=0x7}}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3ed, 0x10, 0x70bd27, 0x25dfdbfc, "0f4b0051268da9a445bc40fa4307499c11536eb6ae58af53df6a7aaca1777504478651cdfc9de133b9f98f2424ddc3c847451cfb35d9815f41c6a858d6471d8d38fc1d23df34656abfdd00d47c39fab934", ["", "", ""]}, 0x64}}, 0x40000) getsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x6, 0xfff, 0x3, 0x84400, r3}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x29f, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "d9a0c8", 0x269, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x80, 0x0}, {[@dstopts={0x5e, 0x3, [], [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x0, [0x400]}}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x289}]}, @hopopts={0x88, 0x1, [], [@jumbo, @jumbo={0xc2, 0x4, 0x200}, @pad1]}, @fragment={0x4, 0x0, 0x1, 0x1, 0x0, 0x4, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x87, 0x3, [0x19], "ce15b4139bbba78159685465a3a95814e0d934bdf67cac01a1a4af6f6fbca0c9d65e8e9adf3e79723712c89afea981f424088aee45afa0f9e0531e5ad1277d826b0f1c232c12e36165d54b4f10010cf5db9180fc6ef9159e9bef9a7dbfb1568596a668dad763f6d75f85deb739149f8756f21a375a75970b352af2d1abac9163cde691726b0f7f"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x5], "3f705cde408c8cfe93d69290cf409c15d3ae48f4431d2e78f8791ac16ae3c661d59eccfe717cb0077dc1d74b21fb9e5240d3291f69efe80f79ff95e6a4224cc7854ad0"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0x1, 0x1ff], "1bd8a0036b00046cf9ec"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x2, 0x6, 0x19}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x6, 0x0, 0x0, 0x0, 0x5, 0xdc}, 0x2, {0x1, 0x2, 0x1, 0x3, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, 0x0) [ 878.870464][T12890] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 878.974350][T12890] 8021q: adding VLAN 0 to HW filter on device bond351 [ 878.991411][T12892] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 879.029392][ T2518] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 879.058183][T12892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 879.066940][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 879.106261][T12898] bond351: (slave veth791): Enslaving as an active interface with a down link [ 879.138814][T12902] bond8: (slave veth33): Enslaving as an active interface with a down link [ 879.159157][ T2526] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 879.162058][T12890] bond351: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 879.279036][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 879.298444][T12957] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 879.409384][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 879.430454][ T2526] usb 4-1: Using ep0 maxpacket: 16 [ 879.438986][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 879.448282][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.474202][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 879.484381][ T2518] usb 5-1: config 0 descriptor?? [ 879.504442][T12890] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:25 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f0003010000000904000000010100000a2401000000020f020904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009058209000003000007250100000000"], 0x0) [ 879.540146][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 879.561102][ T2526] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:40:25 executing program 0: io_uring_setup(0x196, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/212, 0xd4}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x3f, 0x8, @value=0x9}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) preadv(r2, &(0x7f00000017c0), 0x11c, 0x0) 11:40:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2000400204) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4430f0c783b08e6c380000001000390400000000", @ANYRES32=r7, @ANYBLOB="0300000000000000240012800b000100697036746e6c00001400028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\b\x00\'\x00\x00\x00'], 0x44}}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x2a1000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 879.608516][ T2526] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 879.652518][ T2526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.662341][T12898] bond351: (slave veth793): Enslaving as an active interface with a down link [ 879.668531][ T2526] usb 4-1: config 0 descriptor?? 11:40:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf34, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 879.746199][ T2518] usb 5-1: USB disconnect, device number 48 [ 879.749839][ T2526] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 879.827703][T13025] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 879.953841][ T2526] usb 4-1: USB disconnect, device number 45 [ 879.992163][T13025] 8021q: adding VLAN 0 to HW filter on device bond352 [ 880.114921][T13035] bond352: (slave veth795): Enslaving as an active interface with a down link [ 880.166121][T13066] bond352: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 880.309016][ T2518] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 880.548970][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 880.569009][ T2526] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 880.577181][T13035] bond352: (slave veth797): Enslaving as an active interface with a down link [ 880.609524][T13025] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 880.679307][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.703054][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.728919][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 880.738309][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.772859][ T2518] usb 5-1: config 0 descriptor?? [ 880.811848][ T2518] hub 5-1:0.0: USB hub found [ 880.826645][ T2526] usb 4-1: Using ep0 maxpacket: 32 [ 880.949298][ T2526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.983736][ T2526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.010753][ T2526] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 881.037951][ T2526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.084758][ T2526] usb 4-1: config 0 descriptor?? [ 881.108944][ T2518] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 881.117644][ T2518] usbhid 5-1:0.0: can't add hid device: -22 [ 881.129719][ T2526] hub 4-1:0.0: USB hub found [ 881.164663][ T2518] usbhid: probe of 5-1:0.0 failed with error -22 [ 881.349038][ T2526] hub 4-1:0.0: 1 port detected [ 882.035382][ T2518] usb 4-1: USB disconnect, device number 46 [ 882.038955][ T2527] hub 4-1:0.0: hub_ext_port_status failed (err = -71) 11:40:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:29 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xffffffffab827681) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x46100, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x4, 0x666, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x4, [], @ptr=0x6}}) setsockopt$inet6_dccp_buf(r2, 0x21, 0xcc, &(0x7f0000000140)="128599589db531d3e01f25611937b9b0c73c8cd2638229281713b0f6055ab7c84df205ed49bd65aff5200bd709f1d6ab40533b0f9f57c81eac2ee65d1240216eefb17c80b9d7f5daab16fe29c472120ca655500853889bc1cb4105c072eac53e44b9d541186623cb8f69b4f97d466e18989f431253b564ce85f7d5fb51", 0x7d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x3}, {0x0, 0x7}, {0xffe0, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x24008095) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x60002, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000400)={0x90, 0x1, &(0x7f0000000340)="7fb045f248354826e7d8b7c25d5708eabd449b2329ecce1f45acd895a6a9618cd08581c304ae80e39f3d45c0d648af1e306628fa4e0749f6dbc49e78c4c155ef8ce6c48700c9083e328137ff2cb92f9aba01328e665dedade16220e633029fe9e82ef5286e55d939c074a039e82998efc8128aaf8637bc124bfb97ed0b2834d24536915207d71e19f959efb331c406a0fe78b698fcfa4d33c66e612ee039ade92f", {0x6, 0x6, 0x49433553, 0x3, 0x7ff, 0x1, 0xa, 0x20}}) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/wireless\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000500)={r6, @in6={{0xa, 0x4e24, 0x1, @private1, 0x99}}, 0x80, 0x5, 0x5, 0x1, 0xb1}, &(0x7f00000005c0)=0x98) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) ioprio_get$uid(0x0, r7) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000740)={0xa, 0x2, 0xd, 0xd, 0x3, 0x4, 0x1, 0xa5, 0x1}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x109000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000007c0)={{0x1, 0xff}, 0x1, 0x800, 0x800, {0xcf, 0x9}, 0x0, 0xff}) syz_open_dev$dri(&(0x7f0000000840)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000008c0)={{0x3, 0x0, 0x80, {0x4, 0x10000, 0x1}}, "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", "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"}) 11:40:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf35, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600000000fe612239c24a0000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)={0x14, r5, 0x721}, 0x14}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200028bd7000ffdbdf250400000005000400020000000900030073797a30000000000900030073797a310000000005000400010000000900030073797a3200000000523ed52f14d3da6f5dc0a61a9b23871237ce9d83ba00253ec3fd18b52de5fd041e536db6dd52b3aa2386455a48813dd13bc1682fdbc7be446319574d8c41d14b9000268c64e21fa0"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4005) 11:40:29 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:29 executing program 2: unshare(0x60060280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'tunl0\x00', @ifru_flags=0x3001}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76922aa4741ca6dd052100000000ffff2e41bac8d10d0879d30a8efc06850000ffffffe900000000"]}) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030476", @ANYRES16=r6, @ANYBLOB="00022abd7000fddbdf253fcc642f0200000008000600ed00000088000500030000004400035f31000000000600040007000000060007004e2200000500080001000000140006050000000000000000000000000000000020000380080005007f000001140002006d61637365633000000000000000000008ba7200a80a0000"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xd0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000000) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x20000015) [ 882.856760][T13119] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 882.898951][T13118] IPVS: ftp: loaded support on port[0] = 21 11:40:29 executing program 5: clone(0x8880, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x100000001, 0x5, 0x44, &(0x7f0000ffc000/0x3000)=nil, 0xfffff001}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x2}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x3371829ad9537117, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xdc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x408c0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x140d, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xfffffdaf}, 0x1, 0x0, 0x0, 0x4000040}, 0x8006) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, &(0x7f00000001c0)={r1}, 0x0, 0x0) [ 882.958125][T13119] device bond4 entered promiscuous mode [ 882.980761][T13117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 883.061183][ T2526] usb 5-1: reset high-speed USB device number 49 using dummy_hcd [ 883.101976][T13117] 8021q: adding VLAN 0 to HW filter on device bond353 [ 883.138751][ T2527] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 883.165831][T13128] device bridge2 entered promiscuous mode [ 883.183913][T13128] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 883.244680][T13129] bond353: (slave veth799): Enslaving as an active interface with a down link [ 883.277970][T13165] bond353: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 883.350064][ T2526] usb 5-1: Using ep0 maxpacket: 16 [ 883.378966][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 883.399945][ T2526] usb 5-1: device firmware changed [ 883.405552][ T2526] usb 5-1: USB disconnect, device number 49 11:40:29 executing program 0: unshare(0x20020000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000000)='./file0\x00') [ 883.503581][T13119] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 883.519431][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 883.534990][T13127] device tunl0 left promiscuous mode [ 883.566377][T13117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 883.594359][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 883.614255][T13129] bond353: (slave veth801): Enslaving as an active interface with a down link [ 883.625990][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.647724][ T2527] usb 4-1: config 0 descriptor?? [ 883.664362][T13127] IPVS: ftp: loaded support on port[0] = 21 11:40:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf36, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 883.730452][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 883.796302][ T2526] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 883.844542][T13281] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:30 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x111) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa00000, 0x80, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990af4, 0xe57c, [], @value=0x20}}) r2 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x1000) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x200) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180)) sendmsg(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@generic={0x3a, "5c0c41d730d5e09bc265ce33a1f5ef5c8e7a6a343bfe6146fcfd7b3a22fd17611c8a4954726ff091d8101d6d536c3ddddae18f4e441bd08b20e2870960b1e12eb6df7ae00a95570f0a11cf8f54627ce3b58a6f390fe1e0d6dbfcd31bb029b2df5e0e7e2cff31a0dbb813b159219b94d891e75a7b9afb4fc155440716451e"}, 0x80, &(0x7f0000000240)}, 0x4080) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x801, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) write$binfmt_elf64(r2, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7, 0x8, 0x3, 0x9, 0x3, 0x3e, 0x800, 0x2bd, 0x40, 0x1ec, 0x40, 0x6, 0x38, 0x2, 0xbd3, 0x5, 0xfff}, [{0x2, 0x2, 0x0, 0x7, 0x2180, 0xc39c, 0x5, 0x100000000}], "706b7036a9adb514240000bd45857d9f9f3cc47fcf6fe9f3df20a05a614993a75c4d2274886decb7f508b8093d9e7fe952a11e0af771bdbf3b196d21dc32ee8aa178306783f765fd1fc0f907745bffec5827a5048b5adb8a6ebb061462d559016de7f9f312dcef1db53ef31187d71cdad71041bf3765b15395b54fdb33f9119133a295e2297b9cc12737bfdc03968c5a50c469b1dff64983ec29767ad74eae3ec584c91212b7", [[], [], [], [], []]}, 0x61e) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r4, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20048004) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000c40)={0xf000000, 0x8, 0xfffffffb, r0, 0x0, &(0x7f0000000c00)={0x9f0ae9, 0x5, [], @ptr}}) connect$bt_rfcomm(r5, &(0x7f0000000c80)={0x1f, @fixed={[], 0x11}, 0x9}, 0xa) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/audio\x00', 0x410002, 0x0) ioctl$SOUND_PCM_READ_RATE(r6, 0x80045002, &(0x7f0000000d00)) pipe2(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r7, &(0x7f0000000d80)={0xc5, 0x29, 0x2, {0xfffffffd, [{{0x1, 0x6, 0x1}, 0x7, 0x7, 0x7, './file0'}, {{0x40, 0x2, 0x3}, 0x811, 0xf0, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x1, 0x9, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x3, 0x7f, 0x7, './file0'}, {{0x0, 0x2, 0x6}, 0x40, 0xff, 0x7, './file0'}, {{0x20, 0x4, 0x1}, 0x1, 0x7f, 0x7, './file1'}]}}, 0xc5) [ 883.907104][T13281] 8021q: adding VLAN 0 to HW filter on device bond354 [ 883.933298][ T5] usb 4-1: USB disconnect, device number 47 [ 883.943688][T13318] bond354: (slave veth803): Enslaving as an active interface with a down link [ 883.978149][T13281] bond354: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 884.030845][T12281] tipc: TX() has been purged, node left! [ 884.048950][ T2526] usb 5-1: Using ep0 maxpacket: 16 11:40:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x7ffffffff000) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x4c1, r1) keyctl$read(0xb, r2, &(0x7f0000000700)=""/4096, 0x1000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={{0x3, 0x0, @descriptor="4e41f0a4abb1d38b"}, 0x28, r2, [], "dbd34c0632c378d9a328b838d99bb71cebf7db5eedd092acb1b27b53521a5b3f56add19ba0aa97bc"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = getpid() ptrace$setregs(0xffffffffffffffff, r4, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x4}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x200005) sendfile(r3, r5, 0x0, 0x80001d00c0d0) 11:40:30 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7e000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa985503f8f403016bc6ed"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x6e800500) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x9, 0x0, 0x21, &(0x7f0000ffb000/0x4000)=nil, 0xdcfd}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 884.189949][ T2526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 884.213816][ T28] audit: type=1800 audit(1593603630.490:83): pid=13340 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15766 res=0 [ 884.246214][ T2526] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 884.257418][ T2526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.272238][ T2526] usb 5-1: config 0 descriptor?? [ 884.350120][ T2526] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 884.508860][ T5] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 884.656792][ T2527] usb 5-1: USB disconnect, device number 50 [ 884.698787][T13318] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 884.760697][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 884.799663][T13355] bond354: (slave veth805): Enslaving as an active interface with a down link [ 884.879256][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.919717][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.930019][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 884.940682][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.951142][ T5] usb 4-1: config 0 descriptor?? [ 884.989528][ T5] hub 4-1:0.0: USB hub found [ 885.004189][ T28] audit: type=1800 audit(1593603631.260:84): pid=13375 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15767 res=0 [ 885.168845][ T2527] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 885.210437][ T5] hub 4-1:0.0: 1 port detected [ 885.441157][ T2527] usb 5-1: Using ep0 maxpacket: 32 [ 885.580741][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.592085][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.603880][ T2527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 885.613994][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.627956][ T2527] usb 5-1: config 0 descriptor?? [ 885.689479][ T2527] hub 5-1:0.0: USB hub found 11:40:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:32 executing program 0: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/251, 0xfb}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000300)=""/81) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044840}, 0x11) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000270005d96e2f58d05b85f07000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044884}, 0x5) pkey_mprotect(&(0x7f0000926000/0x3000)=nil, 0x3000, 0x0, r2) 11:40:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x7ffffffff000) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)="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", 0x4c1, r1) keyctl$read(0xb, r2, &(0x7f0000000700)=""/4096, 0x1000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={{0x3, 0x0, @descriptor="4e41f0a4abb1d38b"}, 0x28, r2, [], "dbd34c0632c378d9a328b838d99bb71cebf7db5eedd092acb1b27b53521a5b3f56add19ba0aa97bc"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = getpid() ptrace$setregs(0xffffffffffffffff, r4, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x4}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x200005) sendfile(r3, r5, 0x0, 0x80001d00c0d0) 11:40:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf37, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 885.900744][ T2518] usb 4-1: USB disconnect, device number 48 [ 885.923113][ T5] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 885.959327][ T2527] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 885.968174][ T2527] usbhid 5-1:0.0: can't add hid device: -22 [ 886.002055][T13402] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 886.045581][ T2527] usbhid: probe of 5-1:0.0 failed with error -22 [ 886.063150][ T28] audit: type=1800 audit(1593603632.340:85): pid=13401 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15766 res=0 [ 886.205515][T13402] 8021q: adding VLAN 0 to HW filter on device bond355 [ 886.251148][T13407] bond355: (slave veth807): Enslaving as an active interface with a down link [ 886.259374][ T2527] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 886.294423][T13435] bond355: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:40:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) 11:40:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r2) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r3, 0x2000000000000158, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_getevents(r3, 0x8, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)={0x0, 0x3938700}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="410f350fc7283e6667363e3e470f32b9800000c00f3235010000000f302e64660f3881194386fe0f2018409b0f492065670f01c1", 0x34}], 0xaaaaaaaaaaaab10, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x5c100, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x20002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x111000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11:40:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 886.528801][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 886.568796][ T2527] usb 5-1: device firmware changed [ 886.574657][ T2527] usb 5-1: USB disconnect, device number 51 [ 886.707207][T13402] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 886.816563][T13407] bond355: (slave veth809): Enslaving as an active interface with a down link [ 886.830353][ T5] usb 4-1: new high-speed USB device number 49 using dummy_hcd 11:40:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x4, 0x2}}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, 0x0) tkill(r0, 0xb) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x9, 0x305, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0xee1b5d81dc2efd8) 11:40:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf38, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={&(0x7f00000000c0)="d2e5302f45a6cbda0aa3a4b30c10b82ee0ff953b398663262375a23c6aab712eb29efbc1b7f0feed27dceec4dacc0a4a1008853295844c8424b14d35303f0b59fc1be6c7862686fe9878b243681508b70ff0a768397b", &(0x7f0000000040)=""/39, &(0x7f0000000180)="dd62d25a9714ec55f19d8d5744dea6b188a563", &(0x7f0000000240)="a64293cb8a1bba723a400c32b4c1ef579682c1997445b1aef86c99e04fb45d4482c7396ade0fcb4794de85199ca8853a02bff3f31cbccc85f5991c97a9a59c3e7300936304fda7d04778334daa00b40b44ed337dd21184d0e1df08cf588e1037e6760190b63d975b73702e51ebf4b93fc6a69235eab184c4dd71f705634dec92e4e931bb4e5f93786e15b4d70dbe8bbf3078418a13c71f2ab38b4fb6f582dbfda9f29515bfa58c88125277fbd065af5f2927d5639cf02e9638739cb2fad539f944aa524120e5152500e59e0823b38e612e9e06f1f36e90c431a5b3649c6e51766cda6f5cabf22b7a28963e1c23bfee7181fe271e", 0x7f4e, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) [ 886.972398][T13488] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 887.018621][ T2527] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 887.068650][ T5] usb 4-1: Using ep0 maxpacket: 16 11:40:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="016691c2670040004f2ab4ade1a2ecc566f034dc5eeeb1a87d66926518c75297d6a743ae3967afaf3d15dc7c070182542a5d346e726c4611b25e341f839bbb5670072f40e02e61ffa1fcde59abe2031e377ecc08b325f8d56c84439b343c0ee050f0fcfffff607da95bf01cca85bd7347e40747c5a99964402a0257e0ed50b1b7fd56a593f45ca1034a2edc413d07988ccf8a58715421c4c46f04efa60", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={r8, 0xfffffe15}, &(0x7f0000000340)=0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="0d1bbbd2af52217a5e1000050700000000000000221009d8ae814bb56783ab6295d4e72090f017ff2b37d8b6eb0e2f1bbb33c2e40683e707a43a7f6f96755fe1dcdbd6ef7920e40008e1cf0fdb8f9b6b2d4f0337b9bd06778b3d06d3ca263a3b7af3e38b805b9672ad0d22b670f50c21ef9eff38a6feaf7748a646a4e8c9fa024783c7244f77639a954e8f6c566385436d05d866d767028663105fcc754c420a07f107c191767e2cdc0efea90bbfa43e9c0e1357ac50b96726339e289b84ec06ae57c63653cfb09c41770b3d1cd9e5a2cbf86d5d2d96cbc4", @ANYRES32=r9, @ANYBLOB="00000000001d0000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x5865, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x74, 0x0, 0x3, r9}}, 0x20}}, 0x0) [ 887.111320][T13488] 8021q: adding VLAN 0 to HW filter on device bond356 [ 887.188892][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 887.215665][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 887.237602][T13501] bond356: (slave veth811): Enslaving as an active interface with a down link [ 887.237651][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.273201][T13533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 887.288980][ T5] usb 4-1: config 0 descriptor?? [ 887.299717][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 887.333508][T13534] bond356: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 887.339987][ T5] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 11:40:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) dup2(r1, r0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c62f36fff", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 887.430940][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 887.482108][ T2527] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 887.517737][T13555] fuse: Unknown parameter 'bóoÿ00000000000000000000' [ 887.528778][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.544812][ T5] usb 4-1: USB disconnect, device number 49 [ 887.570829][T13555] fuse: Unknown parameter 'bóoÿ00000000000000000000' [ 887.585054][ T2527] usb 5-1: config 0 descriptor?? [ 887.653648][ T2527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 887.825897][T13488] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 887.859583][ T2527] usb 5-1: USB disconnect, device number 52 [ 887.906374][T13501] bond356: (slave veth813): Enslaving as an active interface with a down link [ 888.128755][ T5] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 888.368411][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 888.482249][ T2527] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 888.499652][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.516598][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.529735][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 888.540318][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.564421][ T5] usb 4-1: config 0 descriptor?? [ 888.610652][ T5] hub 4-1:0.0: USB hub found [ 888.710231][T12281] tipc: TX() has been purged, node left! [ 888.769573][ T2527] usb 5-1: Using ep0 maxpacket: 32 [ 888.828849][ T5] hub 4-1:0.0: 1 port detected [ 888.898646][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.910326][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.922172][ T2527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 888.937328][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.951200][ T2527] usb 5-1: config 0 descriptor?? [ 888.992952][ T2527] hub 5-1:0.0: USB hub found 11:40:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000800000006000500000000000a000100726f75746500000058000200540b0001006d6972726564000024000200000000000000"], 0x90}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 11:40:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf39, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000340)={0x2, 0x1}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) semget(0x2, 0x1, 0x0) r5 = dup2(r4, r3) r6 = fcntl$dupfd(r0, 0x0, r5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2c8, 0x0, 0x5002004a, 0x48, 0x128, 0x0, 0x230, 0x3c8, 0x3c8, 0x230, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@cluster={{0x30, 'cluster\x00'}, {0x0, 0x2801}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) 11:40:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 889.128656][ T2527] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 889.131676][T13600] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 889.141050][ T2527] usbhid 5-1:0.0: can't add hid device: -22 [ 889.192522][T13607] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.197560][ T2527] usbhid: probe of 5-1:0.0 failed with error -22 [ 889.204727][T13606] xt_cluster: node mask cannot exceed total number of nodes [ 889.241828][T13600] 8021q: adding VLAN 0 to HW filter on device bond357 [ 889.255366][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.268955][T13606] xt_cluster: node mask cannot exceed total number of nodes [ 889.315505][T13608] bond357: (slave veth815): Enslaving as an active interface with a down link [ 889.331767][T13607] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.372113][T13600] bond357: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 889.436224][ T2527] usb 5-1: reset high-speed USB device number 53 using dummy_hcd [ 889.450384][T13657] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. 11:40:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0xa000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/7) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={r1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) alarm(0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)) get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f0000000240)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x3, 0x14}) r4 = syz_open_pts(r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x15) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xff}, &(0x7f0000000140)=0x8) [ 889.669011][T13607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.686753][T13657] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.689342][ T2517] usb 4-1: USB disconnect, device number 50 [ 889.699939][ T5] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 889.708289][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 889.722824][T13600] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 889.759518][ T2527] usb 5-1: device firmware changed 11:40:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_POLL(r1, &(0x7f0000000180)={0x18, 0x0, 0x3, {0xff}}, 0x18) syz_emit_ethernet(0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000e70000a42b00fe8000000000000000000000000000aafe8000000000000000000000000000aa110000000000000000000000009c907801000000000000001d60e109b27c8734462c329527ed40e0f7980a6ea408ceb498a1563c4c0ab4c25b1e574e1bae8e9c39cdefe33d99a470da97c55fbb7cfde35c89c05b0214d7f98a8d0a91298e25923129c0fa97030a277e78e2120cb67c2e3ce3b046b766162553f0595db3cbb7de43d1c9d54c5fb2ccea52a2ca1eca3cd6d954bea57db7fa5b27ca745021e48721cc667013"], 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000100)=""/10, &(0x7f0000000140)=0xa) [ 889.783503][ T2527] usb 5-1: USB disconnect, device number 53 [ 889.906541][T13608] bond357: (slave veth817): Enslaving as an active interface with a down link 11:40:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf3a, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4002}, 0x8d0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x0, 0xfffff001, 0x38}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{@fixed}]}) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 890.238355][ T2527] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 890.354719][T13775] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 890.508502][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 890.647518][T13775] 8021q: adding VLAN 0 to HW filter on device bond358 [ 890.663446][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 890.690073][ T5] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 890.739499][ T2527] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 890.861468][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.950379][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 890.962935][ T2527] usb 5-1: config 0 descriptor?? [ 890.978351][T13782] bond358: (slave veth819): Enslaving as an active interface with a down link [ 891.062512][ T2527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 891.078580][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 891.137511][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 891.166093][T13793] bond358: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 891.219390][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.339604][ T2518] usb 5-1: USB disconnect, device number 54 [ 891.354350][ T5] usb 4-1: config 0 descriptor?? [ 891.442484][ T5] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 11:40:37 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x10f000, 0xd, 0x4, 0x9, 0x1, 0x5, 0x1f, 0x40, 0x9, 0x5, 0xbb}, {0x0, 0x4000, 0x12, 0x0, 0x2, 0x3f, 0xfe, 0x1, 0x9b, 0x3, 0x5, 0x40}, {0xd000, 0x3000, 0xd, 0x5, 0x1, 0x68, 0x9, 0x81, 0x0, 0x94, 0x81, 0x6}, {0x3000, 0x5000, 0xa, 0x1, 0x77, 0x43, 0x7, 0x0, 0x6, 0x1, 0xff, 0x40}, {0x0, 0x1000, 0xe, 0x3, 0xff, 0x3, 0x1, 0x2e, 0x7, 0x93, 0x7}, {0x100000, 0x10000, 0xc, 0x5, 0x1f, 0x9, 0x1, 0x1, 0x1, 0x9, 0x3, 0x4}, {0x1, 0x2, 0x4, 0x80, 0x20, 0x20, 0x1, 0x7, 0x1, 0x2a, 0x7, 0x8}, {0x5000, 0xf000, 0xd, 0x5, 0xff, 0x40, 0x40, 0x8, 0x6, 0x4, 0x81, 0x3f}, {0x2000, 0x1}, {0x1, 0x6}, 0x10009, 0x0, 0x1000, 0x4e0268, 0x9, 0xe000, 0x56f50e353dc9335a, [0x0, 0x3, 0x4, 0x6]}) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x227b, 0x744000) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000280), &(0x7f00000002c0)=0x4) creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000b20000000008001b0000000008"], 0x28}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x200005) sendfile(r3, r4, 0x0, 0x80001d00c0d0) [ 891.652083][ T5] usb 4-1: USB disconnect, device number 51 [ 891.848204][ T2518] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 891.900684][ T28] audit: type=1800 audit(1593603638.180:86): pid=13982 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15755 res=0 [ 892.066173][ T28] audit: type=1800 audit(1593603638.220:87): pid=13985 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15757 res=0 [ 892.108142][ T2518] usb 5-1: Using ep0 maxpacket: 32 11:40:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x40, 0x3, 0xff, 0xfa, 0x0, 0x6, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x40026, 0x400, 0x8, 0x3, 0x7f, 0x81, 0x9}, 0xffffffffffffffff, 0xf, r0, 0xa) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x764, 0x10}, 0xc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) execveat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000240)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='-\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='&*\x00', &(0x7f0000000200)='$(%*-,]\x00'], 0x800) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 892.228589][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.239820][ T5] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 892.269484][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.423973][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 892.488317][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 892.503273][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:40:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 892.624865][ T2518] usb 5-1: config 0 descriptor?? [ 892.638491][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.672481][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.688246][ T2518] usb 5-1: can't set config #0, error -71 11:40:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x7fffffff, 0x8001}, &(0x7f0000000040)=0xc) [ 892.723941][ T2518] usb 5-1: USB disconnect, device number 55 [ 892.749309][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 892.795033][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.828858][ T5] usb 4-1: config 0 descriptor?? 11:40:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000500)=0x1c, 0x101000) recvfrom$inet6(r3, &(0x7f00000005c0)=""/211, 0xd3, 0x40014123, &(0x7f0000000540)={0xa, 0x4e21, 0xfff, @mcast1, 0x9}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYRES64=r7], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0000000000000000000000000a00010072737670360000001800020014010200ff0200000000000000000000000000ea83a7305e37c0323a7f9f61e30f1342b9a9ef4518ecfd0f39f22f18bbbcfb933495a59f6c625fe0f669a4de752f23e32cd3f687337a49"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000002800270500000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0000000000000000000000000a000100727376703600000004000200"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002500100025bd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="f9ff27000c00f2ff06000b0008000d00ff070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000085}, 0x24000050) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2500000025000511d25a80648c63940d0424fc60040012000a00160002000080d6451720aa", 0x25}], 0x1}, 0x0) [ 892.884159][T13775] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 892.908990][ T5] hub 4-1:0.0: USB hub found 11:40:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf3b, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 892.975284][T13790] bond358: (slave veth821): Enslaving as an active interface with a down link [ 893.005040][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 893.081906][T14072] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 893.125810][T14072] 8021q: adding VLAN 0 to HW filter on device bond359 [ 893.130975][ T5] hub 4-1:0.0: 1 port detected [ 893.137543][T14067] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 893.153533][ T2518] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 893.215086][T14063] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 893.339403][T14106] bond359: (slave veth823): Enslaving as an active interface with a down link [ 893.402011][T14109] bond359: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 893.419014][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 893.538648][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 893.568314][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 893.612218][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.645188][ T2518] usb 5-1: config 0 descriptor?? [ 893.719492][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 893.753196][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:40:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x7fffffff, 0x8001}, &(0x7f0000000040)=0xc) [ 893.783658][T14072] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000b7dcc827605c0a"], 0x1c}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x5, 0x6, 0x27, 0xffffffff, 0x4, "f076c59a92eeeb97ad7dcc84ab75f2175e5a9d"}) [ 893.907218][T14106] bond359: (slave veth825): Enslaving as an active interface with a down link [ 893.921506][ T2527] usb 5-1: USB disconnect, device number 56 [ 893.982171][ T2518] usb 4-1: USB disconnect, device number 52 [ 893.988815][ T2514] hub 4-1:0.0: hub_ext_port_status failed (err = -71) 11:40:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf3c, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 894.176920][T14159] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 894.266816][T14159] 8021q: adding VLAN 0 to HW filter on device bond360 [ 894.446434][T14163] bond360: (slave veth827): Enslaving as an active interface with a down link 11:40:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000), 0x9}, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0xa, 0x80000040) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000001c0)={@ipv4={[], [], @local}}, 0x14) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r2 = socket$inet(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000240), 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) [ 894.512264][T14159] bond360: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 894.517992][ T2527] usb 5-1: new high-speed USB device number 57 using dummy_hcd 11:40:41 executing program 5: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc8a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4100, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x30181, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), 0x4) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x13c, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) recvmsg(r2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0xf67ffff, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0}) [ 894.807971][ T2527] usb 5-1: Using ep0 maxpacket: 32 [ 894.888055][ T2525] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 894.938515][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.967260][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.003568][ T2527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 895.038293][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.065445][ T2527] usb 5-1: config 0 descriptor?? [ 895.101352][T14163] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 895.122454][ T2527] hub 5-1:0.0: USB hub found [ 895.148954][ T2525] usb 4-1: Using ep0 maxpacket: 16 [ 895.213386][T14194] bond360: (slave veth829): Enslaving as an active interface with a down link 11:40:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf3d, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 895.278588][ T2525] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 895.322950][ T2525] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 895.348110][ T2527] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 895.360397][ T2525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.376990][ T2527] usbhid 5-1:0.0: can't add hid device: -22 [ 895.391901][T14228] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 895.408727][ T2527] usbhid: probe of 5-1:0.0 failed with error -22 [ 895.423929][ T2525] usb 4-1: config 0 descriptor?? 11:40:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @dev}, 0x1c) listen(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x501182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="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", 0xfd, 0x24004084, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002e00) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x5, {0x0, 0x9, 0x7ff, 0x35}}) sendfile(r3, r4, 0x0, 0x80001d00c0d0) r5 = dup2(0xffffffffffffffff, r3) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4486dd6020920000140600fe8000000000000000000000000000bbfc00000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400da81e4de1ceb5954102b7725bee3ffcb0090780000"], 0x0) [ 895.486311][T14228] 8021q: adding VLAN 0 to HW filter on device bond361 [ 895.499112][ T2525] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 895.653954][T14231] bond361: (slave veth831): Enslaving as an active interface with a down link [ 895.707345][ T2525] usb 4-1: USB disconnect, device number 53 [ 895.751392][T14228] bond361: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 896.161230][T14231] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 896.221346][T14245] bond361: (slave veth833): Enslaving as an active interface with a down link [ 896.267892][ T2525] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 896.514128][ T2525] usb 4-1: Using ep0 maxpacket: 32 11:40:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000b67000), &(0x7f0000000000)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r7, 0x1}, 0x8) 11:40:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x8811, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20080, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x5, 0x20, 0x0, 0x3, 0x2, [{0xaf, 0x20000000, 0xd1d, [], 0x600}, {0xffff, 0x8, 0x0, [], 0x509}]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000080)=0x200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2, 0x2bb, 0x1}) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000080)) 11:40:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf3e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 896.638296][ T2525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.674514][T14305] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 896.685287][ T2525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.706369][ T2525] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 11:40:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1d87fb47d77e92, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x20500) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x100000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r0, r3, 0x1f, 0x4, r0}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/kvm\x00', r0}, 0x10) r4 = socket(0x10, 0x8000000000000003, 0x0) sendfile(r4, r0, 0x0, 0x80000005) [ 896.754655][ T2525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.787432][T14305] 8021q: adding VLAN 0 to HW filter on device bond362 [ 896.804838][ T2525] usb 4-1: config 0 descriptor?? [ 896.848834][ T2525] hub 4-1:0.0: USB hub found [ 896.890275][T14308] bond362: (slave veth835): Enslaving as an active interface with a down link [ 896.965784][T14305] bond362: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 896.982950][ T5243] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 897.058141][ T2525] hub 4-1:0.0: 1 port detected [ 897.195251][T14308] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 897.257806][ T5243] usb 5-1: Using ep0 maxpacket: 16 11:40:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) sched_setscheduler(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x4000000) [ 897.298619][ T5243] usb 5-1: device firmware changed [ 897.304053][ T5243] usb 5-1: USB disconnect, device number 57 [ 897.345469][T14308] 8021q: adding VLAN 0 to HW filter on device bond363 11:40:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf3f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 897.602751][T14415] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 897.666572][T14415] 8021q: adding VLAN 0 to HW filter on device bond364 [ 897.761072][ T5243] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 897.806174][T14439] bond364: (slave veth839): Enslaving as an active interface with a down link [ 897.857107][T14451] bond364: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 898.042576][ T2514] usb 4-1: USB disconnect, device number 54 [ 898.047974][ T5243] usb 5-1: Using ep0 maxpacket: 16 [ 898.058195][ T2525] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 898.091939][T14415] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 898.187981][ T5243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 898.193606][T14439] bond364: (slave veth841): Enslaving as an active interface with a down link [ 898.215816][ T5243] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 898.255182][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.298501][ T5243] usb 5-1: config 0 descriptor?? [ 898.350462][ T5243] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:40:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf40, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000ed03000326bd7000ffdbc125045931173819df1ca2bb84df1df343f8bfa26a91d6b57000e61a6262497300000000000034ad4418c44c82001a002ed1ccb580f29fe56ec56ce6729caf70"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x48}}, 0x0) 11:40:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="240000001a0007041dfffd946f6105000a0000e8fe02080100010800080010000400ff7e", 0x24}], 0x1}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xc0000, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000100)=0x4) 11:40:44 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x8000, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="03020400000000009000120009000100697069700000000080000200080003000000000208000300ac1414aa080003007f000001080005000900040005000a000100000006000f00030000000500050009000800050004000400000006000f000000000004001300080002000000000000000000", @ANYRES32=0x0, @ANYBLOB="060011004e09000000000000005cb2ad88e674af", @ANYRES32=0x0], 0xc8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xf8, r8, 0x1}, 0xf8}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x1) [ 898.574600][ T5243] usb 5-1: USB disconnect, device number 58 [ 898.730640][T14493] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 898.779648][T14493] 8021q: adding VLAN 0 to HW filter on device bond365 [ 898.814846][T14501] __nla_validate_parse: 1 callbacks suppressed [ 898.814855][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.852122][T14502] bond365: (slave veth843): Enslaving as an active interface with a down link [ 898.870057][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.881879][T14492] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 898.892447][T14492] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.932347][ T2514] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 898.949510][T14493] bond365: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 899.065215][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 899.074828][T14549] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 899.159052][T14493] bond365: (slave veth845): Enslaving as an active interface with a down link [ 899.187757][ T5243] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 899.197854][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 899.317880][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.335512][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 899.346394][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.361324][ T2514] usb 4-1: config 0 descriptor?? [ 899.398605][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 899.468883][ T5243] usb 5-1: Using ep0 maxpacket: 32 [ 899.597253][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.612951][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.624527][ T5243] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 899.634488][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.645159][ T2527] usb 4-1: USB disconnect, device number 55 [ 899.654883][ T5243] usb 5-1: config 0 descriptor?? [ 899.698465][ T5243] hub 5-1:0.0: USB hub found 11:40:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:46 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3e973000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b372766800000b000100666c6f776572000018000200f5c854800c000280040003800000000000000000"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:40:46 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getpid() socket$inet(0x2, 0x4000000000000001, 0x0) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4000000150008002dbd7000fbdbdf252200aa000100ed95324521956473fc66d655eadf823aec7b1488b73d6705e724497e9b6fe6f4e49019d2e2f2859df7e9df4d6f51f1b454ed885a0c8d4461c9218a3e53774b32aba0864a885d3590197544b367cd23d4d834809553b7e23f6cf25280c21f5b5a7399a16d3a6fc047d463ce66aa3e826817af9ca9ce3b858630c5aca4bf169d43de4cab90d387f5e13c06580929516ab3d1143f3d0f5efaf2aa01e9c3cb8f8fcfb98f07b059f10000040001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x8c}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5, 0x3, "c8"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) pipe(&(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b6, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x24a8f6cd) 11:40:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r5, @in6={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc30, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x900, 0x101, 0xb3550aa4ba878254, 0xfffffffd}, 0x9c) 11:40:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf41, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 899.833341][ T5243] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 899.840411][T14590] validate_nla: 2 callbacks suppressed [ 899.840419][T14590] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 899.844574][ T5243] usbhid 5-1:0.0: can't add hid device: -22 [ 899.876441][T14591] IPVS: ftp: loaded support on port[0] = 21 [ 899.887787][ T5243] usbhid: probe of 5-1:0.0 failed with error -22 [ 899.934955][T14590] 8021q: adding VLAN 0 to HW filter on device bond366 [ 899.948884][T14592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 900.025828][T14597] bond366: (slave veth847): Enslaving as an active interface with a down link [ 900.035772][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 900.076872][T14636] bond366: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 900.097886][ T5243] usb 5-1: reset high-speed USB device number 59 using dummy_hcd [ 900.197641][ T2527] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 900.244009][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 900.296373][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 900.337946][ T5243] usb 5-1: Using ep0 maxpacket: 16 11:40:46 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/42, 0x2a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x459c, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvfrom$inet6(r0, 0x0, 0xffffff77, 0x7ffff000, 0x0, 0x0) [ 900.371256][T14590] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 900.394332][ T5243] usb 5-1: device firmware changed [ 900.402600][ T5243] usb 5-1: USB disconnect, device number 59 [ 900.442259][T14612] IPVS: ftp: loaded support on port[0] = 21 [ 900.446749][T14597] bond366: (slave veth849): Enslaving as an active interface with a down link 11:40:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf42, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 900.487632][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 900.594578][T14703] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 900.646260][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.664772][T14703] 8021q: adding VLAN 0 to HW filter on device bond367 [ 900.674291][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.716331][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 900.749897][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.771758][T14743] bond367: (slave veth851): Enslaving as an active interface with a down link [ 900.793032][ T2527] usb 4-1: config 0 descriptor?? [ 900.834076][T14750] bond367: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 900.857704][ T5243] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 900.870729][ T2527] hub 4-1:0.0: USB hub found [ 901.063283][ T2527] hub 4-1:0.0: 1 port detected [ 901.119899][ T5243] usb 5-1: Using ep0 maxpacket: 16 [ 901.162162][T14703] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 901.203973][T14743] bond367: (slave veth853): Enslaving as an active interface with a down link [ 901.267906][ T5243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.280859][ T5243] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 901.291014][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.304101][ T5243] usb 5-1: config 0 descriptor?? [ 901.360980][ T5243] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 901.572122][ T5243] usb 5-1: USB disconnect, device number 60 [ 901.784957][ T2525] usb 4-1: USB disconnect, device number 56 [ 901.797559][ T2527] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 902.167470][ T5243] usb 5-1: new high-speed USB device number 61 using dummy_hcd 11:40:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000058000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="0f8a0000008065660f6626a40f3566ba4200ed6666f2ab0f01c466b817000f00d866ba4100edc4e155ecd0", 0x2b}], 0x1, 0x0, 0x0, 0xfffffffffffffff6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e22, @broadcast}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x6280, 0x2, 0x2, 0x0, 0x40, 0x100, 0x0, 0x1, r7}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x6, 0x4, 0x80000001, 0x8, 0x4, 0x2, 0x2, r8}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1], 0x0, 0x140000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:40:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a4ec9"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="76a6f0e7ccb87e9417a2f3fa06c894367c2c5095a00751b25af7d16364d0aa87ab6ded45ff14582ce861ccc578bf15a8a202b40cde3c10675df8fb619fd5501988b062d4c89abf4fb918385d87e7596371edf3ac053446e56fd68a8c85b7468842308b3cafeadf841f3820f417ed03194cf0c922c9c713ce9c5f8fe5d7494d15a260444f41810ae807f21f64e16f245b9312ae7f9f8b77465a589bf34008e4b5da", @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYRES16], 0x0) 11:40:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf43, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 902.376455][T14806] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 902.417502][ T5243] usb 5-1: Using ep0 maxpacket: 32 [ 902.490735][T14806] 8021q: adding VLAN 0 to HW filter on device bond368 [ 902.548416][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.560084][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.572503][ T5243] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 902.574995][T14819] bond368: (slave veth855): Enslaving as an active interface with a down link [ 902.584338][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.604016][ T5243] usb 5-1: config 0 descriptor?? [ 902.635384][T14806] bond368: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 902.659314][ T5243] hub 5-1:0.0: USB hub found [ 902.667500][ T2514] usb 4-1: new high-speed USB device number 57 using dummy_hcd 11:40:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x8000000}, {0x0, 0x80000000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) socket$nl_route(0x10, 0x3, 0x0) 11:40:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:49 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vnet0,vi.et\"eb0u_er\x00\x00\x01\x00\x1c0\x13\xe4\x8a\xd38\x00 ( \x9b~\xbe@\x90v\xd0\xcdonNR\xf2\xb0\rg?{\x05\xb6\x18\x12\b0\xd0\xaek\x91\x8d\xef\xf7\xd4\x93\xdf\x16%g\xd36\x1c\xd0Id\x8a\x81=c\xfc\xe2\x81\x00E\xe0S\x9b\xabZ\xbc-\xdc\xc6\x85\x00\xe0,\xda\x8ft\xecC\x0fI\xc2\xb9\x99\x1a\x19H\x9e\xe6\x1e\xeb\x80L\xc3\xa2s\xf3\xae;9\xbb\x10\xcb\x83\x02\x1b\x91\xd8Lp\x0e}\xc5\x9fN)\x02xHQT\xde\xd8\xadM\x8b{\x82U\x882\xed\xfb\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000240)={0xfffffbff, 0x1}) sendfile(r0, r1, 0x0, 0xeefffdef) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000200)="b1", 0x1}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x4, 0x72, 0x81, 0xf9, 0x0, 0x101, 0xc0001, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x12}, 0x8000, 0x4, 0x3, 0x9, 0x2, 0xff, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0xa) [ 902.921157][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 902.987620][ T5243] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 903.000942][ T5243] usbhid 5-1:0.0: can't add hid device: -22 [ 903.026268][ T5243] usbhid: probe of 5-1:0.0 failed with error -22 [ 903.037618][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 903.064654][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 903.083301][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.095331][ T2514] usb 4-1: config 0 descriptor?? [ 903.142575][T14806] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 903.151374][ T21] tipc: TX() has been purged, node left! [ 903.172134][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 903.227911][ T5243] usb 5-1: reset high-speed USB device number 61 using dummy_hcd [ 903.377132][ T2527] usb 4-1: USB disconnect, device number 57 [ 903.480142][ T5243] usb 5-1: Using ep0 maxpacket: 16 [ 903.537896][ T5243] usb 5-1: device firmware changed [ 903.544020][ T5243] usb 5-1: USB disconnect, device number 61 11:40:49 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2}, 0xc) sendmmsg(r0, &(0x7f0000005c00), 0x0, 0x40804) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000e3c84766b1499e93a0e43e32b13acc19cfda6bc38f222f50931950f14274bd092d8d2face62ddd30272d44899b433386443ce0bf85aeabfc1b26f00e9858f219c332b10ac2315ac441519a42fbb3f920f13728e9b679afa6398cc3e36cb7ea978c95474011faafac8a90f81e22003067827f67a9062a6c207f9ea72183c2676db57fa6bdc7f6709ab0ff6f2f"], 0x18}}], 0x1, 0x0) 11:40:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf44, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 903.623515][T14911] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 903.657183][T14911] 8021q: adding VLAN 0 to HW filter on device bond369 11:40:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000192c0)={&(0x7f0000019100)=@un=@abs, 0x80, &(0x7f00000191c0)=[{&(0x7f00000001c0)=""/18, 0x12}], 0x1, &(0x7f0000019200)=""/124, 0x7c}, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast2}, &(0x7f0000000040)=0xc) [ 903.736676][T14946] bond369: (slave veth859): Enslaving as an active interface with a down link [ 903.784078][T14911] bond369: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:40:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r4, 0x2}, &(0x7f0000000140)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) splice(r5, 0x0, r8, 0x0, 0x200000, 0x0) 11:40:50 executing program 0: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x45, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x3, @string={0x0, 0x3, "d5"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xc, @string={0xc, 0x3, "6a0a1604a1d94569637d"}}, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x69b5) [ 903.937717][ T5243] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 903.993775][ T2527] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 904.123254][T14911] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 904.175768][T14946] bond369: (slave veth861): Enslaving as an active interface with a down link 11:40:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf45, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 904.217596][ T5243] usb 5-1: Using ep0 maxpacket: 16 [ 904.219659][ T2514] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 904.240561][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 904.265205][T14974] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 904.353547][ T5243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 904.377634][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.403314][T14974] 8021q: adding VLAN 0 to HW filter on device bond370 [ 904.415511][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.431310][ T5243] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 904.463821][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 904.477120][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.499699][T14989] bond370: (slave veth863): Enslaving as an active interface with a down link [ 904.500387][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.533774][ T5243] usb 5-1: config 0 descriptor?? [ 904.539893][T15011] bond370: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 904.580374][ T5243] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 904.589085][ T2527] usb 4-1: config 0 descriptor?? [ 904.608444][ T2514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.649251][ T2527] hub 4-1:0.0: USB hub found [ 904.657677][ T2514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.687059][ T2514] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.40 [ 904.710021][ T2514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.754695][ T2514] usb 1-1: config 0 descriptor?? [ 904.782570][ T2517] usb 5-1: USB disconnect, device number 62 [ 904.857494][ T2527] hub 4-1:0.0: 1 port detected [ 905.095939][T14974] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 905.211588][T14974] 8021q: adding VLAN 0 to HW filter on device bond371 11:40:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000330774001800090000000001a381", @ANYRES32=0x0, @ANYRES64], 0x50}}, 0x0) r3 = gettid() tkill(r3, 0x33) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 905.437437][ T2517] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 905.455313][T15088] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 905.478407][ T2514] usb 1-1: string descriptor 0 read error: -22 [ 905.524941][T15090] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 905.602069][ T5] usb 4-1: USB disconnect, device number 58 [ 905.617495][ T2527] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 905.687448][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 905.739632][ T2514] input: HID 5543:0045 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0045.0008/input/input19 [ 905.847651][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.871938][ T2514] uclogic 0003:5543:0045.0008: input,hidraw0: USB HID v0.00 Device [HID 5543:0045] on usb-dummy_hcd.0-1/input0 [ 905.885797][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.916004][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 905.959442][ T2514] usb 1-1: USB disconnect, device number 32 [ 905.976600][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.030301][ T2517] usb 5-1: config 0 descriptor?? [ 906.089275][ T2517] usb 5-1: can't set config #0, error -71 11:40:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 906.131413][ T2517] usb 5-1: USB disconnect, device number 63 11:40:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0xfffffffd, 0x0, 0x0, 0x0, 0x1, "00003f4259db0000000000000000d000"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8) keyctl$get_persistent(0x16, r4, r2) setuid(r4) write(r1, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000100)='/dev/ptmx\x00', 0xa) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 11:40:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf46, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r4, 0xc46dfc707e1df77d}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f8, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @empty, 0xffff8001}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x564a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x44001}, 0x20040000) 11:40:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 906.234633][T15132] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010000000000000000000a000000000000000000000008000d0002000000a3e270454739680b929b6ece4dc39f510ee83b0720b6ed1b5df68423ca470fb185f9a2538cb1ade26a35b1fce473698ae59350dbb2059591b39fa94266fb9c3d7cac6c191c24e5902d4bbf06890f3194d7e87c4af511cc13e4510b9b776f4d9667007e3e5885cab5338391dbd0828c03d4e076a69ae486458115254d01a886e72ab594d6a660fd93073ff029bd61a98456737a2c21349c1bcf3a5186cbad62f2b260854c7ff7d99a886a81e7"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 906.422077][T15132] 8021q: adding VLAN 0 to HW filter on device bond372 [ 906.489387][T15143] bond372: (slave veth867): Enslaving as an active interface with a down link [ 906.520464][T15180] bond372: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 906.537315][ T2527] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 906.617269][ T2517] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 906.747704][ T2518] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 906.764807][T15132] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:40:53 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x4, 0x0, 'queue0\x00', 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x0, 0x8) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x81, 0xc10f, 0x1, 0x0, 0x8, 0x9, 0x9}, 0x9c) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 906.798294][ T2527] usb 4-1: Using ep0 maxpacket: 16 11:40:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff00af}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sco\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getdents64(r1, &(0x7f0000000100)=""/132, 0x84) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000000000000001b000000fdffffff00ffff0000000000d3d02f48f673be449ee042f67e082ebe4d62a0b4fb0474bb4cd7e8bce1bfe52e42c0b728c2502a88c63ce16bf97b2627467f106b9f94c6ecd0c9933d5bfafd79e405f7a6072788fbaac1b28f190f27342a95b49d132264d971ed4c422dcf29513c14706e17ab16b3419685c0b9c2d55b"]) dup2(r2, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfffffffd}]}) dup2(r6, r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000d40)={0x285dd3b97172bd7f, r6}) [ 906.879156][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 906.903300][T15143] bond372: (slave veth869): Enslaving as an active interface with a down link [ 906.928133][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 906.967115][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 906.976188][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.027541][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.058650][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:40:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf47, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 907.075274][ T2527] usb 4-1: config 0 descriptor?? [ 907.118193][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.158246][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 907.188102][ T2517] usb 5-1: config 0 descriptor?? [ 907.204665][T15226] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 907.258323][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:40:53 executing program 0: add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x40041, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x70, 0x1405, 0x2, 0x0, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001840)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x7fffefff) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 907.298849][ T2518] usb 1-1: unable to read config index 0 descriptor/all [ 907.305705][T15226] 8021q: adding VLAN 0 to HW filter on device bond373 [ 907.306053][ T2518] usb 1-1: can't read configurations, error -71 11:40:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfc, 0x280) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r1, &(0x7f0000000080)="ef8a8fef9c0b466f23d382eef2a8e780", &(0x7f00000000c0)=""/32, 0x4}, 0x20) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000000000)=0x2, 0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x2, 0x3, 0x2f0, 0x0, 0x148, 0x148, 0x0, 0x148, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xe8, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'tunl0\x00', {0x27, 0xc8f9, 0x0, 0x0, 0x0, 0x6, 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x350) [ 907.361155][ T2517] usb 4-1: USB disconnect, device number 59 [ 907.440240][T15232] bond373: (slave veth871): Enslaving as an active interface with a down link [ 907.461644][ T2527] usb 5-1: USB disconnect, device number 64 [ 907.493260][T15226] bond373: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 907.629316][T15298] x_tables: ip_tables: ah match: only valid for protocol 51 11:40:54 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000a80)='\\\xba\x140D\xf8systemem0md5sum$\x00`\xfa\x90$\x1f\x8c3\xa1\xa8k\x1e\xca9\xb2\xbb\b\x8f\x94>\xb8\x0f\x92r\xb4\\\xbd\xc0\xc0\xa5\xf8;|\x16-\xbcR\x0f\x00FVL/3w\x1d\x1dTRG\xd37z\xcbS\x82\x7f\xac;Be!\x84Q\xb7\xdc\xb6\xf0\xc6\x9e\xb0\xa6\xf4\x88Tj\b\x00\x00\x00\xc7\xd58\xfd\xb6\x00\x80\xf9\xd7?\xc0\x9a\x9b\xba\x0f\x01\x96\xa8\x0f\x11\x1c/~O\x92\xd8D\x90\xf7\x9aW\xf3\x19tH\\\x92\xb3\xe3\xff\xcb@\xd4\xd6%\xea\xe7)\x81\xdc\x91T\x85\x14\x84\xe4\xae\xe2\xd8\xf6S\xb5\xbb\x9d\xa9Ek\x1az\x7fa\x9cY\xd2zIU\xe4\b\xc6Q\x1a\xcbr\x191\x19\xd70\x17\xd9qD\xaa\x83\x1d\x9ei\x8c\x83\x9eVa$\xa1\x0eEP\x03\xee\xea\x9e\xce\xfac\xce9\xe8\r\x17\xf0\xf4\x89B[\xfc\xe3?\xbe\xc4\xc0{\x1e\xc5g\xc7\x12\xf6?\f\xdd\xec\xfc\x1c\xb3Xc\xc0\fPm~$M>A\x8a\xd6\x1d\xd8\xe4\xf1?\xea\x1a\x15\x13J\xe3\"\x87\x9b\x02\x7f\x13\tF', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000100)='$.\xe2H\xd6P\xbc)\xc2\xcf\xd7X\n@u\x82\b\xb3\xdc\xf1i@\x00\x00\x00\x00\x00\x00', 0x4) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) dup3(r0, r4, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') [ 907.895218][T15232] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 907.966880][T15232] 8021q: adding VLAN 0 to HW filter on device bond374 [ 908.000049][ T2517] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 908.037385][ T2527] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 908.267066][ T2517] usb 4-1: Using ep0 maxpacket: 32 [ 908.327216][ T2527] usb 5-1: Using ep0 maxpacket: 32 [ 908.397794][ T2517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.414576][ T2517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.437938][ T2517] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 908.461063][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.470427][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.487005][ T2527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.507464][ T2517] usb 4-1: config 0 descriptor?? [ 908.520093][ T2527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 908.543387][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.570800][ T2517] hub 4-1:0.0: USB hub found [ 908.589481][ T2527] usb 5-1: config 0 descriptor?? [ 908.667911][ T2527] hub 5-1:0.0: USB hub found [ 908.798041][ T2517] hub 4-1:0.0: 1 port detected [ 908.887214][ T2527] hub 5-1:0.0: 1 port detected [ 909.535859][ T2526] usb 4-1: USB disconnect, device number 60 [ 909.546981][ T2527] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 909.603435][ T2518] usb 5-1: USB disconnect, device number 65 [ 909.620822][ T2517] hub 5-1:0.0: hub_ext_port_status failed (err = -71) 11:40:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:40:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe9217", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000000000f57b140bdd26f0525e352a293a2ef2bb9a322be55326255f03a9d0f9ab501b59a4c0948c034f4d0800328f02bef29075613bb89c000000000000003f1130b5bda117400b1f5d639704233ad3136451706f4c24759f01d0b248d5542220959ac5cdb1b3ea004a3f6f01f9387c310960bbbd8a44e9ede6dd9d413de03994fdd9f80c0bc415597381f1b7ae2388bb07ff7ad3253ee7ebb0fd0c1b659cc4a6fca65333168d2e6d49a25e96e22b04f5257b085fd53f9e4e57b2fed9", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000400020008000300c91e2500"/35], 0x3c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, 0x0) ptrace(0x4208, 0x0) process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000340)=""/36, 0x24}], 0x4, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/138, 0x8a}], 0x4, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x5a, 0x0) 11:40:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000000)={@dev, @multicast2}, &(0x7f0000000040)=0xc) 11:40:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf48, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:40:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 910.134487][T15386] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 910.230142][T15386] 8021q: adding VLAN 0 to HW filter on device bond375 [ 910.394888][T15402] bond375: (slave veth875): Enslaving as an active interface with a down link [ 910.460159][T15429] bond375: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 910.499875][ T2518] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 910.606881][ T2526] usb 5-1: new high-speed USB device number 66 using dummy_hcd 11:40:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x66) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', r1}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x7d3, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x3fef9d36b77a7ade}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x10000}}]}}]}, 0x64}}, 0x0) [ 910.748738][ T2518] usb 4-1: Using ep0 maxpacket: 16 [ 910.789782][T15386] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 910.869212][ T2526] usb 5-1: Using ep0 maxpacket: 16 [ 910.878289][ T2518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 910.901373][T15402] bond375: (slave veth877): Enslaving as an active interface with a down link [ 910.924900][ T2518] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:40:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf49, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 910.973067][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.007398][ T2526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 911.026646][ T2518] usb 4-1: config 0 descriptor?? [ 911.040101][ T2526] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 911.078212][ T2518] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 911.083871][ T2526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.104456][T15456] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 911.130692][ T2526] usb 5-1: config 0 descriptor?? [ 911.198599][ T2526] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 911.210056][T15456] 8021q: adding VLAN 0 to HW filter on device bond376 [ 911.248069][T15466] bond376: (slave veth879): Enslaving as an active interface with a down link [ 911.276604][T15456] bond376: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:40:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffe71c0012800b00010062726964676500000c0002800800030000000000047d8b2d7ef4165ffe739368125efdebe2df83ddfc80277dfcca26361aa2740061f8dbcd7cb6bef105d1f114ef98fac57a61adb11ec22661713bdb27eb9fbaf4f9c430256bc1670b8175a7aa73b8f1bb530b8a80417d34195658e1808c949260bb033656b84d51ab1a62b166821eb6ba621ab57541403aa0ae28aac6fdc43ff0f6d574"], 0x3c}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xf8, r3, 0x1}, 0xf8}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xae4}, {0x6, 0x11, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) [ 911.281228][ T2518] usb 4-1: USB disconnect, device number 61 [ 911.404140][ T2514] usb 5-1: USB disconnect, device number 66 [ 911.409504][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 911.716601][T15456] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 911.788593][T15466] bond376: (slave veth881): Enslaving as an active interface with a down link [ 911.819043][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:40:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf4a, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 911.865101][ T2518] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 911.962524][T15541] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 911.982634][ T2514] usb 5-1: new high-speed USB device number 67 using dummy_hcd 11:40:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r9, 0xc01064c7, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000440)={r10}) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x50) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000a800250800000000000000000a00d3c7e53778953c1a258babf79d956b6c9c7098edd5faff00"/51, @ANYRES32=r12, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) 11:40:58 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000040)) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x10000004ffe6, 0x0) [ 912.053864][T15541] 8021q: adding VLAN 0 to HW filter on device bond377 [ 912.117176][ T2518] usb 4-1: Using ep0 maxpacket: 32 [ 912.125898][T15543] bond377: (slave veth883): Enslaving as an active interface with a down link [ 912.154140][T15541] bond377: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 912.237190][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.248750][ T2514] usb 5-1: Using ep0 maxpacket: 32 [ 912.258933][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.269822][ T2518] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 912.279562][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.301663][T15588] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 912.305047][ T2518] usb 4-1: config 0 descriptor?? [ 912.349023][ T2518] hub 4-1:0.0: USB hub found [ 912.367113][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.379054][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.410510][T15589] bond5: (slave bridge4): making interface the new active one [ 912.418764][ T2514] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 912.436165][T15589] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 912.452383][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.465976][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 912.483085][ T2514] usb 5-1: config 0 descriptor?? [ 912.508089][T15583] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 912.530202][ T2514] hub 5-1:0.0: USB hub found 11:40:58 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fstat(r4, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x7, &(0x7f0000000100)=[{&(0x7f0000000040)="fb", 0x1}], 0x7}}], 0x300, 0x40000fc) [ 912.556919][ T2518] hub 4-1:0.0: 1 port detected [ 912.608198][T15576] bond377: (slave veth885): Enslaving as an active interface with a down link [ 912.625260][T15543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 912.654244][T15648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 912.713955][T15648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 912.749646][ T2514] hub 5-1:0.0: 1 port detected [ 913.284167][ T2514] usb 4-1: USB disconnect, device number 62 [ 913.291054][ T2518] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 913.472950][ T2517] usb 5-1: USB disconnect, device number 67 [ 913.476886][ T2518] hub 5-1:0.0: hub_ext_port_status failed (err = -71) 11:41:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) symlinkat(0x0, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0xa002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000004780)='batadv\x00') pipe(&(0x7f00000000c0)) 11:41:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf4b, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="0000001f00000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000040)) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x10000004ffe6, 0x0) 11:41:00 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x800, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)=0x8) [ 913.842681][T15676] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 913.930573][T15676] 8021q: adding VLAN 0 to HW filter on device bond378 [ 913.972107][T15692] bond378: (slave veth887): Enslaving as an active interface with a down link 11:41:00 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:00 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x4}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f00000001c0)="3bbc453cc45ee0e88484c428c5b23befae2256afe4006c22a6a1ab973e43c05b6b5a03af9fb777eeca4a4a6c6a3a0d014850495ef4418b635eecda0dd8734cf5c5eb82b6051c38fe2b82345308de52edecd4b37dfd836888a105df2e5212151f6b63b2313f19d810862874820c33e3a3ffc06ff5b239d3315db1453e4c4c303fcfd029a69cedba9bc2c5391223914ccca549d9921b64452ab689b3bdc058a3303d69beba162628d1fa3aedae637dfc243cd6cee0816436a3369f1263c4dbfacc84ac7ab3c18d1cc1182843fe0535395941282b5a09e59c78cfb137ed34321ffa2549cc1ead6aec027bc54d1c", 0xec, r0}, 0x68) 11:41:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 914.021601][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 914.069302][T15676] bond378: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 914.253196][T15737] veth1_virt_wifi: mtu less than device minimum 11:41:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf4c, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 914.300916][T15692] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 914.338963][ T2514] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 914.343395][T15692] 8021q: adding VLAN 0 to HW filter on device bond379 [ 914.356973][ T2518] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 914.495355][T15780] 8021q: adding VLAN 0 to HW filter on device bond380 [ 914.588014][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 914.599865][T15804] bond380: (slave veth891): Enslaving as an active interface with a down link [ 914.610329][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 914.629318][T15819] bond380: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:01 executing program 5: socket$inet6(0xa, 0x5, 0x0) fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x2c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f00000000c0)=0x5, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x4, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 11:41:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in=@loopback, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x2c}, {0x0, 0x0, 0x0, 0x5}, {}, 0x7f, 0x6e6bb6}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r3, 0x400, 0x0, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf8958855b1a677e85fbcedfda"}]}, 0x38}}, 0x88) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r4) ptrace(0x4208, r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000004540)=0xe8) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000004600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000045c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00080052000000bfe4e137ed3c9938255c504b0000000000000000007910cf8a705fe4fa43f17dc5cda61eeb94fdc2860596924e7824e798f9a09ffbb2c73100385021d16f1ac8702c10b5fa33530ef58406e9e574ebcf24b85b1bdee89495d8f690d076ba802880b27f2b0ce01cab702c8df4b87fa48259c14d75945e9a7725035241649a7d2bace15e18fc4bd8e6cc2329d9aa828f5b1a11c8c76598d454fe3a155e996b5226ba3e68ed45711d7e38e4362eb098f1d9a5c2481b19dd6853e537f21f2fb112", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000100ffffffff0800db00", @ANYRES32=r8, @ANYBLOB="0c0099000800000002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaaaa86dd60bf6e1100083a00fe8000000000000000000000000000bbff020000000000a9973a0000000000000000018000907800000000709ff16b67109cd51b860472356bbdd41e1b29cf691f5582ce0abc2b"], 0x0) [ 914.867049][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 914.880502][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 914.898798][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 914.908893][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 914.924130][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.933054][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.944378][ T2514] usb 4-1: config 0 descriptor?? [ 914.952503][ T2518] usb 5-1: config 0 descriptor?? [ 914.960955][T15736] veth1_virt_wifi: mtu less than device minimum [ 914.984894][T15825] device macvtap1 entered promiscuous mode [ 914.992864][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 915.001819][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 915.014018][T15825] device team0 entered promiscuous mode [ 915.023918][T15825] device team_slave_0 entered promiscuous mode 11:41:01 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x4}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f00000001c0)="3bbc453cc45ee0e88484c428c5b23befae2256afe4006c22a6a1ab973e43c05b6b5a03af9fb777eeca4a4a6c6a3a0d014850495ef4418b635eecda0dd8734cf5c5eb82b6051c38fe2b82345308de52edecd4b37dfd836888a105df2e5212151f6b63b2313f19d810862874820c33e3a3ffc06ff5b239d3315db1453e4c4c303fcfd029a69cedba9bc2c5391223914ccca549d9921b64452ab689b3bdc058a3303d69beba162628d1fa3aedae637dfc243cd6cee0816436a3369f1263c4dbfacc84ac7ab3c18d1cc1182843fe0535395941282b5a09e59c78cfb137ed34321ffa2549cc1ead6aec027bc54d1c", 0xec, r0}, 0x68) [ 915.040411][T15825] device team_slave_1 entered promiscuous mode [ 915.078799][T15825] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 915.169674][T15804] bond380: (slave veth893): Enslaving as an active interface with a down link [ 915.197519][ T2518] usb 4-1: USB disconnect, device number 63 [ 915.213163][ T2514] usb 5-1: USB disconnect, device number 68 11:41:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) 11:41:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf4d, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 915.292093][T15851] device macvtap2 entered promiscuous mode [ 915.318708][T15851] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 915.340861][T15866] veth1_virt_wifi: mtu less than device minimum 11:41:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)=@in6={0x2, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="82c2178d", 0xfc9e}], 0x1}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) mq_open(&(0x7f0000000000)='geneve0\x00', 0x2, 0x101, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="590000007d02000000410004000500000004020000000700000000000000000000c205000000fdffffff050000002000000000000040007fff0571dc86a381682963a43395bb24666889d0b7c0f33e08888735b4433d71bd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1], 0x59) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xc0c0c0c0}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[], 0x2b}, 'geneve0\x00'}}, 0x1e) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x19}) 11:41:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b070700000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100495a1101a4acd0d0a2778a5163667b0000000000c500"/135], 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 915.376070][T15870] validate_nla: 2 callbacks suppressed [ 915.376080][T15870] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 915.459585][T15870] 8021q: adding VLAN 0 to HW filter on device bond381 11:41:02 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x4}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f00000001c0)="3bbc453cc45ee0e88484c428c5b23befae2256afe4006c22a6a1ab973e43c05b6b5a03af9fb777eeca4a4a6c6a3a0d014850495ef4418b635eecda0dd8734cf5c5eb82b6051c38fe2b82345308de52edecd4b37dfd836888a105df2e5212151f6b63b2313f19d810862874820c33e3a3ffc06ff5b239d3315db1453e4c4c303fcfd029a69cedba9bc2c5391223914ccca549d9921b64452ab689b3bdc058a3303d69beba162628d1fa3aedae637dfc243cd6cee0816436a3369f1263c4dbfacc84ac7ab3c18d1cc1182843fe0535395941282b5a09e59c78cfb137ed34321ffa2549cc1ead6aec027bc54d1c", 0xec, r0}, 0x68) [ 915.713555][T15881] bond381: (slave veth895): Enslaving as an active interface with a down link [ 915.778538][ T2518] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 915.789023][ T2514] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 915.820476][T15911] bond381: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 916.017383][ T2518] usb 4-1: Using ep0 maxpacket: 32 [ 916.057116][ T2514] usb 5-1: Using ep0 maxpacket: 32 [ 916.098702][T15936] veth1_virt_wifi: mtu less than device minimum [ 916.143480][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.143502][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.143533][ T2518] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 916.143550][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.149637][ T2518] usb 4-1: config 0 descriptor?? [ 916.150790][T15870] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 916.175904][T15870] bond381: (slave veth897): Enslaving as an active interface with a down link [ 916.177382][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.177402][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.177430][ T2514] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 916.177446][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.181365][ T2514] usb 5-1: config 0 descriptor?? [ 916.187382][ T2518] hub 4-1:0.0: USB hub found [ 916.217555][ T2514] hub 5-1:0.0: USB hub found [ 916.417760][ T2518] hub 4-1:0.0: 1 port detected [ 916.442845][ T2514] hub 5-1:0.0: 1 port detected [ 917.165407][ T5] usb 5-1: USB disconnect, device number 69 [ 917.172013][ T2518] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 917.269456][ T2517] usb 4-1: USB disconnect, device number 64 11:41:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000240)={0x10001, 0x4, &(0x7f0000000100)=[0x0, 0x80, 0x7f, 0x6], &(0x7f0000000140)=[0x79f6, 0x3, 0x8000, 0x8], &(0x7f0000000180)=[0x401, 0xc629, 0xf27, 0x0], &(0x7f00000001c0)=[0x8]}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x1, 0x0, 0x6}) r3 = getpid() openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1, 0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r4, 0x200002) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 11:41:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900a0100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x3fb, 0x10, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x12}, 0x53ab955bceff6c4f) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, {0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1, [0x3, 0x8001, 0x1, 0x7fff, 0x0, 0x3, 0x0, 0xfffffffc]}, 0x5c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c6}, 0x40) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x0, 0x4, 0xee, 0x5, 0x1, 0x97, 0x0, 0xc2, 0x6, 0x8, 0x8, 0x8, 0x5, 0x0, 0x7, 0x9}}) 11:41:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf4e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x4}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f00000001c0)="3bbc453cc45ee0e88484c428c5b23befae2256afe4006c22a6a1ab973e43c05b6b5a03af9fb777eeca4a4a6c6a3a0d014850495ef4418b635eecda0dd8734cf5c5eb82b6051c38fe2b82345308de52edecd4b37dfd836888a105df2e5212151f6b63b2313f19d810862874820c33e3a3ffc06ff5b239d3315db1453e4c4c303fcfd029a69cedba9bc2c5391223914ccca549d9921b64452ab689b3bdc058a3303d69beba162628d1fa3aedae637dfc243cd6cee0816436a3369f1263c4dbfacc84ac7ab3c18d1cc1182843fe0535395941282b5a09e59c78cfb137ed34321ffa2549cc1ead6aec027bc54d1c", 0xec, r0}, 0x68) 11:41:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:04 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 917.854842][T15982] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 917.927389][T15980] usb usb6: usbfs: process 15980 (syz-executor.2) did not claim interface 0 before use [ 917.960294][T15980] usb usb6: selecting invalid altsetting 21783 [ 917.988327][T15982] 8021q: adding VLAN 0 to HW filter on device bond382 11:41:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900a0100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x3fb, 0x10, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x12}, 0x53ab955bceff6c4f) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, {0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1, [0x3, 0x8001, 0x1, 0x7fff, 0x0, 0x3, 0x0, 0xfffffffc]}, 0x5c) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c6}, 0x40) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x0, 0x4, 0xee, 0x5, 0x1, 0x97, 0x0, 0xc2, 0x6, 0x8, 0x8, 0x8, 0x5, 0x0, 0x7, 0x9}}) 11:41:04 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000540)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0), 0x7ab, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 918.032116][T15988] bond382: (slave veth899): Enslaving as an active interface with a down link [ 918.052968][T16007] veth1_virt_wifi: mtu less than device minimum [ 918.103454][T15982] bond382: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 918.106537][ T5] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 918.187204][ T2517] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 918.247637][T16037] usb usb6: usbfs: process 16037 (syz-executor.2) did not claim interface 0 before use [ 918.248656][T16037] usb usb6: selecting invalid altsetting 21783 11:41:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="666409a9167a73479de99d08000000e0b2c976a9b9000000006e60143d", @ANYRESHEX=r1, @ANYBLOB="2c726f3030303030173030303030303030303430303031a300ff65725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) [ 918.346472][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 918.446354][ T2517] usb 4-1: Using ep0 maxpacket: 16 11:41:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="b8010000000f01d9b9800000c00f79780035010000000f30c442092b24c0b805000000b943d500000f01c10fbae300460f01beb5ee000048b800680000000000000f23c00f21f835030007000f23f80f01373e660f3881a5c6000000", 0x5c}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 918.470103][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:41:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf4f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 918.470137][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 918.470154][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:41:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000a004e2200000002fc000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000001000000080000000a004e220000000900000000000000000000000000000001ff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000000000000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24fffffffffc01000000000000000000000000000701800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000f3e9fe8000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000001fffe8800000000000000000000000000015b9a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000400000000000000000000ffffac1414bb00080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000003fffc0100000000000000000000000000000800"/1168], 0x490) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000000c0)=r1) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{@fixed}, {@fixed}, {@fixed}, {@fixed}, {}, {@fixed}]}) [ 918.471707][ T5] usb 5-1: config 0 descriptor?? [ 918.508665][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 918.603367][T15982] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 918.607396][ T2517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.607429][ T2517] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 918.607446][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.608938][ T2517] usb 4-1: config 0 descriptor?? [ 918.648081][ T2517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 918.718463][ T2526] usb 5-1: USB disconnect, device number 70 [ 918.752615][T15982] 8021q: adding VLAN 0 to HW filter on device bond383 [ 918.852803][ T2517] usb 4-1: USB disconnect, device number 65 [ 918.914748][T16110] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 918.983475][T16110] 8021q: adding VLAN 0 to HW filter on device bond384 [ 919.017964][T16147] bond384: (slave veth903): Enslaving as an active interface with a down link [ 919.036041][T16110] bond384: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 919.044902][T16085] fuse: Bad value for 'fd' [ 919.296404][ T2526] usb 5-1: new high-speed USB device number 71 using dummy_hcd 11:41:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x4}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 919.338216][ T2517] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 919.373126][T16085] fuse: Unknown parameter 'fd ©zsGé' [ 919.553389][T16110] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 919.586518][ T2526] usb 5-1: Using ep0 maxpacket: 32 [ 919.596670][ T2517] usb 4-1: Using ep0 maxpacket: 32 [ 919.605381][T16147] bond384: (slave veth905): Enslaving as an active interface with a down link [ 919.646640][T16173] veth1_virt_wifi: mtu less than device minimum [ 919.669364][T16172] bond384: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 919.746828][ T2517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.746851][ T2517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.746881][ T2517] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 919.746896][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:41:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400}, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="666409a9167a73479de99d08000000e0b2c976a9b9000000006e60143d", @ANYRESHEX=r1, @ANYBLOB="2c726f3030303030173030303030303030303430303031a300ff65725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) [ 919.747913][ T2526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.747931][ T2526] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.747958][ T2526] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 919.747974][ T2526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:41:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf50, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 919.749472][ T2526] usb 5-1: config 0 descriptor?? [ 919.753890][ T2517] usb 4-1: config 0 descriptor?? [ 919.787288][ T2526] hub 5-1:0.0: USB hub found [ 919.788195][ T2517] hub 4-1:0.0: USB hub found [ 919.996550][ T2526] hub 5-1:0.0: 1 port detected [ 919.996741][ T2517] hub 4-1:0.0: 1 port detected 11:41:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 920.321189][T16189] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 920.345411][T16186] fuse: Bad value for 'fd' [ 920.385436][T16189] 8021q: adding VLAN 0 to HW filter on device bond385 [ 920.454531][T16225] bond385: (slave veth907): Enslaving as an active interface with a down link [ 920.482826][T16189] bond385: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 920.674838][T16186] fuse: Unknown parameter 'fd ©zsGé' [ 920.756012][T16225] bond385: (slave veth909): Enslaving as an active interface with a down link [ 920.801212][T16189] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 920.844265][ T5] usb 5-1: USB disconnect, device number 71 [ 920.860919][ T2517] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 920.876666][ T2514] usb 4-1: USB disconnect, device number 66 11:41:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:07 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {0x0, 0x3}, @time=@tick=0x20}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000540)="da40b188643235191c8803e6299ab5e799037d9d0cb39e6b7cfc84ffd5220e10ce5d4e4a3cb2de4c8532482b25a427a736c2a6db4030d6f15975ef615361c33fe4cc75e87aefdd02511bf8ba6ad374cf9470f42ab0717eb2dc8e0d6ee940175e6bf6f85d5e2d2555a4dcf87657646ddb3cac7c534a30e571f43a3fe0ec2d317af4bcd35d510cd3cef38561bd9fdd39372dddb12749e06a7dc34e532faced66fea4ea08", 0xa3}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001080000000000000000000000005d418a9ba8e5c945e5bca8d0a778172ea490045b1a674cc0d7dee2d6fcfdc319441d0c7b02576972c1ba01fd186bd4cf5ae918473a57cefe1be123b88464fcee3843d510ef86725e58232f5f06e0074a5dbc69c851cb", @ANYRES32=0x0, @ANYBLOB="0080d1966ce5000001cbfe9da815afebf74e78d369f1e8"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) connect(r3, &(0x7f0000000180)=@l2tp={0x2, 0x0, @private=0xa010101, 0x1}, 0xa3) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000440)={0x1, &(0x7f0000000340)=""/72, &(0x7f0000000080)=[{0x1, 0x80, 0x4, &(0x7f00000003c0)=""/128}]}) 11:41:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf51, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0xf8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0xb4, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cb7fa4fad80ac9129ada0e01e2a9d4eb"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "98aa2618a59982a81b77f734b8674790"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xc0000000}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, ']\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x99}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8bbf40ba772e17016cc4474f31138bd8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "835a4886ce749c080000006af21cbe84"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c5278c1e3511f84537f0f278a76c1b95"}]}]}, @IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0xf8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000027355e581b000000000022d67e79182569f569201632ec07f28fe90f167bd0aebe80087bd40f19abbf79fe15a7d26b04fb7c37351d29b9215814013d2c317e7bcdae7cad0977c86ae46679c36224a02101a500"/102], 0x28}}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r6, @ANYRES32=r2, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000814007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f770000000024000200200009801c0001"], 0x54}}, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'vlan0\x00', 0x2000}) r7 = socket(0x1000000010, 0x80002, 0x0) getdents(r4, &(0x7f0000000300)=""/4, 0x4) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 11:41:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 921.455040][T16270] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 921.455493][T16269] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 921.536842][T16269] 8021q: adding VLAN 0 to HW filter on device bond386 [ 921.539352][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 921.539494][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 921.580725][T16292] bond386: (slave veth911): Enslaving as an active interface with a down link [ 921.601643][T16269] bond386: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 921.756582][ T2526] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 921.769454][ T5] usb 4-1: new high-speed USB device number 67 using dummy_hcd 11:41:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 921.886176][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 921.947018][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 921.981826][T16292] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 922.009626][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 922.048703][T16292] 8021q: adding VLAN 0 to HW filter on device bond387 11:41:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf52, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 922.086224][ T2526] usb 5-1: Using ep0 maxpacket: 16 [ 922.128763][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 11:41:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf53, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 922.128794][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 922.128812][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.131618][ T5] usb 4-1: config 0 descriptor?? [ 922.167173][ T5] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 922.174085][T16380] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 922.200961][T16380] 8021q: adding VLAN 0 to HW filter on device bond388 [ 922.216311][ T2526] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 922.216365][ T2526] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 922.216383][ T2526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.218848][ T2526] usb 5-1: config 0 descriptor?? [ 922.245505][T16380] bond388: (slave veth915): Enslaving as an active interface with a down link [ 922.257572][ T2526] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 11:41:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 922.273123][T16380] bond388: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 922.373464][ T5] usb 4-1: USB disconnect, device number 67 [ 922.469011][ T2517] usb 5-1: USB disconnect, device number 72 [ 922.494061][T16380] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 922.525043][T16380] bond388: (slave veth917): Enslaving as an active interface with a down link [ 922.656283][T16448] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 922.809437][T16448] 8021q: adding VLAN 0 to HW filter on device bond389 [ 922.858808][T16452] bond389: (slave veth919): Enslaving as an active interface with a down link [ 922.881700][T16448] bond389: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 922.926107][ T5] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 923.092388][T16452] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 923.116278][ T2517] usb 5-1: new high-speed USB device number 73 using dummy_hcd 11:41:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf54, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 923.166067][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 923.180898][T16470] bond389: (slave veth921): Enslaving as an active interface with a down link [ 923.251287][T16505] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 923.288747][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.289563][T16505] 8021q: adding VLAN 0 to HW filter on device bond390 [ 923.314682][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.335038][T16539] bond390: (slave veth923): Enslaving as an active interface with a down link [ 923.367266][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 923.370527][T16505] bond390: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 923.384301][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.396043][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 923.410607][ T5] usb 4-1: config 0 descriptor?? [ 923.456706][ T5] hub 4-1:0.0: USB hub found [ 923.559417][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.570606][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.583486][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 923.597938][T16505] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 923.603180][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.632895][ T2517] usb 5-1: config 0 descriptor?? [ 923.648256][T16539] bond390: (slave veth925): Enslaving as an active interface with a down link [ 923.676695][ T5] hub 4-1:0.0: 1 port detected [ 923.707674][ T2517] hub 5-1:0.0: USB hub found [ 923.926908][ T2517] hub 5-1:0.0: 1 port detected [ 924.529087][ T2518] usb 4-1: USB disconnect, device number 68 [ 924.652924][ T5] usb 5-1: USB disconnect, device number 73 [ 924.666132][ T2527] hub 5-1:0.0: hub_ext_port_status failed (err = -71) 11:41:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf55, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 925.087146][T16590] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 925.143417][T16590] 8021q: adding VLAN 0 to HW filter on device bond391 11:41:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf56, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 925.192737][T16623] bond391: (slave veth927): Enslaving as an active interface with a down link [ 925.204020][T16590] bond391: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 925.365927][ T5] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 925.423156][T16590] bond391: (slave veth929): Enslaving as an active interface with a down link 11:41:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 925.596404][T16656] 8021q: adding VLAN 0 to HW filter on device bond392 [ 925.606664][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 925.647285][ T2527] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 925.653696][T16656] bond392: (slave veth931): Enslaving as an active interface with a down link [ 925.692395][T16656] bond392: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 925.726003][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 925.726035][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 925.726051][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.727959][ T5] usb 4-1: config 0 descriptor?? [ 925.767216][ T5] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 925.907821][ T2527] usb 5-1: Using ep0 maxpacket: 16 [ 925.976628][ T2526] usb 4-1: USB disconnect, device number 69 [ 926.056256][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 926.056288][ T2527] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 926.056305][ T2527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.058609][ T2527] usb 5-1: config 0 descriptor?? [ 926.096916][ T2527] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 926.143211][T16696] validate_nla: 2 callbacks suppressed [ 926.143221][T16696] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 926.195752][T16696] 8021q: adding VLAN 0 to HW filter on device bond393 [ 926.298743][ T2517] usb 5-1: USB disconnect, device number 74 11:41:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf57, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 926.504409][T16765] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 926.535942][ T2526] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 926.542613][T16765] 8021q: adding VLAN 0 to HW filter on device bond394 [ 926.587929][T16765] bond394: (slave veth935): Enslaving as an active interface with a down link [ 926.615046][T16765] bond394: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 926.792604][ T2526] usb 4-1: Using ep0 maxpacket: 32 [ 926.895989][ T2517] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 926.918884][ T2526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.918906][ T2526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.918937][ T2526] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 926.918954][ T2526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.920555][ T2526] usb 4-1: config 0 descriptor?? [ 926.956844][ T2526] hub 4-1:0.0: USB hub found [ 926.968847][T16765] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 927.026977][T16815] bond394: (slave veth937): Enslaving as an active interface with a down link [ 927.148465][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 927.175905][ T2526] hub 4-1:0.0: 1 port detected [ 927.266170][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.287699][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.301330][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 927.310972][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.323655][ T2517] usb 5-1: config 0 descriptor?? [ 927.377391][ T2517] hub 5-1:0.0: USB hub found [ 927.597767][ T2517] hub 5-1:0.0: 1 port detected [ 928.048842][ T5243] usb 4-1: USB disconnect, device number 70 [ 928.321633][ T5243] usb 5-1: USB disconnect, device number 75 [ 928.339855][ T2517] hub 5-1:0.0: hub_ext_port_status failed (err = -71) 11:41:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf58, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 928.613013][T16853] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 928.758344][T16853] 8021q: adding VLAN 0 to HW filter on device bond395 [ 928.903898][T16862] bond395: (slave veth939): Enslaving as an active interface with a down link 11:41:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 928.931966][ T2517] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 928.997788][T16853] bond395: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 929.165765][ T5] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 929.258201][ T2517] usb 4-1: Using ep0 maxpacket: 16 [ 929.396552][ T2517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 929.405651][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 929.411538][ T2517] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 929.427425][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.439680][ T2517] usb 4-1: config 0 descriptor?? 11:41:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 929.451222][T16862] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf59, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 929.496893][ T2517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 929.531547][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 929.531575][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 929.531589][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.532777][ T5] usb 5-1: config 0 descriptor?? [ 929.567094][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 929.643576][T16943] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 929.695086][T16943] 8021q: adding VLAN 0 to HW filter on device bond396 [ 929.699699][ T5243] usb 4-1: USB disconnect, device number 71 [ 929.770037][ T2518] usb 5-1: USB disconnect, device number 76 [ 929.848781][T16970] bond396: (slave veth943): Enslaving as an active interface with a down link [ 929.867313][T16990] bond396: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf5a, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 930.199783][T16943] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 930.255201][T16943] bond396: (slave veth945): Enslaving as an active interface with a down link [ 930.313956][T17011] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 930.327387][ T5243] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 930.353445][T17011] 8021q: adding VLAN 0 to HW filter on device bond397 [ 930.365570][ T2518] usb 5-1: new high-speed USB device number 77 using dummy_hcd 11:41:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 930.392242][T17011] bond397: (slave veth947): Enslaving as an active interface with a down link [ 930.452027][T17011] bond397: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 930.581721][ T5243] usb 4-1: Using ep0 maxpacket: 32 [ 930.605841][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 930.718255][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.743082][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.743117][ T5243] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 930.743134][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.744370][ T5243] usb 4-1: config 0 descriptor?? [ 930.776578][ T5243] hub 4-1:0.0: USB hub found [ 930.789345][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.789366][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.789396][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 930.789428][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.791111][ T2518] usb 5-1: config 0 descriptor?? [ 930.799529][T17011] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 930.826582][ T2518] hub 5-1:0.0: USB hub found [ 930.887197][T17011] bond397: (slave veth949): Enslaving as an active interface with a down link [ 930.999161][ T5243] hub 4-1:0.0: 1 port detected [ 931.046073][ T2518] hub 5-1:0.0: 1 port detected 11:41:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = msgget(0x2, 0x314) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000200)=""/188) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000001840)=""/4096) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000300)=""/230) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x68000007, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20081, 0x12b6f, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 931.628756][T17083] batman_adv: Cannot find parent device [ 931.637467][T17083] batman_adv: batadv0: Adding interface: gretap1 [ 931.644270][T17083] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.677934][T17083] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 931.903474][ T2517] usb 4-1: USB disconnect, device number 72 [ 931.919382][ T2514] usb 5-1: USB disconnect, device number 77 11:41:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf5b, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f8000001500ae47a825d86800278dcff47d0100c618927e4eee0396b2788b21", 0x33}], 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 932.484959][T17104] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x400, &(0x7f0000000300)=0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 932.650708][T17104] 8021q: adding VLAN 0 to HW filter on device bond398 [ 932.730340][T17114] bond398: (slave veth951): Enslaving as an active interface with a down link [ 932.767545][T17152] bond398: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 932.795758][ T2514] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 932.836197][ T2518] usb 5-1: new high-speed USB device number 78 using dummy_hcd 11:41:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 933.045666][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 933.075749][ T2518] usb 5-1: Using ep0 maxpacket: 16 11:41:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf5c, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 933.144256][T17104] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 933.166929][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 933.166964][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 933.166980][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.169920][ T2514] usb 4-1: config 0 descriptor?? [ 933.195682][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 933.195713][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 933.195730][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.203608][ T2518] usb 5-1: config 0 descriptor?? [ 933.208169][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 933.237347][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 933.248235][T17104] bond398: (slave veth953): Enslaving as an active interface with a down link [ 933.411524][ T5243] usb 4-1: USB disconnect, device number 73 [ 933.440202][ T2518] usb 5-1: USB disconnect, device number 78 [ 933.460214][T17197] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 933.610838][T17197] 8021q: adding VLAN 0 to HW filter on device bond399 [ 933.662060][T17211] bond399: (slave veth955): Enslaving as an active interface with a down link [ 933.684466][T17240] bond399: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 933.919158][ T2518] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 934.025413][ T5243] usb 4-1: new high-speed USB device number 74 using dummy_hcd 11:41:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf5d, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 934.062468][T17211] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 934.099396][T17211] 8021q: adding VLAN 0 to HW filter on device bond400 [ 934.149502][T17292] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 934.156012][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 934.279597][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.279619][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.279648][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 934.279665][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.281290][ T2518] usb 5-1: config 0 descriptor?? [ 934.281364][T17292] 8021q: adding VLAN 0 to HW filter on device bond401 [ 934.305591][ T5243] usb 4-1: Using ep0 maxpacket: 32 [ 934.316464][ T2518] hub 5-1:0.0: USB hub found [ 934.445845][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.483739][T17298] bond401: (slave veth959): Enslaving as an active interface with a down link [ 934.498655][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.537199][ T2518] hub 5-1:0.0: 1 port detected [ 934.539775][T17292] bond401: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 934.559506][ T5243] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 934.569439][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.581090][ T5243] usb 4-1: config 0 descriptor?? [ 934.646145][ T5243] hub 4-1:0.0: USB hub found [ 934.789577][T17298] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 934.818498][T17328] bond401: (slave veth961): Enslaving as an active interface with a down link [ 934.876152][ T5243] hub 4-1:0.0: 1 port detected [ 935.379650][ T5] usb 5-1: USB disconnect, device number 79 [ 935.748458][ T2526] usb 4-1: USB disconnect, device number 74 11:41:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf5e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 935.933658][T17376] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 936.011136][T17376] 8021q: adding VLAN 0 to HW filter on device bond402 [ 936.072968][T17390] bond402: (slave veth963): Enslaving as an active interface with a down link 11:41:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:22 executing program 2: dup(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, 0x0, 0x1c}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:41:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 936.099900][T17376] bond402: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:22 executing program 2: 11:41:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:22 executing program 2: 11:41:22 executing program 2: 11:41:22 executing program 2: 11:41:23 executing program 2: syz_emit_ethernet(0x24a, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6020920002142b00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 11:41:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf5f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:23 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013) open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) [ 936.535563][T17390] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 936.603675][T17390] 8021q: adding VLAN 0 to HW filter on device bond403 [ 936.615955][ T5] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 936.635670][ T2518] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 936.855109][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 936.864408][T17488] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 936.877691][ T2518] usb 4-1: Using ep0 maxpacket: 16 [ 936.951312][T17488] 8021q: adding VLAN 0 to HW filter on device bond404 [ 936.980659][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 936.980693][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 936.980709][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.984749][ T5] usb 5-1: config 0 descriptor?? [ 937.007405][ T2518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 937.007434][ T2518] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 937.007451][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.015430][ T2518] usb 4-1: config 0 descriptor?? [ 937.016615][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 937.022649][T17504] bond404: (slave veth967): Enslaving as an active interface with a down link [ 937.056118][ T2518] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 937.070395][T17488] bond404: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 937.228547][ T5] usb 5-1: USB disconnect, device number 80 [ 937.258854][ T2514] usb 4-1: USB disconnect, device number 75 [ 937.453955][T17504] bond404: (slave veth969): Enslaving as an active interface with a down link [ 937.477861][T17488] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 937.795216][ T5] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 937.835576][ T2514] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 938.035896][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 938.075694][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 938.155208][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.166441][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.177231][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 938.186688][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.201478][ T5] usb 5-1: config 0 descriptor?? [ 938.207029][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.218563][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.233299][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 938.253393][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.263549][ T5] hub 5-1:0.0: USB hub found [ 938.272350][ T2514] usb 4-1: config 0 descriptor?? [ 938.316213][ T2514] hub 4-1:0.0: USB hub found [ 938.465174][ T5] hub 5-1:0.0: 1 port detected [ 938.538063][ T2514] hub 4-1:0.0: 1 port detected [ 939.318496][ T2526] usb 5-1: USB disconnect, device number 81 [ 939.432699][ T2514] usb 4-1: USB disconnect, device number 76 11:41:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf60, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 939.858559][T17593] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 939.908380][T17593] 8021q: adding VLAN 0 to HW filter on device bond405 [ 939.939616][T17626] bond405: (slave veth971): Enslaving as an active interface with a down link 11:41:26 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10}, 0x10) 11:41:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 939.968547][T17593] bond405: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:26 executing program 2: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2402e57b7f"], 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs, 0x10) 11:41:26 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/197}, 0xcd, 0x2, 0x1800) 11:41:26 executing program 2: msgsnd(0x0, &(0x7f0000000040), 0x0, 0x0) 11:41:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf61, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 940.125153][ T2518] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 940.270520][T17593] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:26 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 940.368115][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 940.370668][ T5243] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 940.463477][T17667] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 940.486008][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 940.486039][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 940.486056][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.487738][ T2518] usb 5-1: config 0 descriptor?? [ 940.534456][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 940.590965][T17667] 8021q: adding VLAN 0 to HW filter on device bond406 [ 940.644963][ T5243] usb 4-1: Using ep0 maxpacket: 16 [ 940.696424][T17693] bond406: (slave veth975): Enslaving as an active interface with a down link [ 940.729758][ T2518] usb 5-1: USB disconnect, device number 82 [ 940.763626][T17667] bond406: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 940.804978][ T5243] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 940.828842][ T5243] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 940.866446][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.884592][ T5243] usb 4-1: config 0 descriptor?? [ 940.951872][ T5243] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 941.029878][T17693] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 941.149705][ T5243] usb 4-1: USB disconnect, device number 77 [ 941.305826][ T2518] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 941.544794][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 941.665011][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.676129][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.688208][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 941.704582][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.714049][ T2518] usb 5-1: config 0 descriptor?? [ 941.725056][ T5243] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 941.758065][ T2518] hub 5-1:0.0: USB hub found [ 941.975281][ T2518] hub 5-1:0.0: 1 port detected [ 941.985414][ T5243] usb 4-1: Using ep0 maxpacket: 32 [ 942.116184][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.127303][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.139672][ T5243] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 942.150891][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.162751][ T5243] usb 4-1: config 0 descriptor?? [ 942.206178][ T5243] hub 4-1:0.0: USB hub found [ 942.414957][ T5243] hub 4-1:0.0: 1 port detected [ 942.828628][ T2526] usb 5-1: USB disconnect, device number 83 11:41:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 11:41:29 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:29 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf62, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 943.308222][ T2517] usb 4-1: USB disconnect, device number 78 [ 943.412438][T17775] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 943.537855][T17775] 8021q: adding VLAN 0 to HW filter on device bond407 [ 943.592191][T17794] bond407: (slave veth979): Enslaving as an active interface with a down link [ 943.627262][T17775] bond407: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000040)='lo:&\xb7`Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') [ 943.745710][ T2518] usb 5-1: new high-speed USB device number 84 using dummy_hcd 11:41:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc08c5336, &(0x7f00000001c0)) [ 943.984722][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 944.062163][T17794] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 944.106911][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.106944][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 944.106962][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf63, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 944.108408][ T2518] usb 5-1: config 0 descriptor?? [ 944.145854][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 944.146522][T17794] 8021q: adding VLAN 0 to HW filter on device bond408 [ 944.255474][ T2517] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 944.365219][ T2518] usb 5-1: USB disconnect, device number 84 11:41:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d3}) 11:41:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 944.481652][T17895] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 944.496190][ T2517] usb 4-1: Using ep0 maxpacket: 16 11:41:30 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 944.646732][T17895] 8021q: adding VLAN 0 to HW filter on device bond409 [ 944.648955][ T2517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.648986][ T2517] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 944.649003][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.654556][ T2517] usb 4-1: config 0 descriptor?? [ 944.695824][ T2517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 944.702900][T17901] bond409: (slave veth983): Enslaving as an active interface with a down link [ 944.743720][T17945] bond409: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 944.897671][ T2514] usb 4-1: USB disconnect, device number 79 [ 944.967711][ T2518] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 945.099646][T17901] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 945.190820][T17901] 8021q: adding VLAN 0 to HW filter on device bond410 [ 945.234518][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 945.354716][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.366013][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.376275][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 945.385968][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.395731][ T2518] usb 5-1: config 0 descriptor?? [ 945.435490][ T2518] hub 5-1:0.0: USB hub found [ 945.454740][ T2514] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 945.654647][ T2518] hub 5-1:0.0: 1 port detected [ 945.694559][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 945.814883][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.826071][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.836447][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 945.847719][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.858364][ T2514] usb 4-1: config 0 descriptor?? [ 945.895510][ T2514] hub 4-1:0.0: USB hub found [ 946.114697][ T2514] hub 4-1:0.0: 1 port detected [ 946.488669][ T2517] usb 5-1: USB disconnect, device number 85 11:41:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x4c74a8cf8df38ba1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf64, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 947.026262][ T2517] usb 4-1: USB disconnect, device number 80 [ 947.040024][T18026] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 947.106733][T18026] 8021q: adding VLAN 0 to HW filter on device bond411 [ 947.130040][T18041] bond411: (slave veth987): Enslaving as an active interface with a down link [ 947.153009][T18026] bond411: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 947.326091][T18026] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 947.334963][ T2514] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 947.401078][T18026] 8021q: adding VLAN 0 to HW filter on device bond412 11:41:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:33 executing program 2: setxattr(0x0, &(0x7f0000000100)=@random={'security.', 'nl80211\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000180)={@any, 0x8}) open(0x0, 0x8280, 0xc) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) write(0xffffffffffffffff, 0x0, 0x0) 11:41:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf65, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 947.578692][ T2514] usb 5-1: Using ep0 maxpacket: 16 [ 947.601523][T18128] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 947.696677][ T2514] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 947.696708][ T2514] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 11:41:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5277b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 947.696724][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.698025][ T2514] usb 5-1: config 0 descriptor?? [ 947.735822][ T2514] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 947.754029][T18128] 8021q: adding VLAN 0 to HW filter on device bond413 [ 947.924005][T18136] bond413: (slave veth991): Enslaving as an active interface with a down link [ 947.924905][ T2526] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 947.939225][ T2514] usb 5-1: USB disconnect, device number 86 [ 947.977085][T18128] bond413: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 948.165742][ T2526] usb 4-1: Using ep0 maxpacket: 16 [ 948.294835][ T2526] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 948.294867][ T2526] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 948.294883][ T2526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.296152][ T2526] usb 4-1: config 0 descriptor?? [ 948.335412][ T2526] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 948.494631][ T2514] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 948.499458][T18167] bond413: (slave veth993): Enslaving as an active interface with a down link [ 948.499550][T18136] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 948.550879][ T2518] usb 4-1: USB disconnect, device number 81 [ 948.736047][ T2514] usb 5-1: Using ep0 maxpacket: 32 [ 948.854461][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.872936][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.883271][ T2514] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 948.892708][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.904954][ T2514] usb 5-1: config 0 descriptor?? [ 948.945969][ T2514] hub 5-1:0.0: USB hub found [ 949.114341][ T2518] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 949.154563][ T2514] hub 5-1:0.0: 1 port detected [ 949.354575][ T2518] usb 4-1: Using ep0 maxpacket: 32 [ 949.475303][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.486657][ T2518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.498142][ T2518] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 949.508749][ T2518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.524949][ T2518] usb 4-1: config 0 descriptor?? [ 949.569427][ T2518] hub 4-1:0.0: USB hub found [ 949.774565][ T2518] hub 4-1:0.0: 1 port detected [ 950.008446][ T2517] usb 5-1: USB disconnect, device number 87 11:41:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf66, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fchmod(r2, 0x0) 11:41:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 950.554462][T18245] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 950.596545][T18245] 8021q: adding VLAN 0 to HW filter on device bond414 11:41:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 950.705872][T18282] bond414: (slave veth995): Enslaving as an active interface with a down link [ 950.713215][T12003] usb 4-1: USB disconnect, device number 82 [ 950.735367][T18291] bond414: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) 11:41:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000103ff8)='./file0\x00', 0x44042, 0x0) ftruncate(r2, 0x1000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r3, r2, 0x0, 0x40801001) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x112) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0f02c96abdd6"], 0x8b) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002dbd7000fddbdf25040000000500040006000000140002007665746845000000000000d7ca7bf31ddcba7e0073797a32000000000500040f010000000900010073797a3200000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000814}, 0x4005) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0)="e6eafb21ddb179f7b48f49dfc5c869509b39cf5a8d2bb422736491b740a69ff9b88a1265291887bcb3a8c43d79b90f7e839a4f1c", 0x34) [ 950.914260][ T2514] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 951.021777][T18245] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 951.096226][T18245] bond414: (slave veth997): Enslaving as an active interface with a down link [ 951.164672][ T2514] usb 5-1: Using ep0 maxpacket: 16 11:41:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:37 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4bf67, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 951.290473][ T2514] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 951.322987][ T2514] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 951.323007][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.337501][T18323] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 951.341138][ T2514] usb 5-1: config 0 descriptor?? [ 951.376314][ T2514] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 951.477799][T18323] 8021q: adding VLAN 0 to HW filter on device bond415 [ 951.552143][T18345] bond415: (slave veth999): Enslaving as an active interface with a down link [ 951.610027][ T2517] usb 5-1: USB disconnect, device number 88 [ 951.612145][T18323] bond415: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 951.716523][ T2514] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 951.910761][T18323] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 951.964299][ T2514] usb 4-1: Using ep0 maxpacket: 16 [ 952.085893][ T2514] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 952.100216][ T2514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 952.110945][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.120820][ T2514] usb 4-1: config 0 descriptor?? [ 952.165041][ T2514] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 952.184108][ T2517] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 952.371253][ T2514] usb 4-1: USB disconnect, device number 83 [ 952.454108][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 952.583399][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.595725][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.607647][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 952.618264][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.631855][ T2517] usb 5-1: config 0 descriptor?? [ 952.709337][ T2517] hub 5-1:0.0: USB hub found [ 952.925482][ T2517] hub 5-1:0.0: 1 port detected [ 952.934194][ T2514] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 953.174287][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 953.294155][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.306293][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.318128][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 953.328502][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.341381][ T2514] usb 4-1: config 0 descriptor?? [ 953.387930][ T2514] hub 4-1:0.0: USB hub found [ 953.604119][ T2514] hub 4-1:0.0: 1 port detected [ 953.811573][ T2527] usb 5-1: USB disconnect, device number 89 11:41:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) modify_ldt$read(0x0, 0x0, 0x0) 11:41:40 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 954.363470][T18430] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:40 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 11:41:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4010ae68, &(0x7f0000000340)={0x0, [0x0, 0x0, 0x74]}) [ 954.470542][T18430] 8021q: adding VLAN 0 to HW filter on device bond416 [ 954.538032][T18442] bond416: (slave veth1003): Enslaving as an active interface with a down link [ 954.550920][T18472] bond416: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 954.561045][ T2527] usb 4-1: USB disconnect, device number 84 [ 954.657146][ T5] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 954.894103][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 954.982349][T18430] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 955.034196][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 955.041703][T18442] bond416: (slave veth1005): Enslaving as an active interface with a down link [ 955.057784][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 955.057805][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:41:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 955.088670][ T5] usb 5-1: config 0 descriptor?? 11:41:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f8000001500ae47a825d86800278dcff47d0100c618927e4eee0396b2788b21b9b6e900665acf4f8f36460234432479", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 11:41:41 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 955.152179][ T5] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 955.349643][ T2517] usb 5-1: USB disconnect, device number 90 [ 955.454596][ T2527] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 955.724523][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 955.848186][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 955.861789][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 955.874858][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.887126][ T2527] usb 4-1: config 0 descriptor?? [ 955.925546][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 955.944435][ T2517] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 956.127300][ T2514] usb 4-1: USB disconnect, device number 85 [ 956.213850][ T2517] usb 5-1: Using ep0 maxpacket: 32 [ 956.365110][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.376913][ T2517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.389148][ T2517] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 956.400472][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.414806][ T2517] usb 5-1: config 0 descriptor?? [ 956.467354][ T2517] hub 5-1:0.0: USB hub found [ 956.673961][ T2517] hub 5-1:0.0: 1 port detected [ 956.689233][ T2514] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 956.934908][ T2514] usb 4-1: Using ep0 maxpacket: 32 [ 957.054649][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.065776][ T2514] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.077689][ T2514] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 957.088088][ T2514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.102852][ T2514] usb 4-1: config 0 descriptor?? [ 957.148675][ T2514] hub 4-1:0.0: USB hub found [ 957.353919][ T2514] hub 4-1:0.0: 1 port detected [ 957.566748][ T5] usb 5-1: USB disconnect, device number 91 11:41:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 958.117368][T18580] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)) 11:41:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'vlan0\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000000000000007080003b3f485df6ca7c89100dc400000000000e0000000000000000000001100f75069b7e0a455c1e1cff0db740b7b848bb2262e00000000000000f9d4feff9c6a4ee487ae53113fc0879650d730214ed75b6820648cc329a8bcdb58a3bcfe82844a28c5115edf46951404e9fe33a2bf1ccc75f9392b19c75aa1cabe962eb81bd73835946fc3e2cc31929eb4290200000044cdd8c11ec447cdf1a02502d6bd1a5945511222791c77e4a2e3ff55c816cfbb6b7dd4c0e7f2d8fdc6839f8d80e67d434b29f4b16b85c78f4979e5"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x810ee0f, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@empty, @rand_addr=' \x01\x00', @ipv4={[0xd, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}) write(0xffffffffffffffff, &(0x7f0000000140)="3e312c200ddc2add3b3fa61d42180008c5e7441efdd6cfa2087f6f032ff7eb5847bb5f28464d88f6dfaf12184fa42f728ed64591c857e97ed204054448d81e7b18dd18f89e9a107641529c37d18a68e6ba7d27bc8e925ce5e0d1395a6ba26a126838498c4419fb5bda0f9742825cbbe49aecb5013f98ecfb6fc9e30f19dbba0aa68a88b7baf573a0b4a61e03a7de64fe3ba762b81d87bc4a8a4d41d8d6214d9c7350176dd6ae045f51668e8f7850d1d63281a0e99c1ccb1c57eff725640f48bec38027b258e12a204a8568d04e833bc33de03e4d194e452ea018269732", 0xdd) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) ioctl(r0, 0x8936, &(0x7f0000000000)) [ 958.180645][T18580] 8021q: adding VLAN 0 to HW filter on device bond417 11:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) [ 958.315954][T18608] bond417: (slave veth1007): Enslaving as an active interface with a down link [ 958.330425][ T2527] usb 4-1: USB disconnect, device number 86 [ 958.376149][T18626] bond417: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 958.405793][ T2517] usb 5-1: new high-speed USB device number 92 using dummy_hcd 11:41:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 958.666554][ T2517] usb 5-1: Using ep0 maxpacket: 16 [ 958.688793][T18580] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 11:41:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) 11:41:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0xc04c5349, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) 11:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 958.785960][ T2517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 958.785994][ T2517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 958.786011][ T2517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.788117][ T2517] usb 5-1: config 0 descriptor?? [ 958.794854][T18608] bond417: (slave veth1009): Enslaving as an active interface with a down link [ 958.826972][ T2517] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 958.964159][T18671] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 959.087751][T18671] 8021q: adding VLAN 0 to HW filter on device bond418 [ 959.125302][T18678] bond418: (slave veth1011): Enslaving as an active interface with a down link [ 959.141184][T18671] bond418: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 959.169463][ T2514] usb 5-1: USB disconnect, device number 92 [ 959.398083][T18678] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 959.433829][T12003] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 959.502322][T18671] bond418: (slave veth1013): Enslaving as an active interface with a down link [ 959.643591][ T2514] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 959.717804][T12003] usb 4-1: Using ep0 maxpacket: 16 [ 959.835040][T12003] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 959.849034][T12003] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 959.859593][T12003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.873078][T12003] usb 4-1: config 0 descriptor?? [ 959.894375][ T2514] usb 5-1: Using ep0 maxpacket: 32 [ 959.915204][T12003] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 960.023878][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.035265][ T2514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.048493][ T2514] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 960.059914][ T2514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.071008][ T2514] usb 5-1: config 0 descriptor?? [ 960.117360][ T2527] usb 4-1: USB disconnect, device number 87 [ 960.127865][ T2514] hub 5-1:0.0: USB hub found [ 960.333602][ T2514] hub 5-1:0.0: 1 port detected [ 960.704371][ T2527] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 960.983843][ T2527] usb 4-1: Using ep0 maxpacket: 32 [ 961.113832][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.124984][ T2527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.135372][ T2527] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 961.146078][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.155608][ T2527] usb 4-1: config 0 descriptor?? [ 961.195357][ T2527] hub 4-1:0.0: USB hub found [ 961.226713][ T2518] usb 5-1: USB disconnect, device number 93 [ 961.406196][ T2527] hub 4-1:0.0: 1 port detected 11:41:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) 11:41:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x7a, &(0x7f0000000140)="d3d763180dee636b7be929f7f249b9740c9e57f43d26af000000008a58480aa4cefdda3611f88416f5bd2ceef2611ab2c8e87610d02b8832952dd136bd6f0200009f8ede56de940ab099e6e624c6ee6419fead426b4428662cc5c0dec95f756cf0ab216142b72937be93b353f082833e8c437425c6d69b38fdcd"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:41:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) 11:41:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6a0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x6}) [ 961.800601][T18776] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 961.854883][T18776] 8021q: adding VLAN 0 to HW filter on device bond419 [ 961.971950][T18816] bond419: (slave veth1015): Enslaving as an active interface with a down link [ 961.989604][T18824] bond419: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 962.073607][ T2527] hub 4-1:0.0: activate --> -90 [ 962.075891][ T2518] usb 5-1: new high-speed USB device number 94 using dummy_hcd 11:41:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000040000006830b8"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 11:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 11:41:51 executing program 2: 11:41:51 executing program 2: [ 962.215650][T18776] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 962.314802][ T2518] usb 5-1: Using ep0 maxpacket: 16 [ 962.326196][T18839] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 962.361364][T18839] 8021q: adding VLAN 0 to HW filter on device bond420 [ 962.416003][T18839] bond420: (slave veth1019): Enslaving as an active interface with a down link [ 962.434278][ T2518] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 962.434311][ T2518] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 962.434328][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.435800][ T2518] usb 5-1: config 0 descriptor?? [ 962.474899][ T2518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 962.521759][T18839] bond420: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 962.680831][ T2518] usb 5-1: USB disconnect, device number 94 [ 962.831554][T18839] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 962.866701][T18877] bond420: (slave veth1021): Enslaving as an active interface with a down link [ 962.985999][T18901] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 963.021144][T18901] 8021q: adding VLAN 0 to HW filter on device bond421 [ 963.112069][T18901] bond421: (slave veth1023): Enslaving as an active interface with a down link [ 963.141855][T18939] bond421: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.233448][ T2518] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 963.389791][T18901] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 963.443966][T18901] bond421: (slave veth1025): Enslaving as an active interface with a down link [ 963.483446][ T2518] usb 5-1: Using ep0 maxpacket: 32 [ 963.537004][T18950] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 963.576501][T18950] 8021q: adding VLAN 0 to HW filter on device bond422 [ 963.615461][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.615481][ T2518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.615512][ T2518] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 963.615531][ T2518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.618156][ T2518] usb 5-1: config 0 descriptor?? [ 963.620549][T18950] bond422: (slave veth1027): Enslaving as an active interface with a down link [ 963.654225][ T2518] hub 5-1:0.0: USB hub found [ 963.686556][T18950] bond422: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.873457][ T2518] hub 5-1:0.0: 1 port detected [ 963.917977][T18950] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 963.979272][T18950] bond422: (slave veth1029): Enslaving as an active interface with a down link [ 964.048804][T19009] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 964.113739][ T2527] usb 4-1: reset high-speed USB device number 88 using dummy_hcd [ 964.135702][T19009] 8021q: adding VLAN 0 to HW filter on device bond423 [ 964.213453][T19027] bond423: (slave veth1031): Enslaving as an active interface with a down link [ 964.242208][T19009] bond423: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 964.363321][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 964.403379][ T2527] usb 4-1: device firmware changed [ 964.403668][ T2527] usb 4-1: USB disconnect, device number 88 [ 964.577360][T19009] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 964.605506][T19009] bond423: (slave veth1033): Enslaving as an active interface with a down link [ 964.689960][T19066] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 964.747823][T19066] 8021q: adding VLAN 0 to HW filter on device bond424 [ 964.784150][T19089] bond424: (slave veth1035): Enslaving as an active interface with a down link [ 964.789212][ T2526] usb 5-1: USB disconnect, device number 95 [ 964.798686][ T2527] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 964.858780][T19066] bond424: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 965.033258][ T2527] usb 4-1: Using ep0 maxpacket: 16 [ 965.120688][T19066] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 965.153848][ T2527] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 965.153878][ T2527] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 965.153895][ T2527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.155114][ T2527] usb 4-1: config 0 descriptor?? [ 965.170204][T19066] bond424: (slave veth1037): Enslaving as an active interface with a down link [ 965.204270][ T2527] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 965.407540][T12003] usb 4-1: USB disconnect, device number 89 [ 965.893201][ T2517] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 966.173162][ T2517] usb 4-1: Using ep0 maxpacket: 32 [ 966.304016][ T2517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.304038][ T2517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.304068][ T2517] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 966.304083][ T2517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.305536][ T2517] usb 4-1: config 0 descriptor?? [ 966.344028][ T2517] hub 4-1:0.0: USB hub found [ 966.563787][ T2517] hub 4-1:0.0: 1 port detected [ 967.233239][ T2517] hub 4-1:0.0: activate --> -90 [ 968.953590][ T2518] usb 4-1: USB disconnect, device number 90 [ 1022.559233][ T7] tipc: TX() has been purged, node left! [ 1025.812332][ T7] tipc: TX() has been purged, node left! [ 1025.958638][ T7] tipc: TX() has been purged, node left! [ 1026.119474][ T7] tipc: TX() has been purged, node left! [ 1026.278626][ T7] tipc: TX() has been purged, node left! [ 1026.438521][ T7] tipc: TX() has been purged, node left! [ 1026.598501][ T7] tipc: TX() has been purged, node left! [ 1026.758602][ T7] tipc: TX() has been purged, node left! [ 1026.920633][ T7] tipc: TX() has been purged, node left! [ 1027.078433][ T7] tipc: TX() has been purged, node left! [ 1027.242279][ T7] tipc: TX() has been purged, node left! [ 1027.400221][ T7] tipc: TX() has been purged, node left! [ 1033.138449][ T7] tipc: TX() has been purged, node left! [ 1033.297682][ T7] tipc: TX() has been purged, node left! [ 1033.457797][ T7] tipc: TX() has been purged, node left! [ 1033.620866][ T7] tipc: TX() has been purged, node left! [ 1033.779287][ T7] tipc: TX() has been purged, node left! [ 1033.941603][ T7] tipc: TX() has been purged, node left! [ 1107.889186][ T1147] INFO: task syz-executor.5:18768 blocked for more than 143 seconds. [ 1107.889199][ T1147] Not tainted 5.8.0-rc3-syzkaller #0 [ 1107.889205][ T1147] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.889213][ T1147] syz-executor.5 D28384 18768 7420 0x00000004 [ 1107.889237][ T1147] Call Trace: [ 1107.889308][ T1147] __schedule+0x8e1/0x1eb0 [ 1107.889332][ T1147] ? io_schedule_timeout+0x140/0x140 [ 1107.889356][ T1147] schedule+0xd0/0x2a0 [ 1107.889374][ T1147] schedule_preempt_disabled+0xf/0x20 [ 1107.889388][ T1147] __mutex_lock+0x3e2/0x10d0 [ 1107.889424][ T1147] ? fb_release+0x4e/0x140 [ 1107.889444][ T1147] ? mutex_lock_io_nested+0xf60/0xf60 [ 1107.889461][ T1147] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1107.889538][ T1147] ? fsnotify+0x7ec/0xb30 [ 1107.889554][ T1147] ? fsnotify_parent+0xb7/0x2b0 [ 1107.889574][ T1147] ? fsnotify_first_mark+0x1f0/0x1f0 [ 1107.889642][ T1147] ? fcntl_setlk+0xf60/0xf60 [ 1107.889663][ T1147] ? lock_is_held_type+0xb0/0xe0 [ 1107.889684][ T1147] ? unregister_framebuffer+0x30/0x30 [ 1107.889698][ T1147] fb_release+0x4e/0x140 [ 1107.889716][ T1147] __fput+0x33c/0x880 [ 1107.889808][ T1147] task_work_run+0xdd/0x190 [ 1107.889941][ T1147] __prepare_exit_to_usermode+0x1e9/0x1f0 [ 1107.889958][ T1147] do_syscall_64+0x6c/0xe0 [ 1107.889974][ T1147] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.889987][ T1147] RIP: 0033:0x416721 [ 1107.889993][ T1147] Code: Bad RIP value. [ 1107.890001][ T1147] RSP: 002b:0000000000c9fbe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1107.890015][ T1147] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000416721 [ 1107.890024][ T1147] RDX: 0000000000000000 RSI: 00000000000011b5 RDI: 0000000000000005 [ 1107.890033][ T1147] RBP: 0000000000000001 R08: 000000006f2391b2 R09: 000000006f2391b6 [ 1107.890042][ T1147] R10: 0000000000c9fcd0 R11: 0000000000000293 R12: 000000000078c900 [ 1107.890051][ T1147] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 1107.890080][ T1147] [ 1107.890080][ T1147] Showing all locks held in the system: [ 1107.890095][ T1147] 1 lock held by khungtaskd/1147: [ 1107.890100][ T1147] #0: ffffffff89bc1140 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1107.890175][ T1147] 1 lock held by in:imklog/6514: [ 1107.890180][ T1147] #0: ffff8880a449ab70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1107.890213][ T1147] 2 locks held by agetty/6742: [ 1107.890218][ T1147] #0: ffff8880a448b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1107.890291][ T1147] #1: ffffc90000fd42e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1107.890323][ T1147] 2 locks held by agetty/6746: [ 1107.890328][ T1147] #0: ffff88809f984098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1107.890355][ T1147] #1: ffffc90000fc42e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1107.890414][ T1147] 2 locks held by agetty/20116: [ 1107.890418][ T1147] #0: ffff88804fd2e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1107.890446][ T1147] #1: ffffc900053db2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1107.890529][ T1147] 1 lock held by syz-executor.5/18768: [ 1107.890534][ T1147] #0: ffff888218840078 (&fb_info->lock){+.+.}-{3:3}, at: fb_release+0x4e/0x140 [ 1107.890566][ T1147] 2 locks held by syz-executor.0/18829: [ 1107.890572][ T1147] [ 1107.890578][ T1147] ============================================= [ 1107.890578][ T1147] [ 1107.890585][ T1147] NMI backtrace for cpu 0 [ 1107.890600][ T1147] CPU: 0 PID: 1147 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 1107.890608][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.890613][ T1147] Call Trace: [ 1107.890635][ T1147] dump_stack+0x18f/0x20d [ 1107.890661][ T1147] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1107.890703][ T1147] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1107.890719][ T1147] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1107.890735][ T1147] watchdog+0xd7d/0x1000 [ 1107.890752][ T1147] ? reset_hung_task_detector+0x30/0x30 [ 1107.890772][ T1147] kthread+0x3b5/0x4a0 [ 1107.890784][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1107.890796][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1107.890813][ T1147] ret_from_fork+0x1f/0x30 [ 1107.890863][ T1147] Sending NMI from CPU 0 to CPUs 1: [ 1107.891822][ C1] NMI backtrace for cpu 1 [ 1107.891828][ C1] CPU: 1 PID: 18829 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 1107.891835][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.891839][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x55/0x60 [ 1107.891851][ C1] Code: 82 e0 13 00 00 83 f8 02 75 20 48 8b 8a e8 13 00 00 8b 92 e4 13 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 34 c1 48 89 01 66 2e 0f 1f 84 00 00 00 00 00 41 55 41 54 49 89 fc 55 48 bd eb [ 1107.891855][ C1] RSP: 0018:ffffc9001958f080 EFLAGS: 00000246 [ 1107.891863][ C1] RAX: 0000000000040000 RBX: 0000000000000050 RCX: ffffc90001c22000 [ 1107.891868][ C1] RDX: 0000000000040000 RSI: ffffffff83c64710 RDI: 0000000000000004 [ 1107.891873][ C1] RBP: 0000000000000008 R08: 0000000000000001 R09: ffff88821882a81f [ 1107.891878][ C1] R10: 0000000000000050 R11: 0000000000000000 R12: ffff8880000a0008 [ 1107.891883][ C1] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000f3464e56 [ 1107.891888][ C1] FS: 00007fd16d046700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1107.891891][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1107.891896][ C1] CR2: 00005593c77c6500 CR3: 000000008f17a000 CR4: 00000000001426e0 [ 1107.891900][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1107.891905][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1107.891907][ C1] Call Trace: [ 1107.891910][ C1] vga16fb_fillrect+0x9c0/0x193b [ 1107.891912][ C1] ? memcpy+0x39/0x60 [ 1107.891915][ C1] bit_clear_margins+0x2d5/0x4a0 [ 1107.891918][ C1] ? bit_bmove+0x210/0x210 [ 1107.891921][ C1] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1107.891924][ C1] fbcon_clear_margins+0x1d5/0x230 [ 1107.891927][ C1] fbcon_switch+0xb6e/0x16c0 [ 1107.891930][ C1] ? fbcon_scroll+0x3600/0x3600 [ 1107.891933][ C1] ? fbcon_cursor+0x52b/0x650 [ 1107.891936][ C1] ? kmalloc_array.constprop.0+0x20/0x20 [ 1107.891939][ C1] ? is_console_locked+0x5/0x10 [ 1107.891942][ C1] ? fbcon_set_origin+0x26/0x50 [ 1107.891945][ C1] redraw_screen+0x2ae/0x770 [ 1107.891948][ C1] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1107.891951][ C1] ? vc_init+0x440/0x440 [ 1107.891954][ C1] ? fbcon_set_palette+0x3a8/0x490 [ 1107.891957][ C1] fbcon_modechanged+0x575/0x710 [ 1107.891960][ C1] fbcon_update_vcs+0x3a/0x50 [ 1107.891962][ C1] fb_set_var+0xae8/0xd60 [ 1107.891965][ C1] ? fb_blank+0x190/0x190 [ 1107.891968][ C1] ? unwind_next_frame+0xe3b/0x1f90 [ 1107.891972][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.891975][ C1] ? is_bpf_text_address+0xcb/0x160 [ 1107.891978][ C1] ? kernel_text_address+0xbd/0xf0 [ 1107.891981][ C1] ? fb_pad_aligned_buffer+0xf7/0x150 [ 1107.891984][ C1] ? fb_get_color_depth+0x11a/0x240 [ 1107.891987][ C1] ? bit_cursor+0xa2a/0x17d0 [ 1107.891990][ C1] ? fb_videomode_to_var+0xf/0x610 [ 1107.891993][ C1] fbcon_switch+0x52c/0x16c0 [ 1107.891996][ C1] ? fbcon_scroll+0x3600/0x3600 [ 1107.891999][ C1] ? fbcon_cursor+0x52b/0x650 [ 1107.892002][ C1] ? kmalloc_array.constprop.0+0x20/0x20 [ 1107.892005][ C1] ? is_console_locked+0x5/0x10 [ 1107.892008][ C1] ? fbcon_set_origin+0x26/0x50 [ 1107.892011][ C1] redraw_screen+0x2ae/0x770 [ 1107.892014][ C1] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1107.892017][ C1] ? vc_init+0x440/0x440 [ 1107.892020][ C1] ? fbcon_set_palette+0x3a8/0x490 [ 1107.892023][ C1] fbcon_modechanged+0x575/0x710 [ 1107.892026][ C1] fbcon_update_vcs+0x3a/0x50 [ 1107.892029][ C1] fb_set_var+0xae8/0xd60 [ 1107.892032][ C1] ? fb_blank+0x190/0x190 [ 1107.892035][ C1] ? lock_release+0x8d0/0x8d0 [ 1107.892038][ C1] ? lock_is_held_type+0xb0/0xe0 [ 1107.892040][ C1] ? do_fb_ioctl+0x2f2/0x6c0 [ 1107.892044][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1107.892047][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1107.892050][ C1] ? trace_hardirqs_on+0x5f/0x220 [ 1107.892053][ C1] do_fb_ioctl+0x33f/0x6c0 [ 1107.892056][ C1] ? fb_set_suspend+0x1a0/0x1a0 [ 1107.892059][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 1107.892062][ C1] ? __might_fault+0x11f/0x1d0 [ 1107.892066][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1107.892069][ C1] ? do_vfs_ioctl+0x27d/0x1090 [ 1107.892072][ C1] ? __fget_files+0x294/0x400 [ 1107.892074][ C1] fb_ioctl+0xdd/0x130 [ 1107.892077][ C1] ? do_fb_ioctl+0x6c0/0x6c0 [ 1107.892080][ C1] ksys_ioctl+0x11a/0x180 [ 1107.892083][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 1107.892086][ C1] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1107.892088][ C1] do_syscall_64+0x60/0xe0 [ 1107.892092][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.892095][ C1] RIP: 0033:0x45cb29 [ 1107.892097][ C1] Code: Bad RIP value. [ 1107.892101][ C1] RSP: 002b:00007fd16d045c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.892108][ C1] RAX: ffffffffffffffda RBX: 00000000004e55a0 RCX: 000000000045cb29 [ 1107.892113][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000005 [ 1107.892117][ C1] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.892122][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1107.892126][ C1] R13: 00000000000002fd R14: 00000000004c58a5 R15: 00007fd16d0466d4 [ 1107.892137][ T1147] Kernel panic - not syncing: hung_task: blocked tasks [ 1107.892150][ T1147] CPU: 0 PID: 1147 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 1107.892157][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.892161][ T1147] Call Trace: [ 1107.892174][ T1147] dump_stack+0x18f/0x20d [ 1107.892239][ T1147] panic+0x2e3/0x75c [ 1107.892254][ T1147] ? __warn_printk+0xf3/0xf3 [ 1107.892271][ T1147] ? cpumask_next+0x3c/0x40 [ 1107.892305][ T1147] ? printk_safe_flush+0xd6/0x120 [ 1107.892317][ T1147] ? watchdog.cold+0x5/0x16b [ 1107.892328][ T1147] ? watchdog+0xa82/0x1000 [ 1107.892344][ T1147] watchdog.cold+0x16/0x16b [ 1107.892361][ T1147] ? reset_hung_task_detector+0x30/0x30 [ 1107.892376][ T1147] kthread+0x3b5/0x4a0 [ 1107.892388][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1107.892400][ T1147] ? __kthread_bind_mask+0xc0/0xc0 [ 1107.892416][ T1147] ret_from_fork+0x1f/0x30 [ 1107.894563][ T1147] Kernel Offset: disabled [ 1109.593904][ T1147] Rebooting in 86400 seconds..