IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) [ 693.421536][T12363] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000001580)={0x0, @in, 0x0, 0x0, 0x8a}, 0x98) 21:32:28 executing program 1: syz_emit_ethernet(0xaf, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) [ 693.512741][T12363] bond39 (uninitialized): Released all slaves 21:32:28 executing program 5: syz_emit_ethernet(0x60, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4}]}}}}}}, 0x0) 21:32:28 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0806000108000604"], 0x0) 21:32:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:29 executing program 4: readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0xfffffffffffffdec) [ 693.872648][ T123] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 694.112309][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 694.204075][T12378] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 694.233105][ T123] usb 3-1: config 0 has no interfaces? [ 694.282801][T12378] bond39 (uninitialized): Released all slaves [ 694.393184][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 694.402590][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.410758][ T123] usb 3-1: Product: syz [ 694.415247][ T123] usb 3-1: Manufacturer: syz [ 694.420015][ T123] usb 3-1: SerialNumber: syz [ 694.455768][ T123] usb 3-1: config 0 descriptor?? [ 694.704533][ T3551] usb 3-1: USB disconnect, device number 39 21:32:30 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:32:30 executing program 5: syz_emit_ethernet(0x60, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4}]}}}}}}, 0x0) 21:32:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000140)="41074b0b35fe704ed46303a08acd9ae767a69c3f39cb71737c068f1a42e30a0ee205a8157b4e46e2380146d155b3a161e85027da880c010206ce916785b75b6f612eaf1cb4efde4a18740c00dfaeb851e504dd2af041c6b293c9bb83b39e78edc609c8ccba83330343f7766853189c024504a1da5b7c2962810831a1093c996637e1651a4dda4651b282131c68cea7459d08933134d6c3071056e2c0ead8974a6eba1ef7cd6ebdd6c3b44422282b53bd269fda9ce40d4a9bf05ecd458f116698a6a7ae4dd472d1dafeb01ab2e9790bea7d5e61f8aaa06e4ee357ecb895d9b208", 0xe0) 21:32:30 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @multicast2, @broadcast}}}}, 0x0) 21:32:30 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="8d2f39e0f010", @random="0b577fd49d76", @val, {@arp={0x806, @generic={0x18, 0x0, 0x6, 0x0, 0x0, @random="fde5fd16a23b", "", @remote, "934bab6dcd9e782309632198ca8dac27"}}}}, 0x0) 21:32:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), 0x88) 21:32:30 executing program 5: syz_emit_ethernet(0x60, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4}]}}}}}}, 0x0) 21:32:30 executing program 1: select(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}) 21:32:30 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000001880)={&(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000100)="9a6475f7280fdef8a6684884b1b03669111b7341139e62acacc6f91a1dce5df14440e71be93217fea2cb82948b6d53018da81f3b55e0fd3c78b6d0d4150b84e9b509bba3793e45cb31f368b498506e0ba6285576b14ff03cc75383ffcf7c81d71af77facb4bc7768d53b77cce7162e02acd7979661d35c9400656fbf4cb61f23db09355d07e74076cfeeae189578574d3fe55568ef7f7b73aea01fce4f2bc26e1aa19bcf9069cafb6bc4e4ed1fca04328f9f4a36b53b821ada41a42bb384c07897e5852f49aa07a28787972f48cb9f924c61155702a5962af10619b1", 0xdc}, {&(0x7f0000000200)="077f2847e8cc318023092f2d8785fd4835cdabacaab2607141e8af64728d54792f5d13f3feb8b1da6636c3d3c7631454651cbbba6d6eff84e622e0859b4ec70fbaba071460859cbfab41eb9faddd46e28189c0c9c2fc0c7a560fff93fba1f5cdbc31e11932eb85b72cb4e507f99d22bc513d3b96370342bbc5153c2427d45c4bb47e4c52471d98dd3fe9fbdfcc076e7ee5b8d9688dc1618522bf93d9f77fdce8b7f7e61bf91b0de90a329d42a7ea37327cf944d9342facbf82e84b4c2c38d05cbee1c8866e68", 0xc6}, {&(0x7f0000000300)="dfb1c8b8979a311738f993a358603339e44624834e4ad5c5598878b7ec3b01ee69c38577fdde633798383aedad91dea6ab2f6b23d81c412bbda4c682eadd0337f634b8963dbbd76d51eddca1a6c59716d091f05e6c786c06cd331bbdd9c26ba13e626337fe1f053f96e04d4faffe9cfcb157e3595f3c3b03e930e073c6345eea9155abb99633158d48acf0173274fca149f050a90c095ee93efada78", 0x9c}, {&(0x7f0000000400)="43cdd67a6bb6065a458ab96e6e18ec753ef5ba482f2e6aff56b6b233bf47e13b622d5dc1d6d70bc65dcff28e66e680", 0x2f}, {&(0x7f0000000440)="e215fc9a65", 0x5}, {&(0x7f0000000480)="a0f552c0d95f27ee41286564d3de7560162270d9184a61c0027258b36e21e886b5e8527375", 0x25}, {&(0x7f00000004c0)="5000e57da6db03e7373f38bd59f2d0f062b0973419724b0fb8a6485fd0c808745b120b9a7d4c819df01ed98a48cf0254d883d12e1c023e41ce9541d4ed08ae945947009b2f698010120cb6016650b2d7160307c1002af10eedbd6c0b71c103dab57f0f2970aafca51869d1f85bdd46e2e38d17bcbf", 0x75}, {&(0x7f0000000540)="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", 0x4f5}], 0x8}, 0x0) 21:32:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) [ 695.833446][ T123] usb 3-1: new high-speed USB device number 40 using dummy_hcd 21:32:30 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)=ANY=[@ANYBLOB="02", @ANYRES32=0x0], &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000003380), &(0x7f0000000000)=0x8) [ 696.072571][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 696.192858][ T123] usb 3-1: config 0 has no interfaces? [ 696.352644][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 696.362157][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.370335][ T123] usb 3-1: Product: syz [ 696.374936][ T123] usb 3-1: Manufacturer: syz [ 696.379669][ T123] usb 3-1: SerialNumber: syz [ 696.444439][ T123] usb 3-1: config 0 descriptor?? [ 696.699578][ T3551] usb 3-1: USB disconnect, device number 40 21:32:32 executing program 5: syz_emit_ethernet(0xdb, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa5, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0xf, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a4"}]}}}}}}, 0x0) 21:32:32 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000140)="1d", 0x1, 0x0, &(0x7f0000000240)={0x1c, 0x1c}, 0x1c) 21:32:32 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="e3c7977fc2b7", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @multicast2, @local, @multicast2}}}}, 0x0) 21:32:32 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:32:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 21:32:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:32 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmdt(0x0) 21:32:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, 0x0, 0x0) 21:32:32 executing program 5: syz_emit_ethernet(0xdb, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa5, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0xf, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a4"}]}}}}}}, 0x0) 21:32:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:32 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x20148, 0x0, 0x0) 21:32:33 executing program 4: syz_emit_ethernet(0x68, &(0x7f0000000140)={@local, @random="0963268ebbc5", @val, {@ipv6}}, 0x0) [ 697.933220][ T3551] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 697.951032][T12427] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 698.123645][T12427] 8021q: adding VLAN 0 to HW filter on device bond39 [ 698.182234][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 698.303120][ T3551] usb 3-1: config 0 has no interfaces? [ 698.475254][ T3551] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 698.484788][ T3551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.493147][ T3551] usb 3-1: Product: syz [ 698.497449][ T3551] usb 3-1: Manufacturer: syz [ 698.502285][ T3551] usb 3-1: SerialNumber: syz [ 698.531370][ T3551] usb 3-1: config 0 descriptor?? [ 698.784225][ T3551] usb 3-1: USB disconnect, device number 41 21:32:34 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:32:34 executing program 1: symlink(&(0x7f00000011c0)='./file1\x00', &(0x7f0000001200)='./file0\x00') open$dir(&(0x7f0000001400)='./file0\x00', 0x9d028c, 0x0) open$dir(&(0x7f0000000980)='./file0/file0\x00', 0x0, 0x0) symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0/file0\x00') 21:32:34 executing program 5: syz_emit_ethernet(0xdb, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa5, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0xf, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a4"}]}}}}}}, 0x0) 21:32:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000000)={0x0, 0x20}, 0x8) 21:32:34 executing program 0: open$dir(0x0, 0x9d0293, 0x0) 21:32:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) [ 699.283322][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.289828][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.435435][T12441] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:34 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000000)={@random="e3cc63c2511b", @local, @val, {@ipv4}}, 0x0) [ 699.515834][T12441] 8021q: adding VLAN 0 to HW filter on device bond40 21:32:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000140)={0x0, 0x2, "eb88"}, &(0x7f0000001180)=0xa) 21:32:34 executing program 0: syz_emit_ethernet(0x23cf, &(0x7f0000000040)=ANY=[@ANYBLOB="e700000000000000ffffffff86dd6023e6502b990000fe18658000000400000000000400000000000000000000000005"], 0x0) 21:32:34 executing program 5: syz_emit_ethernet(0x119, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe3, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x17, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d77"}]}}}}}}, 0x0) 21:32:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:35 executing program 5: syz_emit_ethernet(0x119, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe3, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x17, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d77"}]}}}}}}, 0x0) [ 700.180635][T12463] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 700.190935][ T123] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 700.297981][T12463] 8021q: adding VLAN 0 to HW filter on device bond41 [ 700.444053][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 700.563055][ T123] usb 3-1: config 0 has no interfaces? [ 700.742271][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 700.751634][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.760085][ T123] usb 3-1: Product: syz [ 700.764540][ T123] usb 3-1: Manufacturer: syz [ 700.769267][ T123] usb 3-1: SerialNumber: syz [ 700.781242][ T123] usb 3-1: config 0 descriptor?? [ 701.029069][ T123] usb 3-1: USB disconnect, device number 42 21:32:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x2018c, 0x0, 0x0) 21:32:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 21:32:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 21:32:36 executing program 5: syz_emit_ethernet(0x119, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe3, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x17, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d77"}]}}}}}}, 0x0) 21:32:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:36 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="e2", 0x1, 0x0, &(0x7f0000000240)={0x1c, 0x1c}, 0x1c) 21:32:36 executing program 5: syz_emit_ethernet(0x138, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1b, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab"}]}}}}}}, 0x0) 21:32:36 executing program 1: r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 21:32:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0), 0x98) [ 701.812416][T12475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 701.949386][T12475] 8021q: adding VLAN 0 to HW filter on device bond42 21:32:37 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="e3cc63c2511b", @local, @val, {@ipv4}}, 0x0) 21:32:37 executing program 5: syz_emit_ethernet(0x138, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1b, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab"}]}}}}}}, 0x0) 21:32:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:37 executing program 0: symlink(&(0x7f00000011c0)='./file1\x00', &(0x7f0000001200)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x823fca40edf86137, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 21:32:37 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:37 executing program 1: r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 21:32:37 executing program 5: syz_emit_ethernet(0x138, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1b, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab"}]}}}}}}, 0x0) 21:32:38 executing program 4: open$dir(&(0x7f0000001400)='./file0\x00', 0x9d028c, 0x0) statfs(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) [ 702.958603][T12503] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:38 executing program 0: open$dir(&(0x7f0000001400)='./file0\x00', 0x9d028c, 0x0) getgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) chown(&(0x7f0000000080)='./file0\x00', 0x0, r0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 703.053914][T12503] 8021q: adding VLAN 0 to HW filter on device bond43 21:32:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f0000000000), 0x4) 21:32:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:38 executing program 1: r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 21:32:38 executing program 5: syz_emit_ethernet(0x147, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x111, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1d, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455f"}]}}}}}}, 0x0) 21:32:38 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x42) [ 703.764069][T12524] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 703.835473][T12524] 8021q: adding VLAN 0 to HW filter on device bond44 21:32:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:39 executing program 4: shmget(0x2, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) 21:32:39 executing program 1: r0 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 21:32:39 executing program 5: syz_emit_ethernet(0x147, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x111, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1d, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455f"}]}}}}}}, 0x0) 21:32:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x0, 0x0, 0x60a}, 0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000000)=0x98) [ 704.797167][T12545] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x8) 21:32:40 executing program 5: syz_emit_ethernet(0x147, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x111, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1d, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455f"}]}}}}}}, 0x0) 21:32:40 executing program 0: setsockopt$inet_tcp_buf(0xffffffffffffff9c, 0x6, 0x0, &(0x7f00000006c0)="b4", 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 704.904627][T12545] 8021q: adding VLAN 0 to HW filter on device bond45 21:32:40 executing program 5: syz_emit_ethernet(0x14f, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x119, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f57"}]}}}}}}, 0x0) 21:32:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x6, 0x0, 0x60a}, 0x98) [ 705.651256][T12566] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:40 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:40 executing program 0: bpf$PROG_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) 21:32:40 executing program 5: syz_emit_ethernet(0x14f, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x119, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f57"}]}}}}}}, 0x0) 21:32:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 21:32:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000400)=@framed={{0xb7, 0x9, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb4}, [@ldst={0x6, 0x3, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 705.763996][T12566] 8021q: adding VLAN 0 to HW filter on device bond46 21:32:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000080500000000000000080095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000100)={0x0}, 0x10) 21:32:41 executing program 5: syz_emit_ethernet(0x14f, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x119, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f57"}]}}}}}}, 0x0) 21:32:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000080500000000000000080095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x10, &(0x7f0000000100)={0x0}, 0x10) 21:32:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000080500000000000000080095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x9, &(0x7f0000000100)={0x0}, 0x10) 21:32:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:32:41 executing program 5: syz_emit_ethernet(0x153, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11d, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f5700def80a"}]}}}}}}, 0x0) [ 706.495534][T12589] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:41 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)="309c1efd43563ed40cf34c12e7d95022e82d0b5491", 0x15}, {&(0x7f0000000080)="ae426fcba954bb5540db63db4e2f06c1", 0x10}], 0x2}, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="4e8f74a32a792ed1f6719c153938c2038bd0078c9e825193372b5dc3cc56c692a4ff6ea57371469c891f5bd805ebd21cc7777bd7d77bce18b2c7bd83c32d1bc20c043905c850afc660349ef8747b7a4c3600e03f400291247488014927df22e208be3ad8dc25f06e6bfbed84340f3fc09e7db717f9d662946c61fedc886b41b4020481d71b3cd4478a1093ac44c1af34eea3404d", 0x94}, {&(0x7f0000000280)="70b42007132927acce1536511432c642eb8d1e7f9b5a7bd425e0a42137d89115c20edc41cd779b6ebcc3e2e217c943ea175500553b1fb2c5719114c44d70b0bd073033f77a0944da1456faf2b3c296f42c6d2fe8a034eece22616cb74d38967da81dd23f80fa790b52faf9afcee37f03470fb56b2a55d02bb2f7d4453d946546217dd8b40ce1e38d7e59cbab6b68ecb2575549a8ce2ceba670bb853732047335f216ccfea51f38be04cd4fcb65746a5878bde8f20573fa7c7045b30990a4828cb7492242526c53b5010812dcc627981176a5a7c3", 0xd4}, {&(0x7f0000000380)="c000a447575f73705e469830beb2969ebe1a7a950a09a12986016536dba109f9345628dd374da5083d93b80628e2d6cce68dc4fadf41bb9f289cd0c5108704ebd54969b2bca88f2860609fc8c5eb23a2172d4b47171bc93af728bf07e1b063776273c8263d75a449da5f5e661208b2abd1eb70bae10e4730eb48abda8e71f141f7fc64a3f184e3561d3272d5e5da2bd66c85a3b5c3db59f7c1df6046b75015c677b1df5d296d180e3f59b0a74436ba6b5da0555092334021bf8b573135061001f0c78b7e9a466a040baf9bab88", 0xcd}], 0x3}, 0x0) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000540)=@rc={0x1f, @none}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/158, 0x9e}], 0x1}, 0x0) [ 706.647640][T12589] 8021q: adding VLAN 0 to HW filter on device bond47 21:32:42 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000080500000000000000080095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x10, &(0x7f0000000100)={0x0}, 0x10) 21:32:42 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x1e, &(0x7f0000000100)={0x0}, 0x10) 21:32:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:42 executing program 5: syz_emit_ethernet(0x153, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11d, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f5700def80a"}]}}}}}}, 0x0) 21:32:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x5, 0xda7e136, 0x0, 0x3ff}, 0x48) [ 707.985236][T12603] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:32:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003ec0)={0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000001700)="08be2a727b7ebfcee22c8d2307f7445bc92679e4e1de9ef45fe7b02a9a56c50e54292e9d93e5f2f74e431bcad37a81456d49ed29b4ecb348c2631a11564de609effb88f75f465596f4ede0115f4106f8e269b900e4ff554497c9e63dc8fff207af233621263a79e08d9f6dbf617bf8888ec8bc3c2d6edbec8072e0c75ab4d7ed2671d1ccc936024fe2315034d50c2911fe3352a592e059ed135bd87ebc6f0cd44cf239ee9e12ff3385d6a383c0f32203b28e0a60aacb54e3b86d1395a16077e77e93280673b3", 0xc6}, {&(0x7f0000001800)="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", 0xf3a}, {&(0x7f0000002800)='&', 0x1}], 0x3, &(0x7f0000003c80)=ANY=[@ANYBLOB="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"], 0x1d0}, 0x0) 21:32:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000400)=@framed={{0xb7, 0x9, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb4}, [@ldst={0x5, 0x3, 0x0, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 21:32:43 executing program 5: syz_emit_ethernet(0x153, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11d, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f5700def80a"}]}}}}}}, 0x0) [ 708.074767][T12603] 8021q: adding VLAN 0 to HW filter on device bond48 21:32:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000080500000000000000080095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x7, &(0x7f0000000100)={0x0}, 0x10) 21:32:43 executing program 0: syz_io_uring_setup(0x3140, &(0x7f0000000180)={0x0, 0x0, 0x16}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 21:32:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 708.709235][T12625] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 708.926761][T12625] 8021q: adding VLAN 0 to HW filter on device bond49 21:32:44 executing program 2: syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:44 executing program 5: syz_emit_ethernet(0x155, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f5700def80a1f7a"}]}}}}}}, 0x0) 21:32:44 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 21:32:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:32:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) socket$nl_crypto(0x10, 0x3, 0x15) pselect6(0x40, &(0x7f0000000040)={0x7ab}, 0x0, 0x0, 0x0, 0x0) 21:32:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 709.813829][T12629] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 709.857450][T12637] fuse: blksize only supported for fuseblk [ 709.880534][T12629] 8021q: adding VLAN 0 to HW filter on device bond50 21:32:45 executing program 5: syz_emit_ethernet(0x155, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f5700def80a1f7a"}]}}}}}}, 0x0) 21:32:45 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4}, [@country_functional={0x6}]}}}]}}]}}, 0x0) 21:32:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:45 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="a5", 0x1}], 0x1) 21:32:45 executing program 5: syz_emit_ethernet(0x155, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [{0x4, 0x1e, "cd012d318cf1fcf0e2e9d27a2f698d5d17752a66a5031742ba7ebffef3ba6b8b70fdb66f54bbde414dfacb1cd710931816879a045d0612c9a489ee5283314f45df80781ff2b588b69cd632b8c3f34879e982b995ba21247ebbd285f728c0135c1a3ecbe205001e0ade1094b32092408b15ec98fbaab8f69d9850a474fcd5b5aafc245b33d60a62a6ac72b61aff90dca01af86130298c8a836d7eeb390b82fdc50ccdfca506b55e97ca347a5c7ef13fd83e710121da890c3d770eb77666ea5db42c3ebb046be3d618fe2c5ccb225e3838babdb96f7ec47dab9fde2099070ed7ec7ea7955287455ffabf58de1f2b9f5700def80a1f7a"}]}}}}}}, 0x0) [ 710.500392][T12648] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 710.603304][T12648] 8021q: adding VLAN 0 to HW filter on device bond51 21:32:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 710.768012][ T123] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 711.108593][T12658] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 711.143213][ T123] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 711.175669][T12658] 8021q: adding VLAN 0 to HW filter on device bond52 [ 711.312993][ T123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.322566][ T123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.330722][ T123] usb 2-1: Product: syz [ 711.335519][ T123] usb 2-1: Manufacturer: syz [ 711.340261][ T123] usb 2-1: SerialNumber: syz [ 711.404975][ T123] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 711.606929][ T123] usb 2-1: USB disconnect, device number 10 21:32:46 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:46 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 21:32:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r1, 0x0, 0x0) 21:32:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) [ 712.043711][T12666] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 712.077777][T12666] 8021q: adding VLAN 0 to HW filter on device bond53 21:32:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x36, 0x0, &(0x7f0000000400)) 21:32:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:47 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 21:32:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 712.472561][ T3551] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 712.662447][ T3551] usb 3-1: device descriptor read/64, error 18 [ 712.815698][T12682] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 712.869565][T12682] 8021q: adding VLAN 0 to HW filter on device bond54 [ 712.982445][ T3551] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 713.182972][ T3551] usb 3-1: device descriptor read/64, error 18 [ 713.302515][ T3551] usb usb3-port1: attempt power cycle [ 713.734148][ T3551] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 713.922678][ T3551] usb 3-1: device descriptor read/8, error -61 [ 714.212062][ T3551] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 714.402207][ T3551] usb 3-1: device descriptor read/8, error -61 [ 714.532483][ T3551] usb usb3-port1: unable to enumerate USB device 21:32:50 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:50 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:50 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:32:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x118, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x107, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='syz_tun\x00'}, @typed={0xc, 0x3, 0x0, 0x0, @u64}, @generic="50bb2d6f67d2fb3aabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb8100f81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a66f167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d77", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x118}], 0x1}, 0x0) 21:32:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:50 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x24a00, 0x0) 21:32:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:51 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x118, 0x1e8, 0x118, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bb514655acf1a6dc132618ac4080381d19e4df67ea53494f3dcf151b3a10"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 21:32:51 executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) [ 715.362788][T12700] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 715.423899][T12700] 8021q: adding VLAN 0 to HW filter on device bond55 [ 715.902074][ T26] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 716.102053][ T26] usb 3-1: device descriptor read/64, error 18 [ 716.310690][T12717] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 716.372518][ T26] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 716.416953][T12717] 8021q: adding VLAN 0 to HW filter on device bond56 [ 716.612852][ T26] usb 3-1: device descriptor read/64, error 18 [ 716.733553][ T26] usb usb3-port1: attempt power cycle [ 717.142599][ T26] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 717.332291][ T26] usb 3-1: device descriptor read/8, error -61 [ 717.602021][ T26] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 717.792275][ T26] usb 3-1: device descriptor read/8, error -61 [ 717.923307][ T26] usb usb3-port1: unable to enumerate USB device 21:32:53 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:53 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4c, 0x0, 0x0) 21:32:53 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:32:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) 21:32:53 executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(essiv(rfc4106-gcm-aesni,vmac(camellia-asm)))\x00'}, 0x58) 21:32:54 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) 21:32:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 719.006810][T12729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 719.041541][T12729] 8021q: adding VLAN 0 to HW filter on device bond57 [ 719.342159][ T26] usb 3-1: new high-speed USB device number 51 using dummy_hcd 21:32:54 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) [ 719.532017][ T26] usb 3-1: device descriptor read/64, error 18 21:32:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0fc7b60000f30fc77367d8bd00000f7841016526640fc76e270fc75d0066b99b0a00000f3266b9800000c00f326635000400000f3026646526262e0f01c86766c7442400008000006766c744240263de00006766c744240600000000670f011c24", 0x61}], 0x1, 0x0, 0x0, 0x0) [ 719.664657][T12750] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 719.759142][T12750] 8021q: adding VLAN 0 to HW filter on device bond58 [ 719.802651][ T26] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 719.992197][ T26] usb 3-1: device descriptor read/64, error 18 [ 720.112410][ T26] usb usb3-port1: attempt power cycle [ 720.562941][ T26] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 720.788215][ T26] usb 3-1: device descriptor read/8, error -61 [ 721.082027][ T26] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 721.262666][ T26] usb 3-1: device descriptor read/8, error -61 [ 721.382611][ T26] usb usb3-port1: unable to enumerate USB device 21:32:56 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:56 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:56 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1c0, 0xd0, 0x1c0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'geneve0\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x0, 0xbde11a3019e619ea}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 21:32:56 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:32:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 721.976959][T12763] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 722.242585][T12763] 8021q: adding VLAN 0 to HW filter on device bond59 21:32:57 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:32:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:32:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:32:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:32:58 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) [ 722.792537][ T26] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 722.906208][T12783] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 722.955584][T12783] 8021q: adding VLAN 0 to HW filter on device bond60 [ 722.996359][ T26] usb 3-1: device descriptor read/64, error 18 21:32:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 723.282327][ T26] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 723.632454][T12794] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 723.663284][ T26] usb 3-1: device descriptor read/64, error 18 [ 723.703162][T12794] 8021q: adding VLAN 0 to HW filter on device bond61 [ 723.789439][ T26] usb usb3-port1: attempt power cycle [ 724.261972][ T26] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 724.452266][ T26] usb 3-1: device descriptor read/8, error -61 [ 724.742766][ T26] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 724.952335][ T26] usb 3-1: device descriptor read/8, error -61 [ 725.074011][ T26] usb usb3-port1: unable to enumerate USB device 21:33:00 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:00 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 'queue0\x00'}) 21:33:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0x118, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x108, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='syz_tun\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d2fb3aabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb8100f81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a66f167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b", @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x118}], 0x1}, 0x0) 21:33:00 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:00 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) 21:33:00 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 21:33:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 725.695842][T12805] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 725.736139][T12805] 8021q: adding VLAN 0 to HW filter on device bond62 [ 725.894134][ T26] usb 3-1: new high-speed USB device number 59 using dummy_hcd 21:33:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) [ 726.092387][ T26] usb 3-1: device descriptor read/64, error 18 21:33:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x401070ca, 0x0) [ 726.543951][T12819] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 726.597597][T12819] 8021q: adding VLAN 0 to HW filter on device bond63 [ 726.612969][ T26] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 726.822213][ T26] usb 3-1: device descriptor read/64, error 18 [ 726.951591][ T26] usb usb3-port1: attempt power cycle [ 727.382199][ T26] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 727.572363][ T26] usb 3-1: device descriptor read/8, error -61 [ 727.862038][ T26] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 728.072571][ T26] usb 3-1: device descriptor read/8, error -61 [ 728.202402][ T26] usb usb3-port1: unable to enumerate USB device 21:33:03 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:03 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) 21:33:03 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:03 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000001780)=[{0x0, 0x0, 0x6367}, {&(0x7f00000002c0)="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", 0x1df}]) [ 728.697684][T12830] loop5: detected capacity change from 0 to 99 21:33:03 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 728.780440][T12833] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 728.926455][T12833] 8021q: adding VLAN 0 to HW filter on device bond64 21:33:04 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:04 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)="50380b510810a0f9e43a2490321338b88d7b1db34d8ef768cc2bc85d9e40a34480d64e3db47df2407998bac81909063039b4acdbdba3a3a63f6a09a22eb31ed4f6818d27b9375483f81c187cc284c0adeb2b9e865026c5") 21:33:04 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 729.352335][ T3551] usb 3-1: new high-speed USB device number 63 using dummy_hcd 21:33:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 729.574083][ T3551] usb 3-1: device descriptor read/64, error 18 [ 729.761503][T12856] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 729.855548][T12856] 8021q: adding VLAN 0 to HW filter on device bond65 [ 729.859980][ T3551] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 730.091956][ T3551] usb 3-1: device descriptor read/64, error 18 [ 730.212417][ T3551] usb usb3-port1: attempt power cycle [ 730.652043][ T3551] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 730.822301][ T3551] usb 3-1: device descriptor read/8, error -61 [ 731.091982][ T3551] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 731.262272][ T3551] usb 3-1: device descriptor read/8, error -61 [ 731.382610][ T3551] usb usb3-port1: unable to enumerate USB device 21:33:07 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e604"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:07 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:07 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 21:33:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x190, 0x250, 0x190, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'vlan0\x00', 'macvlan0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8000, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @REJECT={0x28}}, {{@ip={@multicast1, @remote, 0x0, 0x0, 'nr0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}}]}, @REJECT={0x28}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth1_to_bond\x00', 'vlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 21:33:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 732.177902][T12863] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:07 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:07 executing program 5: msgsnd(0x0, &(0x7f00000000c0)={0x2}, 0x8, 0x0) [ 732.281154][T12863] 8021q: adding VLAN 0 to HW filter on device bond66 21:33:07 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000093c0), 0x10) 21:33:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 732.562816][ T26] usb 3-1: new high-speed USB device number 67 using dummy_hcd 21:33:07 executing program 4: syz_mount_image$qnx4(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10050, &(0x7f00000016c0)) [ 732.814540][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 732.854727][ T26] usb 3-1: no configurations [ 732.859502][ T26] usb 3-1: can't read configurations, error -22 [ 732.943232][T12883] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 733.052122][T12883] 8021q: adding VLAN 0 to HW filter on device bond67 [ 733.052496][ T26] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 733.303444][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 733.343160][ T26] usb 3-1: no configurations [ 733.348009][ T26] usb 3-1: can't read configurations, error -22 [ 733.363139][ T26] usb usb3-port1: attempt power cycle [ 733.782424][ T26] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 733.882529][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 733.922598][ T26] usb 3-1: no configurations [ 733.927353][ T26] usb 3-1: can't read configurations, error -22 [ 734.092000][ T26] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 734.215536][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 734.252334][ T26] usb 3-1: no configurations [ 734.257084][ T26] usb 3-1: can't read configurations, error -22 [ 734.270579][ T26] usb usb3-port1: unable to enumerate USB device 21:33:10 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e604"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:10 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10100, 0x8000}, [@IFLA_IFALIASn={0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x11, 0x2, '[,:,$&+\\%][,\x00'}]}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x48}}, 0x0) 21:33:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 21:33:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 735.335758][T12899] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. 21:33:10 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) [ 735.404322][T12893] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0x0) 21:33:10 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r0) [ 735.502360][T12893] 8021q: adding VLAN 0 to HW filter on device bond68 21:33:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f99bfbf4c087f70eb4d04fe7ff7fc6e5539b325d098b546a1b5e3894090890e0878f0e1ac6e7040408b4959b409a242a5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07440736cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d8d864056526f889af43a60560a22f1fca567e65d5e8df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7972c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f7e8d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7c80dff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba571eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a54e7e0b9687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b12f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb41014508e5247d33ae6c010035603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe601006b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a4c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) [ 736.033636][ T3551] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 736.085006][T12914] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 736.191911][T12914] 8021q: adding VLAN 0 to HW filter on device bond69 [ 736.283793][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 736.328801][ T3551] usb 3-1: no configurations [ 736.334092][ T3551] usb 3-1: can't read configurations, error -22 [ 736.552359][ T3551] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 736.832142][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 736.876308][ T3551] usb 3-1: no configurations [ 736.876403][ T3551] usb 3-1: can't read configurations, error -22 [ 736.879970][ T3551] usb usb3-port1: attempt power cycle [ 737.562015][ T3551] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 737.672369][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 737.728359][ T3551] usb 3-1: no configurations [ 737.733262][ T3551] usb 3-1: can't read configurations, error -22 [ 737.892192][ T3551] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 737.982208][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 738.022755][ T3551] usb 3-1: no configurations [ 738.027516][ T3551] usb 3-1: can't read configurations, error -22 [ 738.035115][ T3551] usb usb3-port1: unable to enumerate USB device 21:33:13 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e604"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:13 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000040)) 21:33:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1c0, 0x98, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @local, 0x0, 0x0, 'nr0\x00', 'vlan0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0xffffffff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x6572c526, 0x0, 0x0, 0xeb38}}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth1_to_bond\x00', 'vlan0\x00'}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "f804"}}, @common=@set={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 21:33:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:14 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x20, r0, 0x481, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 21:33:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, 0x0, 0x0) [ 738.894470][T12929] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 738.957392][T12929] 8021q: adding VLAN 0 to HW filter on device bond70 21:33:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000400)=0x101, 0x4) [ 739.493682][ T3551] usb 3-1: new high-speed USB device number 75 using dummy_hcd 21:33:14 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="769c5a3a781c3e897f5990f1b5334510a2c3ba2f93db8ff3cb6697bbfb754f6718be67dd0c801fffffd076120175d91f1eaaa249a50bff2919bd09ea2398aec22d4820d272fcbb6b3ae862bba2b6674a6a5fae9f0e2aeb6d81c112cce58fc825c7bd6748a05ab8204e80f0449a22a22cb6144c5b333ee692cb09555926b08a9f35e6ee378a", 0x85, 0x1}]) syz_read_part_table(0x4, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="5d229baf6bd2c2aa5f1c69b0245822bcdbc48698302927edd3e72eebf1c233a3ad11a09f561d9a8ac5962726d90442189b4b5cd4f7", 0x35, 0x8}, {&(0x7f00000008c0)="2708743d77be919602875d5c22889f2adf5a6aaf6d3335ed2849b080ea3b8a56c11340495071be0a998ddaef6012b95c069d3951e7bc1fb7f95b9c3305e5d068c8", 0x41, 0x9c2}]) [ 739.662986][T12942] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 739.730850][T12942] 8021q: adding VLAN 0 to HW filter on device bond71 [ 739.762545][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 739.803773][ T3551] usb 3-1: no configurations [ 739.803860][ T3551] usb 3-1: can't read configurations, error -22 [ 739.952242][ T3551] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 740.192078][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 740.235031][ T3551] usb 3-1: no configurations [ 740.241488][ T3551] usb 3-1: can't read configurations, error -22 [ 740.254568][ T3551] usb usb3-port1: attempt power cycle [ 740.672035][ T3551] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 740.762470][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 740.803261][ T3551] usb 3-1: no configurations [ 740.808095][ T3551] usb 3-1: can't read configurations, error -22 [ 740.961933][ T3551] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 741.052668][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 741.092516][ T3551] usb 3-1: no configurations [ 741.097215][ T3551] usb 3-1: can't read configurations, error -22 [ 741.111573][ T3551] usb usb3-port1: unable to enumerate USB device 21:33:17 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f0101"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:17 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:33:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 742.125076][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 742.227833][T12963] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 742.352311][T12963] 8021q: adding VLAN 0 to HW filter on device bond72 21:33:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:17 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f99bfbf4c087f70eb4d04fe7ff7fc6e5539b325d098b546a1b5e3894090890e0878f0e1ac6e7040408b4959b409a242a5b67f3988f7ef319520100ffe8d178708c523c921b1b5d50070d07440736cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d8d864056526f889af43a60560a22f1fca567e65d5e8df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7972c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f7e8d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7c80dff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba571eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a54e7e0b9687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b12f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb41014508e5247d33ae6c010035603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe601006b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a4c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 21:33:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 742.692184][ T123] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 742.812428][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 21:33:17 executing program 5: fsopen(&(0x7f0000000000)='configfs\x00', 0x0) [ 742.962572][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 743.002743][ T123] usb 3-1: no configurations [ 743.007531][ T123] usb 3-1: can't read configurations, error -22 [ 743.048922][T12980] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 743.202465][ T123] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 743.301100][T12980] 8021q: adding VLAN 0 to HW filter on device bond73 [ 743.452252][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 743.492885][ T123] usb 3-1: no configurations [ 743.497654][ T123] usb 3-1: can't read configurations, error -22 [ 743.506377][ T123] usb usb3-port1: attempt power cycle [ 743.931983][ T123] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 744.052598][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 744.092220][ T123] usb 3-1: no configurations [ 744.096973][ T123] usb 3-1: can't read configurations, error -22 [ 744.253734][ T123] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 744.353091][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 744.405146][ T123] usb 3-1: no configurations [ 744.409906][ T123] usb 3-1: can't read configurations, error -22 [ 744.417909][ T123] usb usb3-port1: unable to enumerate USB device 21:33:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f0101"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:20 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:20 executing program 5: r0 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='async\x00', 0x0, 0x0) 21:33:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 745.498610][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.564325][T12993] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:20 executing program 5: syslog(0x4, &(0x7f0000000080)=""/225, 0xe1) [ 745.668832][T12993] 8021q: adding VLAN 0 to HW filter on device bond74 21:33:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 746.043347][ T3551] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 746.199613][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 746.282192][ T3551] usb 3-1: Using ep0 maxpacket: 32 21:33:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) [ 746.324593][ T3551] usb 3-1: no configurations [ 746.329435][ T3551] usb 3-1: can't read configurations, error -22 21:33:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 746.552757][ T3551] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 746.794991][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 746.835864][ T3551] usb 3-1: no configurations [ 746.840647][ T3551] usb 3-1: can't read configurations, error -22 [ 746.876242][T13012] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 746.889763][ T3551] usb usb3-port1: attempt power cycle [ 746.990350][T13012] 8021q: adding VLAN 0 to HW filter on device bond75 [ 747.311953][ T3551] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 747.402623][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 747.442776][ T3551] usb 3-1: no configurations [ 747.447552][ T3551] usb 3-1: can't read configurations, error -22 [ 747.601998][ T3551] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 747.692670][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 747.737508][ T3551] usb 3-1: no configurations [ 747.742414][ T3551] usb 3-1: can't read configurations, error -22 [ 747.751281][ T3551] usb usb3-port1: unable to enumerate USB device 21:33:23 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f0101"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:23 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:23 executing program 5: syslog(0x4, &(0x7f0000000080)=""/225, 0xe1) 21:33:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 21:33:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 748.870324][T13023] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:24 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:24 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='posixacl\x00', 0x0, 0x0) 21:33:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 748.982164][T13023] 8021q: adding VLAN 0 to HW filter on device bond76 21:33:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 21:33:24 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:24 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 749.392409][ T3551] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 749.632629][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 749.677097][ T3551] usb 3-1: no configurations [ 749.681973][ T3551] usb 3-1: can't read configurations, error -22 [ 749.902827][ T3551] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 750.152030][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 750.202580][ T3551] usb 3-1: no configurations [ 750.207344][ T3551] usb 3-1: can't read configurations, error -22 [ 750.215587][ T3551] usb usb3-port1: attempt power cycle [ 750.642080][ T3551] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 750.742347][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 750.782381][ T3551] usb 3-1: no configurations [ 750.782471][ T3551] usb 3-1: can't read configurations, error -22 [ 750.931982][ T3551] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 751.040350][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 751.082420][ T3551] usb 3-1: no configurations [ 751.087157][ T3551] usb 3-1: can't read configurations, error -22 [ 751.103128][ T3551] usb usb3-port1: unable to enumerate USB device 21:33:27 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f0101020301"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 21:33:27 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:27 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) [ 752.090047][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 752.177118][T13043] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:27 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 752.276393][T13043] 8021q: adding VLAN 0 to HW filter on device bond77 21:33:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c}, 0x1c}}, 0x0) 21:33:27 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 21:33:27 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 752.703263][ T123] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 752.957673][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 753.054592][T13067] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 753.125935][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 753.134690][ T123] usb 3-1: can't read configurations, error -61 [ 753.159152][T13067] 8021q: adding VLAN 0 to HW filter on device bond78 [ 753.317549][ T123] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 753.562077][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 753.732337][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 753.740091][ T123] usb 3-1: can't read configurations, error -61 [ 753.747655][ T123] usb usb3-port1: attempt power cycle [ 754.162011][ T123] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 754.252212][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 754.412078][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 754.419801][ T123] usb 3-1: can't read configurations, error -61 [ 754.582084][ T123] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 754.682106][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 754.842203][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 754.849995][ T123] usb 3-1: can't read configurations, error -61 [ 754.857083][ T123] usb usb3-port1: unable to enumerate USB device 21:33:30 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f0101020301"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:30 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x8, 0x0) 21:33:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 21:33:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000480)="36814ce23635cfdb066b4c5cc2156d8ff7f551f1004d56b461d22b69ce5513f48f403a5212ade1d6094ab32e315d512fe9cff504a69b78adb908c3b37d7812f9d4a5862914062db4cb6e5d77f3b2b81b9adf774e70654bd5a06fc315e8a00d2ccd2aa96c3a4c83af6b1371fdd1d46805bd26722de6ac8b3391c812621dff588be2cee2cf002b0df285ccf1a6bed539e24cfd49fef29bf73af99db94bfb36ac210a809b7904acfe398ca7a78f7f6d89491203f3cade2842831c25a5d534376eed33a1765770e6601785e2cfaf05e016b3ba3e7647fa4222cd1a20e1a7d5b64b3e322637e2f6dbe31b8db911f8fb24609a4fcfa383f706bd040a03b288126f0567c80a84da731a9e714c406728609947528dc70de938aabecd17141b837f6aa10b5b4d151747c7a09eff37bc0909c609a08cd39ee72661cbf0498b26d019009d910478ed95d578dfabe5d62d7b003c06a505b0c46e8953627ab3d43a2aab5b7577120ada802acdffc3470e49b12d12124c98", 0x171, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 21:33:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:30 executing program 5: syz_emit_ethernet(0x82, &(0x7f00000011c0)={@random="1b02d5d52884", @random="69bd1ecffdc9", @val, {@ipv4}}, 0x0) [ 755.445698][T13073] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 755.531549][T13073] 8021q: adding VLAN 0 to HW filter on device bond79 21:33:30 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2011, r0, 0x0) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) 21:33:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 21:33:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 755.882075][ T123] usb 3-1: new high-speed USB device number 95 using dummy_hcd 21:33:31 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x48, 0x0, 0x5c}, 0x0) [ 756.133349][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 756.225983][T13093] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 756.305390][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 756.313808][ T123] usb 3-1: can't read configurations, error -61 [ 756.352682][T13093] 8021q: adding VLAN 0 to HW filter on device bond80 [ 756.544170][ T123] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 756.802010][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 756.992209][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 757.000074][ T123] usb 3-1: can't read configurations, error -61 [ 757.011918][ T123] usb usb3-port1: attempt power cycle [ 757.452058][ T123] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 757.572268][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 757.742782][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 757.750557][ T123] usb 3-1: can't read configurations, error -61 [ 757.921957][ T123] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 758.012224][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 758.212287][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 758.220042][ T123] usb 3-1: can't read configurations, error -61 [ 758.227670][ T123] usb usb3-port1: unable to enumerate USB device 21:33:33 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f0101020301"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 21:33:33 executing program 1: open$dir(&(0x7f0000000a80)='./file0\x00', 0x8300, 0x0) rename(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 21:33:33 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000940)=""/4096, 0x26, 0x1000, 0x1}, 0x20) close(r0) 21:33:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:33:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f00000009c0)=""/191, 0x8}) 21:33:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 758.815598][T13105] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 758.918920][T13105] 8021q: adding VLAN 0 to HW filter on device bond81 21:33:34 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x4}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x64010100, @dev}, {{0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, "671cf3", 0x0, "4a23fd"}}}}}}, 0x0) 21:33:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) [ 759.222367][ T3549] usb 3-1: new high-speed USB device number 99 using dummy_hcd 21:33:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r3, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf}]}, 0x34}}, 0x0) [ 759.323376][T13119] dccp_invalid_packet: P.CsCov 6 exceeds packet length 16 [ 759.462784][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 759.596994][T13121] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 759.652600][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 759.660394][ T3549] usb 3-1: can't read configurations, error -61 [ 759.739291][T13121] 8021q: adding VLAN 0 to HW filter on device bond82 [ 759.842440][ T3549] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 760.091960][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 760.262273][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 760.270039][ T3549] usb 3-1: can't read configurations, error -61 [ 760.281986][ T3549] usb usb3-port1: attempt power cycle [ 760.719480][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.722059][ T3549] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 760.726061][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.822833][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 760.982190][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 760.989965][ T3549] usb 3-1: can't read configurations, error -61 [ 761.142663][ T3549] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 761.232177][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 761.402199][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 761.410050][ T3549] usb 3-1: can't read configurations, error -61 [ 761.417131][ T3549] usb usb3-port1: unable to enumerate USB device 21:33:36 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f010102030109"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 21:33:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000040)={0x3, @default, 0xee00}) 21:33:36 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) flock(r0, 0x0) 21:33:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:33:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 21:33:37 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) [ 762.139624][T13135] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) 21:33:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 762.274567][T13135] 8021q: adding VLAN 0 to HW filter on device bond83 21:33:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10}, 0x10) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000200", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000001c0)={r2}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x903, &(0x7f0000000280)={r3}, 0x8) 21:33:37 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 762.491974][ T123] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 762.732724][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 762.913655][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 762.921532][ T123] usb 3-1: can't read configurations, error -61 [ 762.945431][T13151] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 763.012218][T13151] 8021q: adding VLAN 0 to HW filter on device bond84 [ 763.122085][ T123] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 763.392059][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 763.572242][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 763.580009][ T123] usb 3-1: can't read configurations, error -61 [ 763.588126][ T123] usb usb3-port1: attempt power cycle [ 764.002914][ T123] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 764.115779][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 764.292232][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 764.300093][ T123] usb 3-1: can't read configurations, error -61 [ 764.461975][ T123] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 764.552705][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 764.737444][ T123] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 764.745338][ T123] usb 3-1: can't read configurations, error -61 [ 764.762379][ T123] usb usb3-port1: unable to enumerate USB device 21:33:40 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f010102030109"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:40 executing program 5: madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8) pipe2(&(0x7f0000000000), 0x0) 21:33:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:33:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)='l', 0x1, 0x2b901447dbb173f5, &(0x7f0000000080)={0x10, 0x2}, 0x10) 21:33:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 765.335638][T13160] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:40 executing program 5: pipe2(0x0, 0x0) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x10000000, 0x0) 21:33:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:33:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002d80)="153d0a598e2d7480f395831d15fc279d7c93b748cbac2b9c249eaa52470cb6b30e856cf77306adc7746d4b5dd2ad8866c648caa423fb288e83e6c2039faa6ceeb1b4e0bc5174b418eadc1dcceb17f63ab1681097836ad797577d75843662b8c3dde1b504e204e2901cb7b7af830dd6c77b18fb05df02115f3d40a0e1b458070ae30298f4e80ec86e34f682567fc67273fe2f7f03e046001668d28dda8f3a6e9255dff0e58e0c6f289d1ef280a05954496f2e8c3ba02017859ffa03f6d0b3f50f7f1a3cc5d90071a09e1faa52d606765e9af2d86bc4f33b11d8a12caa25589e336fe7d2b5315d5fbedeb55091f28d4a016f1f07d6", 0xf4}, {&(0x7f0000002e80)="d4bd57a9529f7c0df902e4603b4ecb0a44f265cc1ee7e103792859cfbd434e3d66b2b5778d5194d4733464df9f3c2169e91daa1d7eb9c27336419daa4d0eb50279e379945902d6b2cc7f2a02eb9c57429eb4b4b2342121168c2177056a3843d972355dde2300693ba39c647238b957e04151063d60f3e62e112508696616e753e8195d4423109a0d7cb20b13ca594cf0a6d27d05f16c4724f895aba754533560403a4bbf42bcd558", 0xa8}, {&(0x7f0000002f40)="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", 0xce5}], 0x3, &(0x7f0000004780)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) [ 765.469339][T13160] 8021q: adding VLAN 0 to HW filter on device bond85 21:33:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 765.833949][ T3549] usb 3-1: new high-speed USB device number 107 using dummy_hcd 21:33:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0000fefffcffffff18260000", @ANYRES32, @ANYBLOB='\x00 '], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:33:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 766.082504][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 766.252133][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 766.260079][ T3549] usb 3-1: can't read configurations, error -61 [ 766.295260][T13181] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 766.371785][T13181] 8021q: adding VLAN 0 to HW filter on device bond86 [ 766.482281][ T3549] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 766.732047][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 766.923464][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 766.931251][ T3549] usb 3-1: can't read configurations, error -61 [ 766.940247][ T3549] usb usb3-port1: attempt power cycle [ 767.372163][ T3549] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 767.482934][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 767.662146][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 767.670012][ T3549] usb 3-1: can't read configurations, error -61 [ 767.842336][ T3549] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 767.944985][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 768.122190][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 768.129976][ T3549] usb 3-1: can't read configurations, error -61 [ 768.138179][ T3549] usb usb3-port1: unable to enumerate USB device 21:33:43 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f010102030109"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:33:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x0, 0x0, 0x35}, 0x48) 21:33:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1}) ioctl$TUNGETDEVNETNS(r0, 0x400454cd, 0x6) 21:33:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) [ 768.687932][T13186] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9}, 0x48) [ 768.816862][T13186] 8021q: adding VLAN 0 to HW filter on device bond87 21:33:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40049409, &(0x7f0000000140)={'veth0_macvtap\x00'}) 21:33:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) 21:33:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) [ 769.312940][ T3549] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 769.496076][T13208] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 769.592528][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 769.631096][T13208] 8021q: adding VLAN 0 to HW filter on device bond88 [ 769.776045][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 769.784181][ T3549] usb 3-1: can't read configurations, error -61 [ 769.992383][ T3549] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 770.253940][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 770.452547][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 770.460330][ T3549] usb 3-1: can't read configurations, error -61 [ 770.478118][ T3549] usb usb3-port1: attempt power cycle [ 770.912676][ T3549] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 771.002276][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 771.162124][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 771.169982][ T3549] usb 3-1: can't read configurations, error -61 [ 771.353105][ T3549] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 771.452978][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 771.652235][ T3549] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 771.660117][ T3549] usb 3-1: can't read configurations, error -61 [ 771.668003][ T3549] usb usb3-port1: unable to enumerate USB device 21:33:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002d80)="153d0a598e2d7480f395831d15fc279d7c93b748cbac2b9c249eaa52470cb6b30e856cf77306adc7746d4b5dd2ad8866c648caa423fb288e83e6c2039faa6ceeb1b4e0bc5174b418eadc1dcceb17f63ab1681097836ad797577d75843662b8c3dde1b504e204e2901cb7b7af830dd6c77b18fb05df02115f3d40a0e1b458070ae30298f4e80ec86e34f682567fc67273fe2f7f03e046001668d28dda8f3a6e9255dff0e58e0c6f289d1ef280a05954496f2e8c3ba02017859ffa03f6d0b3f50f7f1a3cc5d90071a09e1faa52d606765e9af2d86bc4f33b11d8a12caa25589e336fe7d2b5315d5fbedeb55091f28d4a016f1f07d6", 0xf4}, {&(0x7f0000002e80)="d4bd57a9529f7c0df902e4603b4ecb0a44f265cc1ee7e103792859cfbd434e3d66b2b5778d5194d4733464df9f3c2169e91daa1d7eb9c27336419daa4d0eb50279e379945902d6b2cc7f2a02eb9c57429eb4b4b2342121168c2177056a3843d972355dde2300693ba39c647238b957e04151063d60f3e62e112508696616e753e8195d4423109a0d7cb20b13ca594cf0a6d27d05f16c4724f895aba754533560403a4bbf42bcd558", 0xa8}, {&(0x7f0000002f40)="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", 0xe64}, {0x0}, {&(0x7f0000004040)="93", 0x1}], 0x5, &(0x7f0000004780)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) 21:33:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b650000850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r1, 0x0, 0xda00) 21:33:46 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x2, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r3, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r4, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r0, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x0) [ 772.109479][T13227] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="d751a8c51c11d21b85d0f23afcffffffffffff2bc9d00082000000"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'dummy0\x00'}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000100)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 21:33:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b650000850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r1, 0x0, 0xda00) [ 772.244349][T13227] 8021q: adding VLAN 0 to HW filter on device bond89 21:33:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 21:33:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b650000850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r1, 0x0, 0xda00) [ 772.622031][ T3549] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 772.760454][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 772.872285][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 772.946839][T13250] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 772.979723][T13250] bond90 (uninitialized): Released all slaves [ 773.003023][ T3549] usb 3-1: config 0 has no interfaces? [ 773.193286][ T3549] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 773.202821][ T3549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.210989][ T3549] usb 3-1: Product: syz [ 773.215435][ T3549] usb 3-1: Manufacturer: syz [ 773.220178][ T3549] usb 3-1: SerialNumber: syz [ 773.236190][ T3549] usb 3-1: config 0 descriptor?? [ 773.505831][ T3549] usb 3-1: USB disconnect, device number 115 21:33:49 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000140)={'veth0_macvtap\x00'}) 21:33:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private}}}, 0xb8}}, 0x0) 21:33:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:49 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b650000850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r1, 0x0, 0xda00) [ 774.127840][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 774.268266][T13268] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:49 executing program 1: syz_clone(0x28020000, &(0x7f00000000c0)="9b", 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 21:33:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private}}}, 0xb8}}, 0x0) [ 774.363756][T13268] bond90 (uninitialized): Released all slaves 21:33:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:49 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f0000000080)=@id, 0x10, &(0x7f0000001700)=[{&(0x7f0000001840)="70329ef3a91993c9a4384fae03bf6d05b03eb1ff3592e3f4e608da6c7443d1f4571d922fc5fc66649d66117f66761c26c4c0c34f357837a99675bfb7ae476144cec7b3220d405ee3d13f856c1124643d05789b87f731e866c2caa34b7a02f63861da4acfa9a5b38d74920b44e8665ea884f8b100e6597e59b1a40df58e4aa7bb9046f1d631a7290cf764db0b6507f217402ab70c93ea79945bae3bff3011e7f1bd11d3e830343e19fd353347c5280be53756", 0xb2}, {&(0x7f0000000180)="f05f0e8f18a2aa87611d336d7db4a7321f59f60a91ac352e61c9cc7c57e457a0879b8125017f2ac5827a234c57bd1333189bcdf99e7470493b2a2143ed35b53fe70ae31f31500000177c41ca25db32c00c9bde4bff15d56b983ca7ba852a02a1161840fc2d01f3434178a61b590dfb2dbbeb45c3ea4609ce089ed079deb4927d6cd7bb82faaa28a5927c6dd97848cda6", 0x98}, {&(0x7f0000000340)="8ee53119c19af35ebe8ece83e72e54ddd8a1fc07df42e0e7ad207664a81ecf7f6135f546349f3278486ab57b5334ed3fba8b79514e409e077716a36928cd6bce4dc65e99ef5ea704433f234b8249eb70b7fb9ba9bb481035493d62e93448294f1f03103294e82dae7fbc4c76e07a8afae5c8a14605ebdb0e86c08e7aaf107d0b5f39c9e294632228278a3d857357a2911d99a6801e63c5389fed2860f18d8248a2d7b79d1f486c91", 0xa8}, {&(0x7f0000000480)="d8d364a06a8ae74b593020be7c5ec72f39dda363a94a0ed1182f0edf38d8f3379dd55ce7bb352d31996c78cc0945f483902a474c39e470492b03ee75c402a676539370366814c753b3f06d30bf8ca5d9ceae899de041f707dad6b6225d474f13e755038e61e8248e340d2fda2a494d413fb58521fdf66b6aa0402ef0e4a71b2527a3591e0412452adc4f0f0ba6bc195f0c99e664b33b21ef16b75fc0057e933c672aeb1ca147856ff50eae16554ba483f113356cf9b116df6de841b42159ad7b6862d0cf2081076ad2fc3833a7b076f4ae502b4934a0995615d9112fc475e569137360116365dd927a87a158b072ce45cecb642ed43847a69ee4f96e2b3f9204698aa99916321c6b124c5b489da35874c5e9a74cd19fc801498f636883a469ac67901374ef9ba91c6030d1b86699f527a51a890419db8e233b2b14adfb6a0fc000e80fb5ecc17fd46e2c83183a477dcac28dd3e04fc1f26a4560f644178de4fc96e2e2a139ae3b9611bef5898c2309678f291f296994a9312a2d682ff000b5e67de66f0a4c00988283e03d5bf1d7db5c9ecebeb22bff4000152113f952af8a21fddc12c51846b98dc6d13a596a2d2325b9ca3e93ab86789e318f010dd4e31a286b206713459aad1ebfafc9296242d012238731503156764e9f712eb07c1265f248e33e6b03bf1aeaa4567818a7da184f91e1de2f5f29c47782d92ea59cf0951ac817b7d5e6cfd4f062e6f52eb869a27c39b1b3f8b81a424efffa7909c759f0ce553f74a23299410f07346b72ee4433e45b780d1fd328648cb0c453f9dff0d77b9afdbd1b21b3810e429ef04c4de8926fb28d6a5757c3781cf3b7981489be4f559e262d3e6a370d4b9b651f73a2debd1eda39458cec487f53c51f9d2e61805ba73cec10da5e96c5429ea2fa7275e4844611c533a9efbd49c3857256015e984d2ef00e0427c6f353f3f18352d386f78959d0867af3060f4d93647cf498a1ba410b7bbc58a07cd015adab606a2c57222559ddf041650ab0054e5eeea0add07d68f7b67ca535627680529dae7dd46c9571728b2f47f1a725ae30a203167d963a17807a7dfd8076e499b98531f083f14074872dfe84b186fcaf41d9a49a178865e40ade0981d479c084154a372e20b93d4e9f1f8088a942ccf056e918642fe8d4ae4657bc897184b1bbdf13521c046cad36a546ff2b9154685a1ff33b0d1b8cdfedfcf95b27818a732f8a694eff36b8e232153f4573fede333956dbfecda3170c8b24aeedad35279564df8496d704c857a700c1c6f02ab6edba016db250f5dc84a5842e207a206a6e91b8ef088a9048dc6210bbc4ee54e8b95d9853e8c769606af41f3cb328b3a242a55e51590681bbaa22d0349ae6c13525023fdb14905a2c0c09a2404dfb8e65a232892f9b499184abda06c6742ed135a2779674b0a8cf84f7b76e4f9ef45f3760b37502dd5d81abba60d04ab810a906ef82ca49873ec5670b68dfa79511c94c331b6ef1a2cdfc59587707911059b22af00f248678e7aa331f2f96825dec8c685cb694ac61300b090123402736ebe99b48283eb841f7b9f401c8ffbdfed412602859bd06e86ac5842e5c27adad53e09bccc22e85e258c68fa9b18854b3e7a6981f42408a4671bce74bf1e79cbc0c815e8c2215a3d790b6f49fd241fd7ee112dd38fcfc9f5dff9ede6ff357129977d2e3e28b846f881d144e97310037e902598cf505f9fe735b6a481e88ce58823f15fb21966a7def87680116515ebd44754558fa67a0e2d586053fb0531a6873f7eb4bae65b8fb859da829d2daca15ca9cf5c488966919c6832ec60d5187f5c991fb6f84f417f2f775fe3cecc5db8da2588c791c9d2e2bb3b395e88c6546d0e9fa1b7a51817a5c91509d7ac1502e843645bc29ab43acd2034d5440a491bac5ca4e93b1178d5998c3dec74620819dbd25b662cd3402ad6fa9c5e9f96889f6fd41af5b0f106a3361a0fff22b68383a312e81cda120e10c65b4031204dd48d008dd5c2a7288762c58ee765a90969148a3262e9132196b3567c0dbfc642b441941290f357b3858ef38ad798b7ecc6becb23a1a0246136df5d36fbfd6f681ad7146aae8e08cc54ce0f7cc167377d34237bb06b766ab60011a0155f34fbfa8161325ae6e2c3212fcd55332cb6389e535813ae393615adc6655c18615e5848ce3968e041f84ae2220ea52e12fe498ba2c8d3b1e7d333d14e34671f97830a95ebdfa7673648db17b5b7843bb0ee0a1f12fa594cc775fbeaddbb016a623d44954c816a3b2077a5ea141b75d7bd3d14cf712e059b92a86f3658d9036f5458982a6f1cb55cdcebd5250fe4b34ad6e2cf56248308b0f0afb8e2a7f5bd52e9d594ba36fca4a8ae1abbeb04468854d5e36313474ca2df46ac587291c238d89fa7f5bb3d6b97e8f0fc9d95a5824775f7acffe2d2a0118153b705ed4f55ed8a273fdbadaf31899061ab6ce0841f2d72c354e7fa70901252e518000cf05d6276988fdbe68badff3c88715f2cd75a5f2910ce8ef91ea149106c04c642e0f9c3252d1aad27c3c481bb2b67744e661d6dede9a647db68d1a7f915dab7ab41b1f5dae4c77022089850f7a337955d47f6135f9617946fabd7a3fecb8bc88191b3d4ecac04e91f50c98198bb7c20e2465d736b34f4da7241edde13fa8cc03f40b5b7ee1a999de9d7f08aaebb4990be77c8088abf3817647827e6eae5a48d9ef7e29fee84257b95aa91819852b844d10a4dbec26cc171a9cd1f30190470b57015d176bd2a29fdbc2ef39957c881cdd1583b4e66c5140a0dc5193df35f2dcfddb07c7cd3d49733887232843c7704b80c80756ffd7959e66f31424471ad4bbd6b015a7a6db3e3a2cc77812df8259c40876fc5ec59dc3199450b15e052159b92f5e03dd66ce8d701333ab2b3ea03c3c84bc1e4749acde4f763e69ef8235b4fc8ab2db35459db591e62a27d4c56772ea70c79413eb7321c34b4557448bc7e1ded956ee80b6294920225d0de229ae18ebcf84ee6e701a2d4933c677467badec119f7479265d4c99d4d98abaade100c457ee23df5e3dadc641540b2bba26271ff2aeee2eed7900dc9cdf3341f9f1d23c0cc33568c2e40dc8e448e8003de491e5e93129c1ba820ffb166be3b274a6090ba6ad99b9ba923fa4ee96eea348f3bf027b816aa5b9aa2cf6d3e791a8a761aef3442dfb263c743c693ed680b8ae374dc3ff75ff24dd859c31e142d6bd5faf29c6926b1b189bf505126f6ea192a5074947e0ed259989e8c01c1ecd6a0a30ed15eb331487827a3de09e8c9e3d35c3417a109b107a1af6e9bda99929695602f59dec8305cca4b3617bec3439ef2c4d0216e872b9769ebb7d7371e02c05244b0d12dcd4ab4ffbe111c21138b20d729fe9eafa7d1ade2121c141c4ffc5700f92f9312431f7004a5805f8b0178a67a53a3e3fac3e0b0a433c0c8925c962dd903a345aa074c62d5063e6da7a23979dad81e6aa8ec525df73b68ca45b59d9548019c89b54f30e9700f76ed25ca23a8ac094b34fd50e9bb8f4379c3bd8828b15f64e33a8580d63fdea2d659dad6c1b6a101655bcf6cc34ac252525b79323997f99d23463d211101adb100352b44b7d13cabfeff6341d94c833846d97a4ed325edb27218f6525f571da80f63901bdfb1efee965dff2e80f1b4e50b78654d613c165788bb2c5916418d019ce7f5c108c3e8d9e1dc959c2341a734b8f9fb519fbb1020ccf5bdbf0e9b5d46358408d0530dd632a6d67cc0b32af2d62af9f33246c5d38b03f26267f3938256acd9f903b3d2f5f91c8ae2eafe3d2368ff5ba899742b23b6aa2b0291c06a01e2eaf2d4d700eba221b0115387acbb5ad078d30fa9c80a57fd62ffe955d4a144ee3d1b9ee8e20509bfcc6b5adf36887be5d4407a6362df537a29577a7c4327a1632e5637d2d8db6cf1d75529b06fc91eb632e413a8da05d6401e891c8ba029c6e0933ed9bdc0b99bc7d63194d043ad2d55e20ff68202e308771c8fa9ce1b64e83c5c312853bdcd6a6cee6240be78f9a2a84aced0de84fa3c5609758241fe43658c38c21c42a57cb709dc64eb23b9188f656b6ff609ee64a9e3cc7e45cc5de4db56851a10f24ba8e560955173bc916823fbc24755f5a703a0d5140589ae092b52a6a424d2bd162a1207a2b50c137f9532e0f287738baa49431552fb432337b8886970ae1efc3866e003e818a23e292a45b9ba2200e79763306302edee9e4cac797bfca9e68ada9f34469c0297cb03c6b350f2596b9b4ff2fe3952eebe6a4f4b3dfc355f51e319dd22f76e241b6b2cf75b623bc0b2ce00b1ef1047716c762344cf5d23ea965d12b4dde4aac7756ee997553faae8e4775308cb38419b70d5b9b3aca43307da1a3abefc43bc09e09379aab8620019c941150d224da773f326ee47ac890215a5a28535fba1b1c8e2558cb095c7d7a20445eaaf09ea400985fc2556d99faa86a4bdeb1b0098e33fb01f08e11d22300f68f428295b57899bb3c313af00336f525335b786f2472313241aafce105e2f096243f93c719ab2cf0e2254fca6dfc8e8488c5f932334f1f8877664defd41537c0fbeb74897bcf995c7b0c986608b4dc2f263e56da5e7397fbe91c93f729465ffdc3d40ae2a4848fe7a9b5e861d603afb6d1f7e35ec1ab445c9aca772b43d57edf8c60e4d93cd1260b5dbc53eda36651097c3b9b2d3af319b0919217e25382023846e576aa240d4942d5a002e75924b49c1d67c6cc88793ac6ab76e359970e4ad6b3ce98e39259b367623bb1b1de6c837fca22c71ff09a2c12462e00d0def7d25be8fa85b761a2ace44828f53a138f6b16fc50f7666d01be4e9c99952acbb9f9118b7a0e3921d289cfddb83e11d7963585316b1829649b9ca4a2cbcc6574b023030e82fe3ecfbccb565225e055a49203b5c17b0b0365dffade2b73ad462024fcef226e0f976efa337b4d55b4035825b646e5b579cb92d0e6d525918fd8232c2a3b899679642c9fcc32dc7cd1bd626b948bcf25762b5ccfd5501ea2091770fe7be870758b14b3f05f768f1653fdc24eb76da213cfe417be5c4aeef060ae8845875f82f36fa15d69d103955c59afa11d216ae6f0d8bb14e537c5f2110c38f77eba6d501c97a961b665216ba029c21ded03690851a1c759749a691a32b068d49a77af60d541b92368b1f3747a7bf6a21ca0372d134864010d1a03d3e29d4834c11eb28c2ddcaaeb87b9cca937d45f6dfb379ab4366ad275e27092077864c432d933ca97813e3d03dcdbcf13874595f5960a7e2b61e2b859eb4af1ae1e2f3cd31fb248136b6ba9a865785aa181e04640c98e47cdd41f1925a2f6356cdb678627581c4688674b2e442b8c22076082920e19515e9701059dd65dd20ddcd85dd79f5302b8cb63ed8fd789c0b7756e6c7613fe8203ad69a8bf64d278d6dddd052812fa0eb259169c4ab3b11bd756865768636474ad9dd9cdcd14f564bb20295382f5011be43ff0d27c3fa3cce07ada72e23ca6348c64347b5854a612ffebe3cb6c979bcc8fcaec2add99807ff8266d1f53ce26a3f4ebfb037bad3d1943858c5ccf79a455e61da4be6d714a4fefa4d5caf76de85e3b1a52fa6424254e65428c916b6eb8d2eb694c19fc2c2849d3cdb8294230b558fded5fa12ed72fef21fd1357238cc8f2f378b119435b05d09319a45842cb3e35af990bd2d9aa67b414f436abac003adb1ac1db0e40ebae71d4edaaed3f1d5cde4db1a190afcae0d02feed3c5f743321c5fe0953fd559a2b32432bd2e0269a309c434d667526fd1", 0x1000}, {&(0x7f00000000c0)="23b48d9a10eea572bd0017b9974dc62c91e05e4ec941f367d2e22e1b9a864169e55e7a958ea0fd44173df9", 0x2b}, {&(0x7f0000000100)="4038f1e7b5ee8a8ceb0ab51c2f4c157fc04f6bfae30a91ef5105f3eb8283f1e3e0b74e00000000", 0x27}, {&(0x7f0000001480)="99d0429cf5ca6ee9871ca799558526e75a9c61e47f41ae9fdf3bfeec9a0f3bd6f65fd253a8104201b10ec1752856af58b1fc5b1b8946b9056c4fae597121da3c0a147371c69264057d21fedca865b9d32e18c5968923649c780af9402dff1f06c1161a517609a375b7ed8d04eaf1c1dd75b5be6164345d4cc89619a837d58f502bae83225b40784c526f1f18502775ceefde938ca5afe3b63468bb8d4eb048c1c34e", 0xfffffffffffffdf0}, {&(0x7f0000001540)="94624262f901211cec1d309f7f0fb7e82b096d0b6af5572957bb7a91d626b9b0ccb9a1931807b66a0fca5bb201265aa8bc8da1eb786d94e6ec37ff49b414573fee041995c88709f143574ef745f4b90ccc6959effa05e263bb3c0eaaafad01c28afa7f1c67f388c90061863ee484f3b7cd21f440ef800c0d0323ffb428b156493a61d7f2613100087f4f2ca9739f7520898a1d74934a67aab4bae3d40a51022d89329dd0", 0xa4}, {&(0x7f0000001600)="2601ecc767e8adf3f1bfb8d125d1ef24809c50b4d6aac503afcca9f0f947839e95131cc4c52e8765a165ae793fae5a7562260c14d7dadae4afc977eadd3404d17a233edc6a28daac6c2f", 0x4a}, {&(0x7f0000001680)="94a0d5714e14d4701eb6c37bc7adf70e58f483804128f9da06aa9e9137ae079ba4c54056cb852802792a776cfc204018b76a2f3244189788d1c1d42a84ba648fd2356495b7c16beb62cb072ad7ab6166e3bb9fb046cdcd3f1e0eb70b6321c14797322b12b5772eb549b5c521f8f78c0d7d9515d0092d", 0x76}], 0xa, &(0x7f0000000240)="444f88b78b607ab6bdcabd6835686d001e7af9370653bb840eac0b473a3dae95927e8a7253bfa850bc8cf48a0448d9bfb4690b0b0e0f577401f54fb6ab2c0253051ecf9f727e5e93365495a48697a985a3be5fa840e3cc6a45aaa683ab50378e45445e6b886cf7341e450cf41d15a3d10cd4aeeb86b14a7fee71b70d8edfc9225e0a4ff807901cd8dfb24b6ea683bb49b9", 0x69, 0x4811}, 0x20040084) [ 774.809807][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 774.812728][ T3703] usb 3-1: new high-speed USB device number 116 using dummy_hcd 21:33:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private}}}, 0xb8}}, 0x0) [ 775.102406][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 775.118589][T13290] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 775.198006][T13290] bond90 (uninitialized): Released all slaves [ 775.231423][ T3703] usb 3-1: config 0 has no interfaces? [ 775.372257][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 775.393253][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 775.403231][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.411403][ T3703] usb 3-1: Product: syz [ 775.415894][ T3703] usb 3-1: Manufacturer: syz [ 775.420636][ T3703] usb 3-1: SerialNumber: syz [ 775.515765][ T3703] usb 3-1: config 0 descriptor?? [ 775.769825][ T3549] usb 3-1: USB disconnect, device number 116 21:33:51 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 21:33:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x81101) 21:33:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:51 executing program 4: prctl$PR_GET_PDEATHSIG(0x3c, 0x0) 21:33:51 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$eventfd(r0, 0xffffffffffffffff, 0x0) 21:33:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 776.527529][T13302] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x81101) [ 776.616697][T13302] bond90 (uninitialized): Released all slaves 21:33:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 776.902158][ T3549] usb 3-1: new high-speed USB device number 117 using dummy_hcd 21:33:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x81101) [ 777.163709][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 777.296325][ T3549] usb 3-1: config 0 has no interfaces? [ 777.327929][T13322] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 777.365966][T13322] bond90 (uninitialized): Released all slaves [ 777.462842][ T3549] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 777.472260][ T3549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.480421][ T3549] usb 3-1: Product: syz [ 777.485140][ T3549] usb 3-1: Manufacturer: syz [ 777.489883][ T3549] usb 3-1: SerialNumber: syz [ 777.517460][ T3549] usb 3-1: config 0 descriptor?? [ 777.772929][ T3703] usb 3-1: USB disconnect, device number 117 21:33:53 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:33:53 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000100)="34e8897dbd931dcc677c3cfe6408c5b7f782467b01d4a4714b97aee7f54093153e2f3685effce4dbb31fad63801f664539d1f4639d004ef4a9a8242fa09a5e7f587159503ebac4e00fbc0fa68ed86e0866f6721fea2b24cd65fc82699e8b90e1bdff986f33ccc032d768a56053a5e5418027026619baf55e8943871e2d9b6b18306f4f6524cbe236de8dc3de6959b10d84789c242a3a9918c3eb5dc474cbf94c1f0db8f8ab7952c1ae80b78b85e4f5eae512531f0115732c38c9a70e75ff36285664b9", 0xc3}, {&(0x7f0000000200)="15290d93257ad12b12a2d8f7a8a7b6fcd94ad3a34813c70f4a00056e5454067fb2002230c782362141a13f75af35e242161d1db1d7756f04e9d996e4bf1905c5d4a581039e11986a4f80d1cf20578f9e24126c5d8ba1afab55a87303b192910ef67cd141804938da7c14713ce45a3e0079a327d0f7873b5ba143642021a0c0c164abdd77aa66e84806f9c362052148b07a4e96c5f56e93eb67431178f6127fe4c3f63b2bbd845006441ac7ef2b501df610e8e62a98b0", 0xb6}, {&(0x7f00000002c0)="2bec8268d23e201e625efaa7039543c447975d4fae40adaf239bb465e6227aacf4e4137b91370aa4b9fde938aa7a7051e3f00ec3e13cf9f7aa0d8e4c24c2b89828b3777db25f7627c9bdb145e04bb64d5cf10245460a319289bdbdb8abceb584b84393d223d6f5bea99da612fa576021bafdbfa676e7ce88f578c1b648fb1aac4a14791911372d9b68c0162e76198e4f8f7eebb81c0f2ccb0e3741658200f1d917e5b73cb8a89ebb464805442e75dca75edafc7e7e335fca8225c8ccd39acd343d9aee186a", 0xc5}, {&(0x7f00000003c0)="a5e62c23f86b9ab9ae591335b5c596846be74bc98eadd10c3be14de0c2b4667de1cad2c3597658a35fc557f3f8e623560e8eea12b3c5e41b824afd741b4d02d2c307948d18cfb4fffffce0e605d28c14c80b832a479ef4c21db9f1ad8d69048dbedfaa5bf4be918212ea573265bc5bd70ab67f52d7360a510ee2887df6adfc2cce13b2eea0c9a8fa1850b5de976d54d4b00d45d0727bb7cf7dcc41686912ed677116819b22057fc30830e0b7fd5d6f0e8194fb6b87c551ac41c8b5b851f03a903675304d3b2d", 0xc6}, {&(0x7f00000004c0)="5d68991a26ab59d4326825a3754fb7a5f437295ed32456d9a25dbc37ae1294b10f8e5ff2b481e98ee991180b3ebfddaccc2e5084fee660edb2ed4a02f4dc6e73b24923faad0dd7e356bda293fd55734f93182c3a7b993b066f865d61f9fc52dd0b02a46f61d979e93e56747304cc01166276ea8406dda028500e334a8d42f88dbe2f58b31bc6a5f993ff1cc97471f8641f1d81a6c63737f13fb5e91390a5ed8680bf12f63de3532383d519eee026d4948ae069b14a7f5213357304a3dd7a2518fe0ed99aecbde413f9ab633d5b8fd3e69bb9881cb78cb733abb44865b540fe67da1befa916c11103257c68be9cb273a71bab71ee0702290b6bcda5e5f716359c4f8b96f44be7e49dc5c25510f4c51ab90ada1bf8914e75178577497159c3aca9a8397d348f66ae14965a088aec32cad745e2b136e8732b8635fc8b706b6079da6c73a4375387dcd9af6935461ca12683edcb5b5b28487698fa8434bb214ce4f13a4c343c6747a87348d4095d53d214389548ba4c0e1c20c1ef8285e94fab2bdb12e0f51ee4d15fc5f01ce2ce17c27f937cd7994f6ee16b8c25b7f888632d20517755d3463d4ba31f3c094496e49ce0cfd36082c75cbac51df6472e904683859aec7ed950d4a08ee1fd4827ca88f9fd6f167329269cbe81eca786c333f25b8ecfc781be5ba8cc54c2b6d5fbe65a775eb85888a959ada37ff1ae8071274f1fc45dff4e112d4ade0cdf8bbea5dbf048251825cc8144f177b6f750b3631eb8eede6b6ee872894c66fe825c55e9c528284079ea10a29022f7d7c596327d0e09b03bfbb7fcdf0fa5f6f4bf82a18350c117a1419024c49471e3bd5209fca56237223383ec86e68206811ca8011f28aa0bd9f2d82964aa0860be204bd1040bb770e78424c6f53b6fcef7ab0a52078dc3a82d58f70a6365f40445be12b23b1ed7aa863532dc9fd1465d46c4c24ac84af5ddd77cb36aa3904fe0795212a5996b3d93377aecd178d0e3a1d5a403736aba335c4899e710d603df2d75c9deef3192b50d8187bc9e6e2744ec42b714ecc35038a4eabfaeed48288593e0be9478a0e88c8c47fdde776b7ee73d01c603c6c76f514d24b34f3e69ff5bad9cf141538f62835515612326fe676e01d68aafa3b3f1beae8bd47a24f7042a150499a937a5bb9e0527901b95dab9b85133fbfd42fff119c07d5857a728ebe611cf01608d27867a66f7b4f1cd27190f7c568082155f0c992851db3e5e087e78d07b99a21f4a90826db8829a11a7993a6e0fd3b7a6d98ff8e93bbfca06782b23e2f97ee106dd78f9242207c56baf9ab87be11e6d7be8813b79d10a22fe38fbfa8fd3debf477e846c42c1c9b7ff9edff89689ed9ae7aef7be10a86f0f348bc5de00c1979386f9530ade8824abc806f4e7b08c3abafbd2ffaa778c14039337be952658cfddcce44cb465c43b3603c08f65d136fffa9ebd36cd296c16d13ff932dba2021ebd4af557b6d4d3be9fcd17b9d4fc3b7def897a5aea7d538577975025042d83c2313667e7e3193c5b9cfbe353acf66ac7507f338c151663dfe8a33e33675bd124a97db326413985da57a5b85635c41daf8c1e330376c38c0fd9bd4e6b0a87324ed136787dc48707bd4a26d091cbdecffef6f7080fb8abad316dabb337bb3245d469ea23e898a9253676c6e587d119d7b90082892e3a10c56497ea30440c9c38332869204ab95dac54f7a9e4ba017bac7be0de6f288f45349af31baaa740b6b7d4be9ef36667a695cc35046ffb93d6accbe99b14bdfc37377f2e0e2efaf92c6e9fedf51aa9aa31adbff1a3657e1bdbeb1a19a616d9298be278a5da94106fde2349a59409fbca04a359e7490fddd3b0460692270528b4fe6ebbcf75d0f6e749c5196d201c30676c040f24e5be951247e497aef5869f8bcdd9ea48e42369e68cb5fe3ff067bf185c134257532225716822d4eb70ed057465ecd419c0a51303d2b65f031c80b6598c24b035d825bd6ce011e1f18528362b505c81e1412afba6cf7879369bb3a715df3bc9c647646c89ef2d431668db3da915017cdd9fb1cc98a01b37472809039531c4b631be0340c0631dbb488776b9730b38eab2ff275d8b7d154e9b2a6ff29547c8cfac9ab4e4154f896e7a982dec50a2655fd2ae3092dd8c548ed1c7130de11f3ffcebdea9e776da4bdc1ad57755227b3cd0bd299e5f0defbaaa62972a831ceb55997844ba8ca6f8ccbd31548bc80c7274b38d730eeedd9448da8c8b7b0f073c221984d56ab8a774847f154020c7a7f48008a25ca353bb6a16c26493413a04500910ee0974893a1d8cb09dfd2735e88573e5815086fdc77387e01fe0c8a3d948248ca1307a790f3e4fa5e97d766b33ac129b4786fe29eaefa34318596c0b5068acf87dc494d7f21097c8f86927c8bd79bf236d057bcbc85b13d6c1ca8f1c762ef0582295f6e690b650a8557a2b80c721409e7480290dc7f2b2eef2c1053b417ac882118391f33b5a7c0b46a43a289d4379357a60d26f165b24f3589d80c69575d9dc26b83501acb44654105af54d1ea783d6e61b22b683ae0d73463a2030b3cfcf3379a1e49fdbb96b9b88d2c0b9c9518548b423ebfb425dcd8a5c24baf36ea13fa9b8fd6ea2c4895f3275a14977473ebc5128b2d063e5161371752feacaf854b372ab07dabf2fa68530697a6d6bc6e6c9afea8219e4685e663144a6f8f23a8bde5a2e902d59ae0e7a190724087da14803f302722762c2d458bdc605added738bb3681051b1070cf8752399ef8f8d92953f4dda12d7a64a70fd7b960283f25d1bb1677902aed34eb30ff47aecf048263020919c7a9f9b8471553c5d630850debd17677993d96eed8d3a4731af8318b9efca9c43c7f37c3b4d3b2a7f94b5008d80d407ddfcc5b5f449e3b5c34da2adc96f1b77bd884cea2c8eb8d7c1a5e8b7ee35eb595ea5be21aa06a56fbbcf4933becba8233a1fe6f1df00806c5f7c45601922031e36907014bcccc47228a100a96d3011158e88f4b2f191730f989ae2a97863ba730d299463d30f22d47ec850d453525709b4967e8aeea50e7c793fe89561c8042f4a50ec0dd341c9786d06e0464ae3e6bce3d7f0beef7e806a582340fb9c46188c96c2aced646546efde6cd55d258405e922559d77a8692ebe57bd9fd49e23941fe522a6897f057acd4e19511c598b63d67fd8df160bbcb4fdf1051a94ca6efa43a9340b83808edffd13c4164311f8718fc76c22886911cebfddf2548993797796e591371485a7dcb1bcec209c9c7fc7a45f9aa95b7731a5f05ec515058ccef134c72bf1584f2714107a89a25acbf81d236bef822d4cc8e5c1800f8360e046fcb06c4943ac999fc4eaa002061997bc89b91b5d91e5c70c025e4a350a6806faf28ca8ee93c00756d288befd6ccd11b5d22c352881df54ba43968671d39dc15699e1180e942a21985d9b9884dc7dadb653465dfa1511daabe78bc40c4dca6a358f7683cdf44954d295ea8eefa7b4e76168a3a9acf0fe5eab8c99de8b0c6aa85caeb666de4887e00b6fb6652e6a0e4129124c4183692c6fe229c53ccd3cf9da3f3e5ce95563c00dad4d373e78df3f1509af21761f5038d91c6b3057f1a199ced55081e188633f70ee3558af5d7fe72ec2c741a9cd377185831362b440ee8db85dd730a70e6df80e772620dd5f0d3b35bd608dbf66b785c9a453617382da8107e35f96c7455e6fba8700176103284d40bae340785fc57ee9c4ca347f6502839a6bc457a5e113863faab1c59bfcd2d3c71262b004e5c8c05ec03ea43ea7a55b02fd0f20c1e34a3bd5fa29ff65dfb582597989d3f10ef0633aa204bd17dde4f59fb0d489d6ce0ec1eeaf1e102cd4b5ab0a7b5b0dff8880e5dad7e22e7561991028a1e465cd4e00d40d718ffb522f5f5fbcff56635cd559372cfe77e8e64db3cbd645485cad3d813c7e296a86cc1d0377ddc0fc2234da04433e8e17a55a8f747b853d8645f4130cc4ae2ffc499d2d4ec71dd4ce82e77ef01ba89f9c9d164f320e1ab2e2bc745056b6870040518c056d38092c245719862479a4c3751725f7e3c7aa300109b1bafa48049991672599c5fc79897326f2f9cdb7818946de19c59cbbc6b841c8d1bf644b26c68677209001aef3621013f25f3c8ab7d5ab108ab0f25f92b85739dbf63e17e762e0a92de0f2715320207b10441096f4bbcbaa0ee930a5d95639e61d34bb8a02ff8cb4bf1df78ca21979efe768b3d5cde0fd6845373cbc960d07f3ec9358984cad60a12be23eaac60ace199e5f1d659e4118067d25cd10b656d07e61e0ff8adf7a8a107db2cb6182299b9656b24f6bd865b52e9309e76dbd6d377fe039135925d468a68502446bdcede13fe2f5115b602ab9dac49987e723bc9b25513ff6e017084601bb705d73373d0f243fdd8cc6a8a0c58d2eb90f377747891dac7d562226f1fab390052708c15951771911e3c3547fd9e958d72394d1da0b54af66293e95b6e1f63b89bcbb8e9e09fb961930f9ce4a393ac80f1dca0cda92c71250473af1de06786f97fc381cf3361690937c07cc4ac4643c08620a54a2b6f7b06eb3db1e04d33cbd27268150bc96a245e2b3a55ecd240c19c19191f866712fc0fafee3708fb69955180af3df08cd0cd9b553a7587b519f48d14d31a7d52b9ffcd89af36fb8407de622b8169a302ac18d52542a2cd427a1fe52a86b2256b3726465743e0af675e1f348a4f1e9186b2708711eee2117f2ee082e126d0db153ae7df3c91edce0161c0a13f944d67a1fe7faba6723de9ef12c5f7f4c23b87f99ac51c119fae0133781aa2230ed086369bde7a0c094a04e9755331470ac46579f459a25e691f350b96716a7ae4169906cf2c3af71c1ce3243f8356d97c76e714a7e4becdfb7fa1e9bb540254726e63121ac5d46d9fbfe76e53c60536fa6681e0cf7c18adb80a16da1f9fdf1f4db83c7d9b9e17e16355454e2ecf249e2ed49a2756861aa2dea6be54454ac2b7094f4188a637efd85a6c92b90414a5777adbc3642990317cd3b0a49247f703b429051c8404be41d6f9fbf2b625f5726c8817cc416380638ec6729b988e6cfe5ef5a849c36aaeb283b422f085ecb2920054afee10c57ca61095b9b91b92ed046c8e877dbdae20d9b59575fe4f69341c734af9bb6f881c8fa3536ae68bf7eef2ad0ce5d5415e05ea13ce250a531ca9b819fee4a3fe359e70b09f66918e52c5777705d9a2787823aab7146bcad2b8e009e9ec20df4b5be22ba8f98da14440f6882d0cef46d958a5bc8a37868bfabba6e5f6cbe7e6f4ede29b368f0ede92a8531976c20ffc9851619b55e30007b570ac12196d6b59f2c79101abcbbfc365b1e76aef5717b539e1b8192a3fc2495101c63c9e57d6f96dfacc3c6388774df93ffd9368f84a0f24ce33c8f1f9975dead5087e245a74318bff0aaa7e88d9482581f768da8293e13765c1ac9de4b345dc5a2b86187d7c0f5bc07a5da0bbbc1e591b3e33423d453bbfde60d1e0861d6ed20f1f01d8870bda37bd7ca988eb91fa052dcb5f9edcedfb68875d42d24620ac61aadd19786031510c67a55d2ef47e8d6873513407388f6b566fbcb05e93b0e6c06fd4a79e48e1eedd5f57603ba5e36d2c92591f9d3653c2ddcb07889ee6e37db40937eb4b6994e9e09f75b65c3939b904145ec9f3c6521e82d368efa48194f754e5d99b233a2889f1f1f4bf0474180c9e26db26f62f0671281e02891dc8afe402e808c0e7663e2c5c1d9f8515a9e1ac04a6031aaf0cbae91433ce3adb236fe6a0c045338dcf792adea1e6", 0x1000}, {&(0x7f00000014c0)="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", 0xfffffffffffffedf}, {&(0x7f00000015c0)="ea02018ef4dabbf69dcb127c403c3cc48104c4e3299cce95373789b85f2bc2b8cd9732d95e5f95eeaf64559df0d7aaa44d8df4085062bb3966612cff83cf14da2f5a47b6200128aef72c2577981802d63cee1484be48372e9e0f2f90e8a07cda7ccc03c817637aba7c96e094209588d1bb89be136653c1b98a3005b63617bae4ce6f3e1eb84e498fcef2e77f91a4f55363861fdb98ae4cc841fffd5b19a7c1f786aba860a2c04ca958925a4aa83c2cf2fdb52d1951bb744529824b3ced43b77c030fac0027e2d4b158", 0xc9}, {&(0x7f00000016c0)="11d2a2ac3ff1d3911fc1fb9982ebbaff5975d751b7dd6b7d1e9ecefb67d9ed1dd494e89166291dfc5ce4bda061c08eb7fab83664f65539f0c6747fc139b576813ee672855de256e66890fdf61e27bc04700041b1dd8da2ebbe5093fe9ca860a8bbe9498a67b2991be21f47fb2ddbc0733c75ec5386f9929b0c6b12c7f450755fcebdab374915fb08fb548ff828220bc65e7999fee6af6b9e39e61415c68fdd5aa7d5ae50a8a443f86eadfa29d638ce9d158520cd73c313e53048e3297790e7", 0xbf}, {&(0x7f00000019c0)="cec7324491acdf6efb668f7857378f6e49867d123ce9ee6cd92a6cd2ddf35a6c4a45d5cecba300daa8025287f14335944571d5b6f0fbc28dca95ef1e3e0556165508610789c707786b8bd9f97494d4de18baf80b6a800560f7205f2188b839656a89f4eab4cb2ceb0965ed2a23e7788070f05ed59dc0f842dceedf37087441823db8a8832be7bd3f3d582c890a98c557767d98802c7043b931fad3bf29d1a01cd4b1f1c851211b8263aa0dee766bf2666cf4f45ad6938d18ed1ea84560c24e6733878961613d270751a9bba3276c2dd38795394aa4efe2b74b2dc33b9e4c029b3e1a02ab92953a087c4b4c50483c856a8d7be7db7ea158039ca98d2cd5bf74bf2a6d5b68cb6448eb824a8aa48f6a687b62fe2179fab2ae071cf393b5f0f04f914585759297fb31269b783a9c62c694d747c711d896e2077b952598331b12d9be6600fa94ca574e844655c5f4d5741c10fb24779f26421550073a7ec0780538ca317b4118e6022f512839205d7da25ffa5df1359d4a568c789561f74874cb24a4726ea58beeef7c6c8705702a73f5b7f8ff40c8558352c991f1959ced491b6a6703b56f6b114b313e52b3e68dbe8246786d8b8f5d4670c0e97dca83fa0c4affdbf8d31e115733784ab84ede36fd5a7a84cb29ddc25228b2a7c88a5e32246653a059e4778f310c7fdfad6a54803f0f4c444d1ba7a49650e6cd0618f4acf80425cff4f52d81f761c19fffc9854ea012356113b066ed03d8cf5ab3769bff045e2713b3ab131d81f6073e0045169f7b4e69e88f2b34e130d1e2463b610817f60a9c4227f06b54d1048f01a56c5e67d03097fa8bd9c30e79faa032adbde5ac8d3cfcebd72d69094b05b011b797b3d6f707748251af8e7e01d56f087c950bfd50d70eaa3f32bf00414b31347ae8e8e88ca960691647249686b07c46027724af2fc90c0d006047521c8bcb351dca8f10821ef98322fcc1d9ec16ac285fb2d56f45f8e7b10162764329725bc94e6af4a6e284cb70cc56a8bbd24f7554399886e6ab3eddb73d73ad08a90f67f0fff51468cbeabdc91ef264a40074c6b0da80297d52df2c20f53ee4f9c6b2d3497714076a17eb6b92c4e84f04148579aebda80ee511ee7968e89c12c82b2be021036f19c26c3232afa9ecf6b80c63ad526bc380b4eb7eeaa80392d7c7766bd95e9187b251547c7429be0ecceaf62a082bab3399332745f0c167e6418f73c1e5227d37627517f6b75fe9f9a664bbfa0dcc054b4da3c64798ba07c641257933fb0a81b6316ec4e5ae5671510b56e248c6c65a131b04fa6568c76910dbefedd534c29cc76bf9244cda073178006d9432dbd3709c8a0716bbe82aff6314a7db1b68d5627f0f5211a5f244a336ffc09ab5eaf12a46b3697206293dde71e296ab4fbcfd59a9c2f9dc6337ddf805c8315b73a159869be25e833551c17f8d5e76ef31b31964c00de8ff98589aac859c2a69869b5014fb0e13b517c66365e2faa6388ccf32fd9cde0c408c734592c55e64f0ded2a9ac62a13e28bfd28c93207c27c58c435abcc044bfc438c237c4aa376d185c39e0778633aa55794b691eec90c34bb7ca07f5308139465ca60371ced44568421c9999183766d33f0a6a0afd16285ac3380d111beac8f2303028e63ca772f75b79366c89ce28786027d646dda5dd5b724a6b32b87aec349260f3a02d1f55e98d08e2808174f9352037b1359b814b734444936b2372820e8b3d39da8de1167d4a24e46a6e7c602a204f32776336410ccbea65d9132e3f13d36f3f85030868472795be747e59f1c3e970383d4058e5bc27a9be2315ac657c7db873be40664a8d9c5a12cb393053e0e74a59fc22c8c59dc450eabb09a2f198808792ba0d9ecdf6ade108ca83828a4a1e44b1b93fce087358ced29ec1cb6d28e689f17ef8c57c9c8b3d1edbe53d969ff059b876a8a3fd1feba6b0f47ef04a95c10c0f516ef1a448c56687af04159328c0c58fa08496ff7048641f08b2daa39806eeb35701b5238c0815a3d092d0d646dcd933babd041dddd0ba0bbd1edb23a4ed8ae6e512c79c07649ef59ecbeba2322553c7dae2bc9217cfb08519e2f68befed8021abdbff3d46801149deb8c639c9a74545001bb35b497855a59b9cdc4145d876c08382b91889d2914478f51729a57b9ad95060f2f53e7cea3186e0777d3e9df0a2b03eaeec1897fa195aad1cc32165a8b7d7d3e84266f571bc91db8c41f8d22cee8ffce3627a87b67b306e7215f7c1bd66049ca4491cb2ab3bb28d7d5fed82fb3cb782702a7c14b1546d811f4ea27aa8087edc6fb4ae4fa4a1dfe8ce3d2ff78b053d12d30d83bb3cbaac0391a5615c2471f14c14293118f763248e10561f9c055755ffe887de42f11082aaf103636b9282d4d4287aafcf62d2641551950f09149dddf12a1c7a16b13191f1c9309df056a8d275d61254d16b9326200532fed928c596ae2824d53368499d5049cacaf9588a1ec1045a007e8d2265c981b96afacf2c82a78eaab6c3afc12f6ac455a16dafbd9d295f158bd43ec4fcf3e14cbb056e3b066fb5dc83465e6bb3fad9ad9e754f253d318a21305c2b663ccd302b4f5e9f8245b8e9658c8adadb2a0e3bb6624805a351c63def2e64ed8f8e5ead85e9670142690d04eb71b2711fb90c7f40485eba397c0f682c5125d3d46a1ae69bcc5bee6649e527fc51086170db0f3cae257a51882805d870d2d4a5f7c44ef42926e9efde7f90190bd71221c2e6a6185b74634dbf9624075bdfac148fd14d171ae9ec5c107b9950c406ecee3db8a2acf18668c18a4581ef4a0720c7a6af823c5ef1a900a817c3191fd7ba591b973cb32df2c368c9492dae986d395371fc78f4e2d0b8adb08cd4e4906216225eb436a0c795432d8ae986c56b7b71cf6de00a8d69422b5394d065c6677929cadd90e89513710ecc491ec302ccac33cb774ea986c99a1e97fa013d6fd0a141a6091f0306fad295a49f9ef81333dee2307677074f818fd90989260bdfc7c2bfa96684a5875201834151a35c0242675ce4f8ff3089bdde39006a772afb80c44c3e2e8286de07017413c53931278df2c2c5f34b675134815168e1840c6852f8884fd5663663ecebe44ff47b23d936be824ed44f630606dd6f9f0441074e847090018210f09cba9591f5dbedea4eff14ab8ecd2686dfdbe9116efe9d198f730543db73a941289dbb161af1f52cec4b37cf1e7daaa892d2c9f71abec832b48cdb5e49d51bed7b584d623b8184b44e9460c4e8867306cbafd1aae00b7b14a33f822ca3605ea93b2a5999d42609a6781a38e5bcf0fd951a94ec9ad463f746e8d700157c68c8977351c3f3a9b5bc06976f4e2e640cd2a0bc70f4a1c127472ca3caf78da460e03c5cf1ef3e96a7b285206a9c0084a65966f2425770bf48c159398689c5c797f2d9de28332d5f3e9c014b2cddefb27bfbb3b12d66a0f6587e2397b418cd9eef02871eb37d86f4b9a7c2fc96b7e517dd3414bc4c53ec27b901800f4be82fa107e0cea44f6497a81c13aa349fa943656c9df78c681683f83ec014e79f07761b6adc623405563a99960475896147ab3b9fc29e6a4e87abf59a810e37c45e58920424c303063616b7b1e2d08e9439f0ee1a2333076545aa73b61ad57955814e02a0281ff851179235258d6b5eab6049d353e39a082dd45941ebe923c54fd59200542cb1c30d5755631e91a5df5510538679e1bd79440a70a33589a096f985708c1942726852b3212caaad0c981e3cc6fa846b6ea59f1c42d2670c78ed9a9366de148fef79635124b9dd0bc326e6b9543d154079a37946ca28607b0bd1ed6d84f9d27e02ad84c20b3f955191567596484316f65209ad8c860f1ac5868abe56614b9c83bc67bdd0953eca1604c376a7cc27a1386a8c8388640220470e2bf8ece771e8f27bff8ddc29493170e7a1da62cc6967d22e97b556be1b1ea36dc882e99680a2d5258a5632d79f70bd5b45f546ac2ce1682ac9e176d61bf9b83154fe253b73ff0bbfed9cf73a8660a069d48d00101c292708fbe2628591d23e1cde64ef3bbd7c940b38c444ee4b3617d66efd1ff30fabfcbe838c0572132c504632bbb45929a2665c15c7a645f128ead835f7be6df700200d2239fc932da8be514c1a4bdf27592ea699fe38f169dc0d8493267f5056dba9aa8366fe2688b024f39a26fb36bd06acb4ca666cef7fe466137b201bd291cb723b73a126833286c1f55c4d023aa924525343f8eb232ec2a0e5f126bfda07a50275ffbf2e90dd00244f8a4c3c6e631a7b1692bfb1e7a39f21933b09e89e626d9ba4a8652ed382c754079cbaa700bc6ceff0e1143c4b78c3e19f0480680173b5b69272de435990a0f0cda72d25e8b30db00d7a2d781ff32ea3ecd0fd428aa710f698270320ef7947748708db031c7af98b5c0d511dfc1c9648c87d250f2ada7f1bff59bf6f3a89cd454e9bcc56b1f8346effc5baa3bc23f6fcdeda6caba2744cd56ec15a7219fb0cfe632db646c10e1f20195f39cc31b9ba131dfcac641e320af337d46d5879dc52ffd3d468b880a4838c6db7dbbb614419560349ab7a82af9ec326f8d5d610250985fd0d0090a8ebd33eda8e26c3522ee0935a149814fdbf1493f8f2603bbd8b3a3a8d80858c9def96947cd951e4e76ee8c34a3544a17984a4941f8fd889d9481faaf380a88de171e16f48286b706e69d459ab7d3203eb17b3bef89d6e9b4b663d4a6b5d5ae1b39df6711d5042738124a6a4b3444efa4d8aeb773d9102927b3f3a3dcee5bce5b4729a8cf526042d6a21e92e16626aa86d844c272311640f391abf03104a67bb90ccb0a5a6558c970eaa47298a44e1798393605f37e03c90beb5dc2750ddffa71ea2800cc30bb895f9799b75d2f12ec662ea36281bfbc2bf5e04f8d7f181ebe8219bc6152cfb185ca3b0f3296ed0f45bc82ba04110fabc4dcf8d956089bffd04a42516fbd8ee9e1ac8390fe1baf4cb6e88a90ce161148abaf1faed31df7460783b56edbb2cf72a52a49998bfceb3ffd5e379994018e2d7776c9892dc5e71317b5e7f30595f85fbc809bdaf3225139c7b1eade31de2ea4eefa2f42bc9b6f9806cac106a0602f18892c90d06233c911d35e859a06c71dc7ed2508148f62f0080bd5e68060209fc42e9351a61ce78d7ce5b48210e3e355b54d8af3276f1cbd00a6b65da733c09384eaf88fcfb5e0891b2682e458343178498e627af9b14d0b869ca2c90446ed964595b83ed59c9f84e208a4e2f981833c62ca80e40ee237eaef54b415c7692366d18bedbf44cc155169116c3a0b7c66fec6a52e571f542c43b26a553fc99a007ca9d7871c68a743af56aa079f0fa85bc3361b815d437730f713b8c7da7c925409ae1bc74ab0d0a2d8cd87faa454a258f994fa42ef7996b94366c7f7a660506f7f39e38bc86ef962609ebb42bfd435751345c0cee1342ac4026a44566f2ecbeab09aea11d838885de4e0d7d2cc1a362f9632c461d044894a3c11eba257fee1c45c2c066403945932b73a1fa4102fc2591e2861b3254c5544f2165b0cc2a915767a0cbc241838b216efdd3f58318986cd977d49915c54767bc6372660625b7a0935af81a0ace544f581fb2b754180781ffdbf7d59bbe2b28afb533d4fde9bb8e3f38f396c9f86f0586e85763cf8d8499a39a7d51d99af85d0cbcd121e374465d1cfb8379fd2c9a8087a6b4a939b45cd181435b5c2e4eeedb523a9c8942f9fdbd9075c85a32b14909653e389e77b3d0e520025a3fc16d83fe8c1975f91a715a7720a8f5f3542221", 0x1000}, {&(0x7f0000001780)="9234ab1ba81600b4406ec652e67855230e90d941f81c46f04f2445fef5fda10b952cee72d34dd336c49f9b0ab468f93ec649d4197cd05923b5d0dfb5c31748a2960233bebf06ff1c3a2dfed316a4045defff7a725c5bab8dab90d9e187eb67ec9c845db0477441b68f6eb76c4d411bee6a8006ed1f9b5d620a9da71ce883f8d9985ac0a691297d12", 0x88}], 0xa, 0x400, 0x0) 21:33:53 executing program 5: r0 = add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x0}, 0x0, 0x0, r1) 21:33:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x0, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x81101) [ 778.534040][T13333] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000016c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$link(0x8, r2, r1) 21:33:53 executing program 4: r0 = add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="da", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000140)="92c1", 0x2) [ 778.576230][T13333] bond90 (uninitialized): Released all slaves 21:33:53 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80019c) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000440)}], 0x1}}], 0x3, 0x20000005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x149042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x44100, 0xa0) sendfile(r1, r2, 0x0, 0x80000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 21:33:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x0, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 778.932667][ T3703] usb 3-1: new high-speed USB device number 118 using dummy_hcd 21:33:54 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200090581"], 0x0) [ 779.160944][T13354] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 779.172563][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 779.189333][ T24] audit: type=1804 audit(1649280834.250:9): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1768831021/syzkaller.X63gPu/682/bus" dev="sda1" ino=1159 res=1 errno=0 [ 779.295178][ T3703] usb 3-1: config 0 has no interfaces? [ 779.428489][T13354] 8021q: adding VLAN 0 to HW filter on device bond90 [ 779.452907][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 779.462418][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.470583][ T3703] usb 3-1: Product: syz [ 779.476400][ T3703] usb 3-1: Manufacturer: syz [ 779.481151][ T3703] usb 3-1: SerialNumber: syz [ 779.524317][ T3703] usb 3-1: config 0 descriptor?? [ 779.776429][ T3549] usb 3-1: USB disconnect, device number 118 [ 779.782165][ T3551] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 780.022049][ T3551] usb 6-1: Using ep0 maxpacket: 16 [ 780.142850][ T3551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.153055][ T3551] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 780.242999][ T3551] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 780.252580][ T3551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 780.260909][ T3551] usb 6-1: SerialNumber: syz [ 780.270981][ T3551] usb 6-1: config 0 descriptor?? 21:33:55 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:33:55 executing program 4: socketpair(0x11, 0xa, 0x8, &(0x7f0000001040)) 21:33:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x0, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:55 executing program 1: add_key(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffc) 21:33:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 780.314551][ T3551] hub 6-1:0.0: bad descriptor, ignoring hub [ 780.320620][ T3551] hub: probe of 6-1:0.0 failed with error -5 [ 780.333559][ T3551] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 780.517621][ T3551] usb 6-1: USB disconnect, device number 9 [ 780.534292][T13365] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:33:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007b0000000c00990001000000000000000a0094"], 0x40}}, 0x0) [ 780.677162][T13365] 8021q: adding VLAN 0 to HW filter on device bond91 21:33:55 executing program 1: prctl$PR_GET_PDEATHSIG(0x27, &(0x7f0000000000)) 21:33:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 780.993151][ T3549] usb 3-1: new high-speed USB device number 119 using dummy_hcd 21:33:56 executing program 4: r0 = add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="da", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 21:33:56 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200090581"], 0x0) 21:33:56 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200000, 0x4) [ 781.244815][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 781.296884][T13380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 781.389679][T13380] 8021q: adding VLAN 0 to HW filter on device bond92 [ 781.412928][ T3549] usb 3-1: config 0 has no interfaces? [ 781.593698][ T3549] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 781.603339][ T3549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.611495][ T3549] usb 3-1: Product: syz [ 781.616125][ T3549] usb 3-1: Manufacturer: syz [ 781.620852][ T3549] usb 3-1: SerialNumber: syz [ 781.732343][ T3549] usb 3-1: config 0 descriptor?? [ 781.802580][ T26] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 781.997551][ T3549] usb 3-1: USB disconnect, device number 119 [ 782.062964][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 782.208256][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.218304][ T26] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.332287][ T26] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 782.345407][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 782.354652][ T26] usb 6-1: SerialNumber: syz [ 782.363592][ T26] usb 6-1: config 0 descriptor?? [ 782.404568][ T26] hub 6-1:0.0: bad descriptor, ignoring hub [ 782.410631][ T26] hub: probe of 6-1:0.0 failed with error -5 [ 782.423463][ T26] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:33:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 21:33:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200000, 0x4) 21:33:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0) sendmsg(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0) 21:33:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 782.725211][T13397] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 782.762522][ T26] usb 6-1: USB disconnect, device number 10 21:33:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:58 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200000, 0x4) 21:33:58 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {}, {@blksize}]}}) [ 782.877178][T13397] 8021q: adding VLAN 0 to HW filter on device bond93 21:33:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 783.133894][ T26] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 783.208483][T13410] fuse: blksize only supported for fuseblk 21:33:58 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200090581"], 0x0) 21:33:58 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x200000, 0x4) [ 783.382277][ T26] usb 3-1: Using ep0 maxpacket: 32 21:33:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000180)) [ 783.436125][T13413] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 783.503103][ T26] usb 3-1: config 0 has no interfaces? [ 783.519625][T13413] 8021q: adding VLAN 0 to HW filter on device bond94 [ 783.712644][ T26] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 783.721977][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.730133][ T26] usb 3-1: Product: syz [ 783.734618][ T26] usb 3-1: Manufacturer: syz [ 783.739370][ T26] usb 3-1: SerialNumber: syz [ 783.792582][ T26] usb 3-1: config 0 descriptor?? [ 783.892262][ T3549] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 784.042097][ T26] usb 3-1: USB disconnect, device number 120 [ 784.162196][ T3549] usb 6-1: Using ep0 maxpacket: 16 [ 784.292305][ T3549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.302447][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 784.402221][ T3549] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 784.411480][ T3549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 784.419972][ T3549] usb 6-1: SerialNumber: syz [ 784.431387][ T3549] usb 6-1: config 0 descriptor?? [ 784.477171][ T3549] hub 6-1:0.0: bad descriptor, ignoring hub [ 784.483451][ T3549] hub: probe of 6-1:0.0 failed with error -5 [ 784.501184][ T3549] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:33:59 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:33:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:33:59 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)) 21:33:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:33:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000004200)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x121) pivot_root(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x2000011a) [ 784.792524][T13429] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 784.835741][ T3551] usb 6-1: USB disconnect, device number 11 21:34:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14}, 0x14}}, 0x0) [ 784.929581][T13429] 8021q: adding VLAN 0 to HW filter on device bond95 21:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21:34:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 785.272486][ T3551] usb 3-1: new high-speed USB device number 121 using dummy_hcd 21:34:00 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x420}, 0x420}}, 0x0) 21:34:00 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200090581"], 0x0) [ 785.512414][ T3551] usb 3-1: Using ep0 maxpacket: 32 [ 785.548420][T13444] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 785.632555][ T3551] usb 3-1: config 0 has no interfaces? 21:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4}}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 785.713700][T13444] 8021q: adding VLAN 0 to HW filter on device bond96 21:34:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf4240, &(0x7f0000000080)=@raw=[@map_fd, @map_fd, @map_fd], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 785.794091][ T3551] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 785.803559][ T3551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.811872][ T3551] usb 3-1: Product: syz [ 785.816179][ T3551] usb 3-1: Manufacturer: syz [ 785.822461][ T3551] usb 3-1: SerialNumber: syz [ 785.966886][ T3551] usb 3-1: config 0 descriptor?? [ 786.135529][ T3549] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 786.303451][ T3551] usb 3-1: USB disconnect, device number 121 [ 786.382295][ T3549] usb 6-1: Using ep0 maxpacket: 16 [ 786.523472][ T3549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.534205][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 786.635935][ T3549] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 786.649354][ T3549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 786.658552][ T3549] usb 6-1: SerialNumber: syz [ 786.700277][ T3549] usb 6-1: config 0 descriptor?? [ 786.752479][ T3549] hub 6-1:0.0: bad descriptor, ignoring hub [ 786.758558][ T3549] hub: probe of 6-1:0.0 failed with error -5 [ 786.771529][ T3549] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:34:02 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:02 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001640)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x4b49, 0x0) sync() 21:34:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000040000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000007c0)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0xbb}}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 787.103922][ T3549] usb 6-1: USB disconnect, device number 12 [ 787.261911][T13461] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 787.380973][T13461] 8021q: adding VLAN 0 to HW filter on device bond97 21:34:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:02 executing program 5: [ 787.656134][T13470] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 787.673524][ T5] usb 3-1: new high-speed USB device number 122 using dummy_hcd 21:34:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="e9") [ 787.791836][T13470] 8021q: adding VLAN 0 to HW filter on device bond98 21:34:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, 0x0) [ 787.923246][ T5] usb 3-1: Using ep0 maxpacket: 32 21:34:03 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) 21:34:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 788.043185][ T5] usb 3-1: config 0 has no interfaces? [ 788.203753][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 788.213775][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.222159][ T5] usb 3-1: Product: syz [ 788.226529][ T5] usb 3-1: Manufacturer: syz [ 788.231358][ T5] usb 3-1: SerialNumber: syz [ 788.369091][ T5] usb 3-1: config 0 descriptor?? [ 788.447285][T13482] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 788.614113][T13482] 8021q: adding VLAN 0 to HW filter on device bond99 [ 788.770125][ T3549] usb 3-1: USB disconnect, device number 122 21:34:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x33, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:34:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:04 executing program 5: 21:34:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xe91, 0x79, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) 21:34:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) 21:34:04 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000440)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91529707279498161c761a92f8f2e08d5cf9a4f4ef306152c435", 0x4b}, {&(0x7f00000005c0)="08f9894a6208f014", 0x8}], 0x2}, 0x0) 21:34:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'rose0\x00'}) 21:34:04 executing program 5: 21:34:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) [ 789.620767][T13497] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000000700)='M', 0x1}], 0x2}, 0x0) [ 789.726919][T13497] 8021q: adding VLAN 0 to HW filter on device bond100 21:34:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) [ 790.103117][ T3549] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 790.352092][ T3549] usb 3-1: Using ep0 maxpacket: 32 [ 790.367419][T13512] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 790.456186][T13512] 8021q: adding VLAN 0 to HW filter on device bond101 [ 790.503570][ T3549] usb 3-1: config 0 has no interfaces? [ 790.662675][ T3549] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 790.672000][ T3549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.680142][ T3549] usb 3-1: Product: syz [ 790.684515][ T3549] usb 3-1: Manufacturer: syz [ 790.689247][ T3549] usb 3-1: SerialNumber: syz [ 790.702237][ T3549] usb 3-1: config 0 descriptor?? [ 790.975919][ T3549] usb 3-1: USB disconnect, device number 123 21:34:06 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:06 executing program 1: unlink(&(0x7f0000000000)='./file0/../file0\x00') 21:34:06 executing program 5: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 21:34:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 21:34:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 21:34:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:06 executing program 1: r0 = syz_clone(0x14000400, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x2, 0x0, 0x0) [ 791.745947][T13524] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:06 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000017c0)='ns/net\x00') 21:34:06 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x512c}, 0x8) [ 791.855717][T13524] 8021q: adding VLAN 0 to HW filter on device bond102 21:34:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:07 executing program 4: r0 = gettid() migrate_pages(r0, 0x3, &(0x7f00000005c0)=0x7, &(0x7f0000000600)=0x5) [ 792.172583][ T5] usb 3-1: new high-speed USB device number 124 using dummy_hcd 21:34:07 executing program 5: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 792.422357][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 792.454572][T13543] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 792.535985][T13543] 8021q: adding VLAN 0 to HW filter on device bond103 [ 792.553005][ T5] usb 3-1: config 0 has no interfaces? [ 792.722768][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 792.733186][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.741428][ T5] usb 3-1: Product: syz [ 792.746242][ T5] usb 3-1: Manufacturer: syz [ 792.751058][ T5] usb 3-1: SerialNumber: syz [ 792.797360][ T5] usb 3-1: config 0 descriptor?? [ 793.077608][ T3549] usb 3-1: USB disconnect, device number 124 21:34:08 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) 21:34:08 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 21:34:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:08 executing program 1: migrate_pages(0x0, 0x9, &(0x7f0000000600)=0x4, &(0x7f0000000ac0)=0x8001) 21:34:08 executing program 5: syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 793.847919][T13558] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:09 executing program 1: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x10400, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000000c0)=""/206) 21:34:09 executing program 0: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) [ 793.957507][T13558] 8021q: adding VLAN 0 to HW filter on device bond104 21:34:09 executing program 4: syz_clone(0x203000, 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)="b3") 21:34:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 794.272564][ T5] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 794.383724][T13568] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:09 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) 21:34:09 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone(0xc0000300, &(0x7f0000000500)="831b47f1fd5e4a24f8e921a31fc5eeeb251aaa91b91fa14c6b322123387e4825444006c5588360653b7140a96693ac940da12023a038e13740344520cf173b219c83b0b226b6e43d8279016c19c7d7383017180c31ee26ae6ded646e94deca2f6da61c0ccae7cbad627f26862777d584051ea8d585bc6ff579bb01d68ec6dcf1c59c85be9d0e5691303602494ec78ef7885be3d947b8cdd48c140f227a32de12feceef9b80489d6f", 0xa8, &(0x7f00000005c0), &(0x7f0000000600), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x6c, &(0x7f0000000140)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0) [ 794.509442][T13568] 8021q: adding VLAN 0 to HW filter on device bond105 [ 794.552099][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 794.700822][ T5] usb 3-1: config 0 has no interfaces? [ 794.884108][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 794.893833][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.902639][ T5] usb 3-1: Product: syz [ 794.907028][ T5] usb 3-1: Manufacturer: syz [ 794.911910][ T5] usb 3-1: SerialNumber: syz [ 794.917564][ T3551] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 795.010854][ T5] usb 3-1: config 0 descriptor?? [ 795.122025][ T3551] usb 6-1: device descriptor read/64, error 18 [ 795.314218][ T3703] usb 3-1: USB disconnect, device number 125 [ 795.402506][ T3551] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 795.602178][ T3551] usb 6-1: device descriptor read/64, error 18 [ 795.732618][ T3551] usb usb6-port1: attempt power cycle 21:34:10 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:10 executing program 0: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:34:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:34:11 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone(0xc0000300, &(0x7f0000000500)="831b47f1fd5e4a24f8e921a31fc5eeeb251aaa91b91fa14c6b322123387e4825444006c5588360653b7140a96693ac940da12023a038e13740344520cf173b219c83b0b226b6e43d8279016c19c7d7383017180c31ee26ae6ded646e94deca2f6da61c0ccae7cbad627f26862777d584051ea8d585bc6ff579bb01d68ec6dcf1c59c85be9d0e5691303602494ec78ef7885be3d947b8cdd48c140f227a32de12feceef9b80489d6f", 0xa8, &(0x7f00000005c0), &(0x7f0000000600), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x6c, &(0x7f0000000140)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0) [ 796.107682][T13591] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 796.168288][ T3551] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 796.183500][T13591] 8021q: adding VLAN 0 to HW filter on device bond106 21:34:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:34:11 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9003) [ 796.424250][ T3551] usb 6-1: device descriptor read/8, error -61 21:34:11 executing program 4: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 21:34:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 796.548395][T13604] overlayfs: failed to resolve './file0': -2 [ 796.682524][ T3703] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 796.702573][ T3551] usb 6-1: new high-speed USB device number 16 using dummy_hcd 21:34:11 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f00000003c0)) [ 796.883000][ T3551] usb 6-1: device descriptor read/8, error -61 [ 796.921851][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 796.960256][T13609] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 797.028890][T13609] 8021q: adding VLAN 0 to HW filter on device bond107 [ 797.064245][ T3551] usb usb6-port1: unable to enumerate USB device [ 797.082390][ T3703] usb 3-1: config 0 has no interfaces? [ 797.243909][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 797.253505][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.261849][ T3703] usb 3-1: Product: syz [ 797.266161][ T3703] usb 3-1: Manufacturer: syz [ 797.270897][ T3703] usb 3-1: SerialNumber: syz [ 797.349276][ T3703] usb 3-1: config 0 descriptor?? 21:34:12 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) 21:34:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0xc400, &(0x7f0000001500)) [ 797.714487][ T5] usb 3-1: USB disconnect, device number 126 [ 798.184566][ T3549] usb 6-1: new high-speed USB device number 17 using dummy_hcd 21:34:13 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0xd, 0x0, &(0x7f0000000140)) 21:34:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2f, 0x0, &(0x7f0000000280)) 21:34:13 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x5, r0, 0x0, 0xffffffffffffffff, 0x0) [ 798.382151][ T3549] usb 6-1: device descriptor read/64, error 18 21:34:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'wg2\x00'}}}}}, 0x2c}}, 0x0) [ 798.595129][T13625] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 798.652485][ T3549] usb 6-1: new high-speed USB device number 18 using dummy_hcd 21:34:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSMRU1(r0, 0x40047459, &(0x7f0000000000)) [ 798.695908][T13625] 8021q: adding VLAN 0 to HW filter on device bond108 21:34:13 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x10, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000780), 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0xfc, r0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c851}, 0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "b37747b673ed79a4225a7e875303c3f5f4b4b45a9328ab69072413bd43c8780d335ba8a70f29d333209931b368a44f17827c64cbcbc765d61cb2e944716ca072"}, 0x48, 0xfffffffffffffffb) r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='.e-&\x00', 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz0\x00', 0x1ff) keyctl$reject(0x13, r3, 0x2, 0xe9, r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4c, 0x9c, 0x4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x10, 0x81, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x378, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff50c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1a}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0xffffffcf, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x6, 0x80, 0xe1, 0x7}, {0x2ea, 0x86, 0xf7, 0x7}, {0x7ff, 0x40, 0x58, 0x8}, {0x0, 0x1, 0x5, 0x3ff}, {0x5, 0x40, 0x91, 0x6}, {0x7ff, 0x8, 0x7, 0x5}, {0x3ff, 0xff, 0xab, 0xc0}, {0x6, 0x6, 0xb9, 0x8001}, {0x634e, 0x7, 0x40, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x378}, 0x1, 0x0, 0x0, 0x4000}, 0x1) [ 798.916258][ T3549] usb 6-1: device descriptor read/64, error 18 21:34:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000006340)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0}}], 0x1, 0x0) 21:34:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 799.014019][ T3703] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 799.044712][ T3549] usb usb6-port1: attempt power cycle [ 799.272107][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 799.292878][T13641] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 799.363160][T13641] 8021q: adding VLAN 0 to HW filter on device bond109 [ 799.417963][ T3703] usb 3-1: config 0 has no interfaces? [ 799.462416][ T3549] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 799.585607][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 799.595234][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.604038][ T3703] usb 3-1: Product: syz [ 799.608346][ T3703] usb 3-1: Manufacturer: syz [ 799.613165][ T3703] usb 3-1: SerialNumber: syz [ 799.632304][ T3549] usb 6-1: device descriptor read/8, error -61 [ 799.692969][ T3703] usb 3-1: config 0 descriptor?? [ 799.902025][ T3549] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 800.027474][ T26] usb 3-1: USB disconnect, device number 127 [ 800.082878][ T3549] usb 6-1: device descriptor read/8, error -61 [ 800.205413][ T3549] usb usb6-port1: unable to enumerate USB device 21:34:15 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) 21:34:15 executing program 0: keyctl$KEYCTL_MOVE(0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x0) 21:34:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x580, 0x3c0, 0x278, 0xffffffff, 0x278, 0x278, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'ip6_vti0\x00', 'team_slave_1\x00'}, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@local, @gre_key, @gre_key}}}, {{@ipv6={@private1, @mcast2, [], [], 'wg2\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private1, @private2, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@dev, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 21:34:15 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$hidraw(r0, &(0x7f00000000c0)=""/4096, 0x1000) 21:34:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:15 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 801.060998][T13653] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8674853664bef0ff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 21:34:16 executing program 1: init_module(&(0x7f0000000000)='\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ustat(0xfb9, &(0x7f0000002540)) bpf$MAP_CREATE(0x0, &(0x7f0000002580)=@bloom_filter={0x1e, 0x0, 0x0, 0x6, 0xbae, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0xf}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@base={0x1a, 0x101}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003080)=@bpf_lsm={0x1d, 0x4, &(0x7f0000002e00)=@framed={{}, [@generic={0x48}]}, &(0x7f0000002e80)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 801.159542][T13653] 8021q: adding VLAN 0 to HW filter on device bond110 21:34:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8b, 0x8001, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x48) 21:34:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 801.352526][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd 21:34:16 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4) 21:34:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='rootcontext=s\"aff_u,coned_u']) [ 801.562434][ T3703] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 801.596265][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 801.661638][T13670] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 801.732747][ T5] usb 3-1: config 0 has no interfaces? [ 801.741405][T13670] 8021q: adding VLAN 0 to HW filter on device bond111 [ 801.792480][ T3703] usb 6-1: device descriptor read/64, error 18 [ 801.894170][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 801.905196][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.913564][ T5] usb 3-1: Product: syz [ 801.917939][ T5] usb 3-1: Manufacturer: syz [ 801.922821][ T5] usb 3-1: SerialNumber: syz [ 801.998427][ T5] usb 3-1: config 0 descriptor?? [ 802.081996][ T3703] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 802.282189][ T3703] usb 6-1: device descriptor read/64, error 18 [ 802.317678][ T26] usb 3-1: USB disconnect, device number 2 [ 802.402840][ T3703] usb usb6-port1: attempt power cycle [ 802.842115][ T3703] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 803.032373][ T3703] usb 6-1: device descriptor read/8, error -61 [ 803.301967][ T3703] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 803.492200][ T3703] usb 6-1: device descriptor read/8, error -61 [ 803.612631][ T3703] usb usb6-port1: unable to enumerate USB device 21:34:19 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) 21:34:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 21:34:19 executing program 1: syz_clone(0x30a02000, 0x0, 0x3c, 0x0, 0x0, 0x0) 21:34:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x3c0, 0x278, 0xffffffff, 0x278, 0x278, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'ip6_vti0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@local, @gre_key, @gre_key}}}, {{@ipv6={@private1, @mcast2, [], [], 'wg2\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private1, @private2, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@dev, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 21:34:19 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0x240, 0x108, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @private0, [], [], 'caif0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@loopback, @empty, [], [], 'vxcan1\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [], [], 'bond_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2ce8ae000d505df89a6dd90f9abc7deaa3bc5e61829ea1c52eaad96b6bae"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 21:34:19 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x2) [ 804.414194][T13686] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 804.496335][T13686] 8021q: adding VLAN 0 to HW filter on device bond112 21:34:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x3d8, 0x290, 0xffffffff, 0x290, 0x3d8, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'ip6_vti0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@local, @gre_key, @icmp_id}}}, {{@ipv6={@private1, @mcast2, [], [], 'wg2\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d7b5af62dc5c94e9bb5526068fb0a005877f6e5b8de9e894485644c3e8aa"}}, {{@ipv6={@private1, @private2, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@dev, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) [ 804.582993][ T3703] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 804.773118][ T5] usb 6-1: new high-speed USB device number 25 using dummy_hcd 21:34:19 executing program 1: keyctl$KEYCTL_MOVE(0x14, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 804.822554][ T3703] usb 3-1: Using ep0 maxpacket: 32 21:34:20 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="fac5aee93566a11d2f7304b32adf375a14c7c4945701ec1f205fd8985d273883c70d263a4bce8a448752379d284a21e934d73606eedd5969b8d2a6ae8b7c6613633be6facd4042062192078292ba5dcb3438f7072dd90f6b1bb975a5a7338ce1f317fff1f26de090fa4789b4c0083172a1b90b76448f131ba44920853b725dbe6a664a0b9b64c02092f6219cc18c7a5346f4188137f754198a4454e72960e40c3561e776199cbf18cbb8029a5d23419a8a6e0d31593ddb0c3d4c3cc8d3ada9e12323d73f30801daba5e419e426d89e0d5c39f37aa748a1702261cfffd1d722cb4e18a0afbc0e7ececa37fd30576999bbf74aa3621c897e5b2f91d35a4ec9304ad35af47995d1da7fe278e24d17e610b4fc3a49b7a0c0356db28fa8f9a53443d5a6bac0951c8bab82a78d713921c448acaac882427e761b85b1594883697dff27b80512442a22521ad9155fc6779f5d9151bc729387d482981481080e6a30c733f4934f0cbda006ed042e32c3a1c12e1374", 0x171) [ 804.962405][ T3703] usb 3-1: config 0 has no interfaces? [ 804.968311][ T5] usb 6-1: device descriptor read/64, error 18 [ 805.029685][T13702] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 805.104819][T13702] 8021q: adding VLAN 0 to HW filter on device bond113 [ 805.153694][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 805.163119][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.171291][ T3703] usb 3-1: Product: syz [ 805.177385][ T3703] usb 3-1: Manufacturer: syz [ 805.182415][ T3703] usb 3-1: SerialNumber: syz [ 805.273448][ T5] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 805.304146][ T3703] usb 3-1: config 0 descriptor?? [ 805.472019][ T5] usb 6-1: device descriptor read/64, error 18 [ 805.595607][ T5] usb usb6-port1: attempt power cycle [ 805.607605][ T3703] usb 3-1: USB disconnect, device number 3 [ 806.032106][ T5] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 806.222810][ T5] usb 6-1: device descriptor read/8, error -61 [ 806.491916][ T5] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 806.662182][ T5] usb 6-1: device descriptor read/8, error -61 [ 806.782950][ T5] usb usb6-port1: unable to enumerate USB device 21:34:22 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) 21:34:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x75fe0467, 0x4) 21:34:22 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, r0) 21:34:22 executing program 0: syz_clone(0xc0000300, 0x0, 0x0, 0x0, 0x0, 0x0) 21:34:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:22 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 807.626529][T13719] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x12c}, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [@ext={{}, @device_a, 0x0, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @broadcast}, @ext, @not_ext={{}, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @broadcast}, @ext={{}, @broadcast}, @not_ext, @ext={{}, @broadcast, 0x0, @broadcast}, @ext={{}, @broadcast}, @not_ext, @ext={{}, @device_a, 0x0, @device_b}, @not_ext={{}, @device_b}, @ext={{}, @device_b}, @not_ext]}}]}]}, 0x12c}}, 0x0) [ 807.718108][T13719] 8021q: adding VLAN 0 to HW filter on device bond114 21:34:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000580)=@proc, 0xc) [ 807.845649][ T3551] usb 3-1: new high-speed USB device number 4 using dummy_hcd 21:34:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 21:34:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:23 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8992, &(0x7f0000000040)={'gretap0\x00'}) [ 808.033435][ T26] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 808.093224][ T3551] usb 3-1: Using ep0 maxpacket: 32 21:34:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x37fe0}}, 0x0) [ 808.223045][ T3551] usb 3-1: config 0 has no interfaces? [ 808.238459][ T26] usb 6-1: device descriptor read/64, error 18 [ 808.337198][T13732] binder: Unknown parameter 'defcontext' [ 808.355651][T13730] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 808.383318][ T3551] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 808.393003][ T3551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.401166][ T3551] usb 3-1: Product: syz [ 808.405665][ T3551] usb 3-1: Manufacturer: syz [ 808.410410][ T3551] usb 3-1: SerialNumber: syz [ 808.450816][T13730] 8021q: adding VLAN 0 to HW filter on device bond115 [ 808.479166][ T3551] usb 3-1: config 0 descriptor?? [ 808.542461][ T26] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 808.777268][ T26] usb 6-1: device descriptor read/64, error 18 [ 808.845563][ T3551] usb 3-1: USB disconnect, device number 4 [ 808.912468][ T26] usb usb6-port1: attempt power cycle [ 809.331954][ T26] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 809.542172][ T26] usb 6-1: device descriptor read/8, error -61 [ 809.828487][ T26] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 810.012272][ T26] usb 6-1: device descriptor read/8, error -61 [ 810.142775][ T26] usb usb6-port1: unable to enumerate USB device 21:34:25 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) 21:34:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000001980)=[{0x10, 0x1, 0x2}], 0x10}}], 0x1, 0x0) 21:34:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x100}}}, 0x24}}, 0x0) 21:34:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000080)=@nl=@unspec={0x0, 0x900}, 0x80, 0x0}}], 0x1, 0x0) 21:34:25 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 810.926157][T13751] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:26 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x54a1, 0x0) 21:34:26 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'gretap0\x00'}) [ 811.021616][T13751] 8021q: adding VLAN 0 to HW filter on device bond116 21:34:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000080)=@nl=@unspec={0x0, 0x900}, 0x80, 0x0}}], 0x1, 0x0) 21:34:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b0000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 811.135246][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd 21:34:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, &(0x7f0000000040)) 21:34:26 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000640), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)={0x0, "81e1dff4a8a74669fdf01be15d88d52f31e6c0020b536d11312de9558acc3517c6a054a362891bd95707e6676dc87caf24d7c18b4909903b67df94b4f2aa37a0"}, 0x48, r0) [ 811.383560][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 811.389151][ T3703] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 811.468179][T13763] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 811.532684][T13763] 8021q: adding VLAN 0 to HW filter on device bond117 [ 811.546878][ T5] usb 3-1: config 0 has no interfaces? [ 811.622477][ T3703] usb 6-1: device descriptor read/64, error 18 [ 811.712264][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 811.721603][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.731562][ T5] usb 3-1: Product: syz [ 811.736363][ T5] usb 3-1: Manufacturer: syz [ 811.741168][ T5] usb 3-1: SerialNumber: syz [ 811.762135][ T5] usb 3-1: config 0 descriptor?? [ 811.892083][ T3703] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 812.082286][ T3703] usb 6-1: device descriptor read/64, error 18 [ 812.167012][ T26] usb 3-1: USB disconnect, device number 5 [ 812.202853][ T3703] usb usb6-port1: attempt power cycle [ 812.612587][ T3703] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 812.783409][ T3703] usb 6-1: device descriptor read/8, error -61 [ 813.051973][ T3703] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 813.222264][ T3703] usb 6-1: device descriptor read/8, error -61 [ 813.348676][ T3703] usb usb6-port1: unable to enumerate USB device 21:34:29 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100"], 0x0) 21:34:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000080)=@nl=@unspec={0x0, 0x900}, 0x80, 0x0}}], 0x1, 0x0) 21:34:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b0000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000780)="95", 0x1}], 0x1}}], 0x10, 0x24008004) 21:34:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x15}, 0x48) 21:34:29 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 814.267820][T13778] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$ppp(r0, 0x0, 0x0) 21:34:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x3c0, 0x278, 0xffffffff, 0x278, 0x278, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'ip6_vti0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@local, @gre_key, @gre_key}}}, {{@ipv6={@private1, @mcast2, [], [], 'wg2\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private1, @private2, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@dev, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 21:34:29 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000080)=@nl=@unspec={0x0, 0x900}, 0x80, 0x0}}], 0x1, 0x0) [ 814.330012][T13778] 8021q: adding VLAN 0 to HW filter on device bond118 [ 814.452294][ T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd 21:34:29 executing program 0: syz_clone(0x1108000, 0x0, 0x0, 0x0, 0x0, 0x0) 21:34:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b0000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)) [ 814.692397][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 814.752443][ T26] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 814.832529][ T5] usb 3-1: config 0 has no interfaces? [ 814.986246][T13798] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 814.998744][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 815.010093][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.018653][ T5] usb 3-1: Product: syz [ 815.022988][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 815.028259][ T5] usb 3-1: Manufacturer: syz [ 815.033165][ T5] usb 3-1: SerialNumber: syz [ 815.090314][T13798] 8021q: adding VLAN 0 to HW filter on device bond119 [ 815.153219][ T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.163580][ T26] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.197722][ T5] usb 3-1: config 0 descriptor?? [ 815.255317][ T26] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 815.264715][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 815.273981][ T26] usb 6-1: SerialNumber: syz [ 815.349029][ T26] usb 6-1: config 0 descriptor?? [ 815.579761][ T5] usb 3-1: USB disconnect, device number 6 [ 815.611086][ T3703] usb 6-1: USB disconnect, device number 37 21:34:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101042) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7}, 0xfffffdef) 21:34:31 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100"], 0x0) 21:34:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "941be2"}) 21:34:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "f13c1df956b7408368b2c4eb1f41d67e35aff590fb6bee36beb72a0cbc504e3d4c64f3c43e13805a774d928558ca0765a12c959ab6081e622901f1f79ce14d64"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x3, r1, 0xfffffffffffffff9, 0x0, 0x0) 21:34:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b00000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:31 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 816.334160][T13809] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:31 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x40000000) 21:34:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x4c68e9b8a6769a87}, 0x14}}, 0x0) [ 816.470628][T13809] 8021q: adding VLAN 0 to HW filter on device bond120 21:34:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b00000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x2c, 'system_u'}}]}) [ 816.802823][ T26] usb 6-1: new high-speed USB device number 38 using dummy_hcd 21:34:31 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) [ 816.863780][ T123] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 816.888560][T13822] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 816.988237][T13822] 8021q: adding VLAN 0 to HW filter on device bond121 [ 817.062311][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 817.115954][ T123] usb 3-1: Using ep0 maxpacket: 32 21:34:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) [ 817.203399][ T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.213885][ T26] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.243400][ T123] usb 3-1: config 0 has no interfaces? 21:34:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b00000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 817.372770][ T26] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 817.382322][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 817.390664][ T26] usb 6-1: SerialNumber: syz [ 817.434543][ T26] usb 6-1: config 0 descriptor?? [ 817.440513][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 817.450605][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.459331][ T123] usb 3-1: Product: syz [ 817.467545][ T123] usb 3-1: Manufacturer: syz [ 817.472947][ T123] usb 3-1: SerialNumber: syz [ 817.545486][ T123] usb 3-1: config 0 descriptor?? [ 817.617505][T13832] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 817.703363][ T3703] usb 6-1: USB disconnect, device number 38 [ 817.755044][T13832] 8021q: adding VLAN 0 to HW filter on device bond122 [ 817.888120][ T5] usb 3-1: USB disconnect, device number 7 21:34:33 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100"], 0x0) 21:34:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 21:34:33 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) bind(r0, 0x0, 0x0) 21:34:33 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x23, 0x0, 0x0) [ 818.312314][ T123] Bluetooth: hci0: command 0x0401 tx timeout 21:34:33 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b0000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:33 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) 21:34:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 21:34:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0xd8}, 0x0) [ 818.757632][T13851] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 818.772642][ T3703] usb 6-1: new high-speed USB device number 39 using dummy_hcd 21:34:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007a40)={0x0, &(0x7f0000006a40)=""/4096, 0x0, 0x1000, 0x8}, 0x20) 21:34:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}, {{&(0x7f0000000440)=@ieee802154={0x24, @short}, 0x7, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)="a1", 0x1}], 0x1}}, {{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)}, {&(0x7f00000005c0)="79e94945d4fc6f367833f73d51af2e1e326f269d280c4b59786d82c4936b474cec0783376064b8a0ab5bec7793c00a299bcde3b0caef53aca95daa4d0f66515149b85176830a3ee8c04a3a677b02f175f1528666b545988a3dac2780fc02db89e0f07f679cd9e6c953981dd8bfcb61c6fe7c5773ac4f80656577291d8b3a8893488457971a0bf6fd43b8acdddefdc9810c910ff5b30bac5f402f09d86294d4d5123afe4e79fdf67b1bc9ae1f8ea21ef73856b375714107360f3e5bbd8bbde69d1182543a25fa1e9149af951d"}, {&(0x7f00000006c0)="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"}, {&(0x7f0000000900)="ba1067e94546f7f31fe24b9a85ded88242b389ed90b61fdc1494d99d87e7f10f10316dec197eb44eda27a035ab2338d1db506391368b4edaad70f26d4e9b5a7dccf18ad965dbd943e20f8669e4b7816b25232e3f2c78c1ea73cfebac0c5e6556c62da09bbd1cbfeac6c16cba5f0d48c7340be1b2c18d8fa5ae782690a8ec4c5c0f06355f2b529acd4549f81134b89debf1af050f354d59d9a5db1f38cc79677c765158462a536f7b85412091fafa78847f393c13af271dd79975cc34fc516257caaf3e854db14b61d6f6a19520258c574960ef76e72f184109f27578132c4ec54b3e19241ed80103f230fae73bf758816fec0ef212ef05da15934b46870154fcd5bccb2a33d57541c9589caabf7ec46c68522a72e04289b09ffcc0486406eb699137679499f0f74fe5ecf66d715dfa2b0e5eaa6ae394997efdf9b64254a25c8f8551c1a5986c9a8d366afcb054ebacddd2071684f7f62589d9ff119268d75575e106e00518bd0bff02da05f5e8ec2c7792325158a82e1fb368040f733abbaa1ad3bcca9032424aeaf1e629d67a92c972bb2928498dc5dbe7bb51ce1f603615bc8b1f4e4a299142148e3b7b9235fc9b853385e90311cf00fd3d10aefef88b1a77d54358a5fcf6a31921419d215754be2d5b875a27becc3a46e2df508db922cdf5885b2606578dddb60f9290cfad207c02f6841d141c2ddb7f9019e3a872b8f35a5d1ee395648e9d03138985720d11e853706cb6d1cc37011ed3f82870ec5e76add7d4fb71cad71215aa151f76a6d7cbc3cd71bdb458f1bba74dca4c64e5024d7f9d278bd01c258d540a781ff098d420a5ae600431b4620cd59da6a1e62b3bfd66ed39f05ccaeeea446b249a9671405998286af371bc38991f94dc778dddd9fb3ca9001f6bd75d7df9da083abb97738c866b364d011b801cf75ae4547871d510966346028d256609bdf741bab3d7e2a23bdfb95e7bc3eb7bb5e37ae888f09a5261b3d321a620d1b9c7bfaaca0d0b40524e82b6f51a338c9b529247d1460ea4b0cd3390e7867958998090dbf08446570dbfa58e6b5b53b06783922eca5d48159cf2534eca48688ba961c1b1aadea3eb3c73939a3192bc81663679dfbd81c37069b203aef204831899d714758d489679b6bf0ec74ae2a0e3181c071f8e32a2f49d1602e796dc8d5af5add848b1875c3d84bd6cac199ec022ffa2e755bea6f1edd1f6627a8a370729a4d62e3a506065efa765b818acd09f549e8a412c6dfe9d5ca9ebcf90ff8d61b3877f0b8a49e9ead7040a9b546a020071db7af3914a8e5ef40212d72cdbe66db50d52625694a8631db2e29d79caf9844af0e2bd08d4228a2d578341bfbf7638ceeb7d90e86fd1751d11e594052cc9d53f8422cbcf1e05c8b55b250b4d46285d7d778c39bb1d4cd8d7166cf75bda744c544055d25ffb51bb5b1498def3d894ec96c4f6bf0ec1ff59e39ad0773c52dc186889e7716fafa269bd6212b7ec402e88609b8778160014d6829dc43a5dd5b0d1be5e7cb76502476a646e3f1b34cea1707e9928ae98ee3b521ef7939b20fcb20a68da86c6bbf1243f4f97e2db4f417e2d5d25122b6cc7cbb8da414162194b576f084778ce56ab3dbfdc9d7f3ab38a77a7b16948a060a313d56920775c8d44587f1c5ad44958ee2feb3857a231272487278dc5e6f21282e3637e9ab172dc5e90497a8babf8043dc0e46084a01c8ed694e86f8e5b06579f4563e4c57fee35307cafd1ed7f5a07764daa7159bae5b370032652395e2b058ab678553bc65c594e62a87975d2708e348e22e86e79b2f9e9ffdb551237978c13d2335e96f3523c6e9b80684ba770a797b19aab454ea399e272add13049913c7dbae3bc0ce4c9ad0773ba24b22ecf4a5c0eb98650d05522e34f096b3eef57a8e9489e772314cd86902151d8022c5778f53751ef114ae16669643eb3ca9b377199940f7cc32b7c0de2fd0093949ff2e9ed8b3b218d44f0541dcf6f09e05ced5c9f41b6759bac4684962a5ac0ce71682e9345087380235ff36ad1b274ca321dfadf4a6c6ff6c34e4ac5e5a92730ac3cb1b973d13475fc2bfd1465b9ed50bae54965a3b08bc63cb9c85e75e987f9d08873553ca20ccf950fedc3922f3651f909a3f06024af7bf50e50b6717502cd2cf07694e8aa7b6813f33840bc17b6ccd729053797acd4ca0cf37df36e49cb37d03f6baf9eff8ae2d8b312b3a66a6be6db90e0780cceab90d953cf62b8b131f4fb18b04245703fe1183210d564f132b0eceaec9635e6cff2472c30962fa449c0104e53f9a5a4b2100107a61b7db816cec13a18784e1becbf8986334381cdc89b3c0be6140352718f7a18bd3b6b5d9b1b0cb5f2fdc30dd8e6c7a2c505ee8dce8597c1f0a309a525b4b7e0142507a9f3e97c09576ae664ff061c435ba6743a8cfb91ee0e1f1f9a0451d1138fc9f342cf3a5c18047c724e1276d8157754846d00651f119087247f4e0a00f04340062752d09a312b872ba6c2842b22544642ae8a0b9a51f8d3dc997c52ac1d33d7deff3ae8c03f7259f767452ddaf051c88936a362c5db66c51bf83075e69ac911dbddd8273e27deb11282c50ad00de48e627857ea40e3072d237d2866758dc4d3890aea901f00a266bb9bac063e7180727ede6604217b1e7bb81e5549a54016307285b680589d61262d033aa6623e75419be503be3e69d1c912fa603a632269a6f053fd112d7988a1f8bf5f5658271f30f68f10c9ea561201b74a5da93be985150f59cbbddd40ab394281c839823d713677dfab2040f5ff8ebbd67649e882acbfe4270528320388a32e9b5d2fcedff58cc987d76e2c45068fb893db57662d3346c48d4d5d527bb0d23d9a1bfa5185866e9ac7f5c338c8c4708f9f27e5e31f8c26f9b778bd28943043404c8f40a0f7e21981062fe72471f9e62b2cdc4158d704b78276875e470e410a75a6bf6d2eaff93efb62d7a9afb27d1b531f515a1abed177be99c951f3e4d46752d3f81e75c64435488bd8178195958b103603bff977b13d8a34aa3e2d26b2b6278de8613d2233847a3dbc87c0c44dff26b7e5125a75f21cab06cbdf4f1ee2de98be8a3a8d338522572247f92addbbce1137a1778868fc8421283ffcb3d7ed48e8863da4d66c80b5b9581adc0c303a50ddf591ca412859eeee8ead6d5a586d4daaa79500d01cc52e8dadc2423319178bf59f2bd8488b1a61e965a2e3241f43ca9c9079a3f92c3321d49212e51e431fba78634ed2da65ab8e178eb071cd8f32aad58ea543293fc5016185b309ab37b450dd449e61532fc0d65c50408bff29ee6b343da2b557d02c882482dca76fd8966589c3b1c05d71ef00654d3271dbda39a9c215a47d7d6f04132548a463a2ecb7b001ce26a53ba99d223483749956f3ef8cf25663deb04b403a742d976f1a94ebcdae5802cffc06340e625365fbaf9f756082ebc1b5203f03559503f00cc3564b065bc12500c852060e2d42b366f9cc437669bd3de0e909da7a63882c6177d252a5663dd0e3e5ec9cf23a6fd9727a6e566753189cf409b76af4d4f24cebd62c227f470be2f9223ac2b6818abfefbbbbba104b55f6830068bc10f0f92f8d3a3721fa14fa3ab58c7e41427b9f50f025c97c613b409dd1104b9c236dc3aef066cc1eed804cd88ec5d6fea92867aee50c33dae2ec3b746c4049bc8a5d33bf6dd106b8a6fe0f9408e28a17f11672df2e2320aad3ffa5bd0245e4df89c75b116b3a9f4bc849e9fb889c0995fdcb9e05cdf8d32ff7fc900ec69c1ec21f29646a990a4fd91ab9cf97bcb6b402c2b1fc8cde7e5b9e61746ec5317ff6452f713afc15ad2cbac880d345dc73f1b6c1ee5e54e4f097be9dda54df9ac60c874f9a055934fc8e5854ad6d7d37579b4664af0dc65a872a887a334f9f0d0518701630f7f79a37c86e7c1e382af669fbd316faa0d29c0ab90aba3ed245702ca85d1ad8c883e9cd7689cc47eccc7febfcecdd3930f6e365277f0981529f10220d34fa9a957c5d215f195957cc0bdefa693a8ab11a310948d41ac895164ca9ab8b048c57eba9e1ff24bfd0821714bcf85baaa6ef0017e38d14d0553778b28e3515abeb832857fe7142da23374e789868f172f71877ccdffa6c4a2157ee2c25c7610af7837ea8b104ac230d3c9af162f65df41e6f6af06ac2f9ba0e585b85ef8de23d27448da3fcb714c02825252f22a36ef6ab7da4acd7efe6d67cde2450c24b7805dc0a93c2f7d1a848bf6c00f91b44642fbcd20e9fb028eb1b4baa114b2d8297d6bb92467de0ee73f736d2361e9c133a27d36995f2a639ac28f068e0ee4b366c50681aebac95f255bf667b63d30dc233b68a5d8c2f7db610ecf38985cdb688c6774f6566916eb5b7cde547513584fcbeff6e6a7408f7cb77c66d71f3c01495645e0e7dfe0607356a5462d377106fe46d41851716db659dba340b25789a1425b46b9a9f1e8d511aae0fe54f712e3f0d7658278bd4197dc7eea41564d41f88e40414dfbac66833ab195acb6d307df2fbc60b335f3164b5e5df8f0f49b10732abb2e752522fd7c1707a9fb91eec646879a4d3539a24bcc71c62e8c0cde228740782f8bd068f10e6773baf1f66daacedcce175d07a0f60bbca00a0444f7bc69639078358213da7aa000105d41a42cd01e2855987b71f25fc3b8dd56ca597679e92596a990d66aa9fd3f375a9c3adbd613cec2e3fc76fd09d2db0f399ba5bfd991a4a835090b6c12b0c0e659a6006bc2451cf2b275d2cc019983d320134e65e3b9d6dd42f66610e3fbf3af4e5a59cea2910697b59af4f9a10c14025923419e73d1741881a4e9bffa8db27867cf8f2f786111192a5cb9601f3799ab79038ef82504d4170f2bc08323adce147fce26fb319f21e8fc5faebcfb107c6e1f0e2bada287d0052621f091364d9a4af11265d6eff8d5659d652691265d641d0d632d17b997e2590577cf1222e09f785200e457b9065797a1035d36e0a53c25d070e93ff744ed7d9f84f22c06467ed0edcdf41ddbdf42e26f3c211a76aa3bb105d30a0315be41fac9e155a1bdd10fcb6fa91d4ba0b0c8804e73eb93e9a86a97053ce146f08da42c938d28966a145756f6099b47642fd4907555f2f67e91728590fabac343fbc288abe6ddb0caf8c9074043753827275c5403ec5580747ece82a5dc693e8209661d295445be48c6680a6a1f50727a970cecbe5a67d18b5b9c81b0f01c5a8804c8861f80b5c05b6aa467fffe16d737e0f4cb0db67c5fffdb2a34eb9efa284497e502d0cc401f3051c5b28b567f229be96bf856978fa6eb11e0eafd58ac07193b4f9f1f8f5e0ba2d13e5271f486111880fd64c1c2c956fea1cae0ce9f52ece5f947a5934d79d061a24ad8dca378c85fb3a590a382ab4d7a644f7fd578de6738970dc8078229ad218e542742e4a9408aa00b87346c3d222373ff9bc83ddb949c18d05460a774ea0b5d636c9d72e7a013ce94f134348334430a2e6babfdb604baf4981a2289307d967eb1dfd745179ad16c416b041dd93d7483d62fc199c9ff115cbdf5e4ea570f8da3b6191ed0a83f5250dc5a0990415f9113d5a1a61fdf3a141f4f31f5c9c67a925c31e627c16beeafa5078b0bf24cc759ef4dd47b4e53fa811ece47c163c7504bf37a789f456d9cc94b2f9a9dc5b5e11b54541ee5dce4f2f41ff1ed9d30478a34ad8a48ba8c7824783a5469ebc8ff7d334c7cb755f0ecab15ec980c808245ed04ccc64aaee59a847c17e23405420a74e0ee1059d708511b403fb8cbc2a413d18b14bf30823b5fbe600df"}, {&(0x7f00000007c0)="e134ffa859b519a700c52e86d09010ef38e6002b2ec519cbc95849af3b07167bdde559f377333dd86a2dee4f13c24862650998ac1eb0c29900b81e3fde6f7464393b717c23fb7a2d1483d4923571b5c59cf870e845f35c8eee56aafe9dcfc79d08e30a7e84acb55f027a8ccf67d6fe73236bb63e87adbab41573359f8bfb497e8b0351c04d1d2e0e284afda622da361d9a317b022e68e27f0868b11ed62d22426e44bcf1a762044f883efa63f5848fee3840eb7836ece3e365f5f9a00fcb0480511d2d5c13f4b48d6d7003930b063faa1994"}, {&(0x7f00000002c0)="47ca56cc8249c1aa795b30cd245c82ef1a1e9a91ddf1c612ac30045514ac6b6a09ba0562aed04ac380f63525b0ef36c0fbc893e4278f9afad1c2a8b29c61138d80d56208114d3e5c1cac3c85a8d11dda3bae0ef998b8de29953cee19e4007da005fe7564f02829a91efb72173dafdca41b08508074428e1b5ee7"}, {&(0x7f0000000340)="5356bf982ac5c21c2dd44a"}], 0x0, &(0x7f0000001900)=[{0x0, 0x0, 0x0, "183804e3da3eeba898e1b54e83e3da03b6751f7a1946a7689c5824416c951561237e202d23dc85646b3cdd4a918087d560c1bcd21c13b1"}, {0x0, 0x0, 0x0, "7dfd357bc7b2671ef85339500ed37d630728951d9403315228d3504de0d70737ed932e28a0e8fa42f17b7670ca4b576a530cbbc664768f32a25bc2fbb096759335a5278f98a5d2e39429780f74735d71a3c0bb898c6267c9f2ac5867895492f0d0699d54faadc8fac7da4ca390152baa34e1988e519f86d029de03dfe32cba6f17bf2525d19b55f49d81852a08b74159360269ea5d9568f2e1833e75838719f424b566483cb02feffad0ac3fbd4c66752257ce30c9cbfeb4ad0cd93f2a8bf1a3fe655a99f15f98ea5e75fbcd409291e754401b5fb824449b1014f326ed11c953ca3867dd7f503f15bb09e7da6c4e33a001ee95915c18f7e18e385878a5035b6896337297b90b2259c0acc1b971d5c9f91a4dc5d283aabde6a3a4099952895f4dcbde270941ffba70d9d58d0563540ca6c2e8ddadb3a439ba900ea984981448fd8c2e42d96096f291610b3d42041848936a63c769fedc62c48bf62dc897b36dc166284faac2cc4de0ffdf903ccd7f4d33ff9c6d1da518da250dbb8ed9100019bfb63a2043a7e64d044b70a95aac66757b1a911a55f3f5f7d8e3b8a01fbbe5a8076be3326d407242d35deb3e43d8325864b7a5ab9b6eed9f65b0f5994024e4db016ff31a77e3662d12422ee13b483bd92fff1a12961e9930b5c5992409c6d84a7010ea7d09789d25c23c1512688bde3af2fde833daf4bd001cb9d711385ae190c1bc5fd62c91686b4ea126621e3bc23130b23febeb2f783bd23bc223fb01a8ee02fdfe2703bd2b439e9bf227ed73563fd46c45f86db0a99b13951a41231ac4788bc7ef0cba3218107697db9f2a0b6e750aba5f4b558bd210abf68c8dbc61fe95c5919fde8f1b65fb5a17c5473b9b151775e9fc46e3adf31e76b3502d7013d4b63bc62ec40e069f5bcba1842b5924676b6ccb710185ba3619ef600e6b59f021faab204121b2fbc6d98c015cc7149319564cc7276cbed0a73c3480b653c7976b2228cd54f9a64836e76740fc9829564f8f0fe208816b166a3756f0450dc56802abf0ee2540e332748dce364bc32cc0073281727ad4db9ee19006457a8b95f0a4d35ea76331708a23adfaec6516cf84c156b2198b909ff78f1c195a7b668da92c652f960cd8dc4ac7639a48368f638d93904242185ee02802c754b28e1915fe3da90a0dd42378bef0be561c7df5ae714e65797a5c8169d22afa9faef054452d66d60c3d2cf70561ad2cd157b846ff912bf7b0125672623ad94c9ffe205e99c5fa62e253100687e36764f84b415590c5207b7924a3db77b3405aecda4a08c46e6d65f89a0d4b611bacc87afb9e51707139b5640fe8ab1f8f5d8a64832e245ec801dabd7517d12e8b1e883c1410f22047e59e21c43b729fbe225cf523cfd5a92a6f0f454a034b2952646e83c6999fba2bde7ec581097a33d92a4c7086d76a7f12690e9d64a4e8144de0b4edf283bd63c748088a0353fe9f5d2a895df085a63ab360c2c5a63302740525a15f473bb6aec8835b654aa8a3f7757b7c29336c40563cd803a12dc021d77e4dc40369c4f7a4f4382fa6f340ae1735be0c772d2eb54f8f020f21d9508812d13d789cc6110e8f085e97884c2918267d9c7f67937ab348a7802df5af3a5a308e7e77e791260dd1ef04cfcf284b7eb6307f7afa128d6470543dac4268305d0e90c3b6f2c77a741332e4782057e663d7332c58bf07895ab26e07fe4604ee78c6858ab8a12aca6ac074df76c4b9bbfb7f22aa943b8c418106f5fe21644f8849793f1aeefd794f29fa1095dbdbb74b89055f6b54cf9132f390dc268a9e07a3bc75f9b2b64ecd4decfe9868b6d6c5d163b9bc891535a3454a55ceea70d6dffdfa46d64591ca5989affc8a4270a5cd279f19de3c7c92a454001fb174744a8a8a8cd66c0349b374f799015d6e59751b019bc0b80e54097df45ae849c796d70a24b1383be3b9f8dd44fd3a11e6b429ad6aef80a2ee56d3172c9eb8bb6e8e2d95250662eee136c89d23de41db38c3700d0d1b823355d22976aa3b0c0e990fdda34bc43da7eed59777083cd6beb9b7269fea9930388a6365e21bc0a27a09f0b64d4eebc4845ffdb0774d88ecde66b8119c7750b39fd129b6c288642fbad6c1cad5c042dee786a2df7de2d14626707745082b00fdb99906c94881139768768d76e802ada4b227e64f6ee3a365c9918a9987b2c24bd384173a7df1acb4ff73262bed9600eed745c529459665913b6c0b3511529cb869323ab59a2e32d96b9987bba91951f17d4dbf432c430f2cfd2f3af65305bd6600b974cf8ade77ab6a6c0cbe1a0416e8a06dfb468c3b58223052529a2b08c40e63c540a97e837fb09bd3ac5b5db0def5a5444d9e0ecedb673c16d4d8d6391c7bdd6b0a6a34de791a19ded9f0302fe499d0f7593cee6d4f2f443e3f021e5262fafbb36603c52c57ccd8cedb917628fd6b6eb1262976f1abc80112923ce06575696104c7902b2b96306d0b5c684cf6a7df3117b9bbdcd05a53348aa6e9165476735d6280b56de1532683d2b3e076663990c1708bcd43bc95467be096e45d4cd9e1d00be7edd8c995126dc8d78f87ff7948d68b264104e8b121937537e0e6e81622986b81526bc69c5b8f5cd15bbe5bcbdbd25830b404c329426f47743f07321fb05dd11c517620d3eb5287ce41990f7bb719b708411d76dc10142042d18f7dbdd372b6a29f8bd790260ca1293197254f9b53f59099322d7f09f30b797a83fccabd3222d7f2f30fed8cdbb0615f62630f897f271f7f62cedfd6897254f4f1ccef9da72401d630485599f7db154a27cf8b9eddb4ac4348c26769b28df789fb66a89f59c5843e5614a966378f3f2761e6c8634a98cc65b4096c7168307c6a756879da3503412f6518dc68ec44674a35da911e6233f9f8bda9b711e03af953ca0f96711b24d56ee9035f104f6b97e33348115e41cdbb5e3b60b5737825da7306d8b2191a0042e8c968186cf855400da029c7fda93a4bfe353d0dc3cc07a1d986be598474d9217836175b91b9fdbe5d42b4d6d1d843218a3419859d7cdd2055f45c5b4f3b30f18532ca2bdc833a4b30688f6c941838dfe836f169cb9218d73b8433ddb9ce8eaa2ac86407eba37bc62293d4ee470af1650335023bebbc15a6b4641fc90f42f3f6aa5dd979494396306ff908b4900ba36a8e11886a86eb49754052ecdeee631d5d2ac6c773023d5ee85439da5b4ee4a763920c327be57d0b6816617e62a5ce550201432d2485504120ad995a0149d28e3f2f9db54820a72c46869c97d48cd1c836be2515758fe0bccb6f7bc77b0422424e4b5f94cc6022e1a87748a8b17262085ee789d190237fd48d2669aeb7e430d4bb1fb823bc4df79e3f5661179c245f2af0b8df8863919680e71740bf4f1af400a66535cb5ed6724fe21baa1b96a7dcbf30f953ca2bf265546ca8556da531da6172f66de4ebbf52bb1a32197eb20400998a4bafd34cf928647495964f0fb011fe42aeeef1a7773317bace55b2844b192743db2309ee8d728a5740c3e0d7e3c74a3414213ae98d6a8568c0edb6db2746ad43f666a2af7728147b0d66a28732e3f4b6905846d0660db6d86b5104978d70bb9956a1f9be5796de6aca797007e1cdeed465cf2204aef7a436127989f8a96ed4657078f34e3ffcbc766e552736b1417e0b7e818c7e271cd745c7d52467d5c9a680a46009fb03f061090a5d100cfc0a2e6d12f1f642f853fc3e038fe389ede771032137958ca9915fe97431f335ff575822ad61969944cc8fd3b227d7316b3eca6e906894dcad4209321564bb7ad775981e6c59093ea4183fc773800887bf311d493c5f8651e31592c8bb5be07b5c3f4b97bf88bc961800ca3efa54f0d48489337678c649826074f275fc822c845d8f3ab178f4a9a76a6a93e04b9c1f2f1213b8d067de4c176dc8b6b6d150594bf35f26957ae7cf6e428fff4fff41445b55c08d1f7ff5603273e2d4d96c3f3f4ba17fd5bfcf58dce47a6c3c92cfea43804ad4c398323e486b474528142f1a2d19034dd86276f9e379398872fdc95a34169ace9fa9d245f48fbb86052c7fa131724b7c2c398cd6dcef780f58786a88bfb6db520d2fb040167b933973a9d85e912c5b7b27a1a0d680b633d6d7e5850c058007c78e1748c3d6267a0098ff4f79a2db53ad8c16ce2535f5fe8feb807bbe152ddce0d37fa83de92cbe79a666312238ecb793ed3c02601cd3498254e92ad2f805da872f047748eb4d2d98e8e27ebaa40ac9843098ac442420f5b0570d1f1819d3601dc03405421f9b0cbed73b36b941500a7386af3e4bca0b6928e3e8d04f035e4c8de971444d34c996a60394e64e50f46d54033b0d709dd7668b9ca22f1ec48b65c8c2b0e3d9466a5705c47d56afc127479508d7b96d28d6d5cdade901e5f65560b191cfc919a95aa14e037f636be166f98e85300219165b9d725f717e8339bee3071682da86953385577a23f2db90a083c92772ffd344c473386f862261573b9a2fe098199324bfb2f04c453bad42b7c185d30d98d441fe4351465fd573e077a5fa2e3176d72038e56098f5de8cca12380b4de6709e80e280bab8aaf514ab25d429970e7497edc564a86bc91a1d07f75d33aadd650ee23019bd6c9a0a55eb0f4993f3c1014020d263fee26d71da92f048f93b2c8d0f81c4b44c864bbb3e40018227bdc20fc49dad21fbf19e44b0cb5f9d9825a9f901e34cca61e4fee9d623d57ea1cb7c0257f3fd4c580099255ba3221aa07a3aa58c80b1d5eae50f1975ded43a00656fb60584959f8b837f395a31eab486460bb69987ebe9a19e03c0a7c7372786ad0425624c893d714ccbb0becfdb3db8c6e5dbb76b10a0c2ea490d365bdb74476159b1483e8b0a9c4c9fa1507b5a8873925792fc0d5e4824ee16a06fc3dc86612fa6538d64fd84497ec60106e62cf4d233ba0852c699483ed8037e9e43a564453bfe27871a131cf4639008864106a0fcca37e5f44d219c3b8df0d61f9e0fbfeb4af2a03c345c30b1bcbc14ac313fbdd6a9c1e636361f624e7f5e2b87086fd01c79e36a773c3f3d5ab2b76df42bf7946f63c0232b97e62f76e41c703db6a6e6cd9c9cf1e54e11e5b24363b88de1ec5aaf3a77c02678e8ada46620b13e2e043fdbd4807dc5288d70ad261bc85ac6e947c1b0a4bb8011edbe827453cf3cb87d779ef78b58eb621e91ed368452119c348b2ac2bb75c23ab215da147bea754935a40069aabe2122c215643f40f8cf5da3707d1f1ac7d91e1458b7854d8597a5db0b1a435b703b56afad4ca4528282d5bd6b0b9131bf69e90170e4bafc4a3bc5c9330a550d419d854cf0c261cade0e3ec66e8bb73ad16b4b8d4b8c7a85f260c1db368194e3cb0ab40011e881c99e19d75f9593f9e3c7e23b78ad7711922ff524d739eb072099076f1b7ffb435deaf699407b1e03ea82ea5abcf9f504a8cc191900202b7ed75810f1fb8e9b3ffe3a783513da90aa02aad31668ce524d4db8a49d2a804d713bb7e1f9dbe79011d7fb442f77fd7a07628ffe89dcd9f6f9e25a085b48100584bf68592e32e9af20b8049a9b56159d47f18c3c372c7f76eb1f5b75e61bd556a6c51269c0870a15733ad68d9764d61e3b0e363fd3f7adfb7359b6d7a398a4d6ecd6204b6fbea0dc37bea8b68259615225f9f4f72640504b4f64fa49b9fd441810b6940cf32773bcaf6bbb1a160382faef31c5acad250fda0b6e013aeab30ecfe5688210f65529982b1bd56ebb4a4fc9d827e0d869fc2500ff213861f65dc1c4394c712be0c0c12c3e1299"}, {0x0, 0x0, 0x0, "b85958fec1fb2d9bfe85b71d2a719cfe76b15d860d2f0d1fb9fceb6363cca6318d371c8c161ed887f4ff25824b3fde2f471a8a0e61faeae45a002a0f5772ee005b2966ef3d5f04b40093775e72d9cc3ec6368cae66d68500f0b873c6a7ebff3f5ea8cdcb91f6ba418223b23939d7db4d1ddfc2d9a4ac3c6240cb0fce67ec8b526d2b703624780591d63faa9fb8d45fcc43a5d3173cb47dc1eb59547aa8573139"}, {0x0, 0x0, 0x0, "59de7ee55715b82d86d0a275977d452706d38679cebe0801873899e00450ba04eba4ae53e76ec38a4f1b043e5ede5b312deaac42a1254f0dafe5b0b37a49c6659224486237881649c95381a30e1e616852f5f9b65a2c50a47b29884d5edf5523ff7be7acf8ac907abb23ddd03af40a8a3df1ef95bd2a4a022be2786df1e9563b91cf2f6d80a64376b9e62a2ff5381c88f809492e7a57ddbe2b1d3e561fc21e46084aa85fe2097f576dc4d933f9442f1f9761e15d348938bb3b347b7fef85211c364b1eb8dcfbcefae8cc06092bcd1b12ceb4e30ced441c702c1092484967e28e3c4b8648e56639fe3d483269a87d8f51470c2eb75d3ba6"}, {0x0, 0x0, 0x0, "85"}, {0x0, 0x0, 0x0, "973f4b6bbb1c84942f18a52c175cb3539ccdcbe6ef3956c81e75c10e27786926d93ffadbee26df1cbefda8d2dce1f682311d030af8b15fc62b446e8e6636d4ab198b8c19408977d86299"}]}}], 0x4000113, 0x20000000) 21:34:33 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000006180)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}, {{&(0x7f0000000440)=@ieee802154={0x24, @short}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)="a1", 0x1}], 0x1}}], 0x3, 0x0) [ 818.855320][T13851] 8021q: adding VLAN 0 to HW filter on device bond123 [ 819.012048][ T3703] usb 6-1: Using ep0 maxpacket: 16 [ 819.133208][ T3703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.143687][ T3703] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 819.152361][ T123] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 819.232690][ T3703] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 819.242355][ T3703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 819.250721][ T3703] usb 6-1: SerialNumber: syz [ 819.327731][ T3703] usb 6-1: config 0 descriptor?? [ 819.394166][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 819.523181][ T123] usb 3-1: config 0 has no interfaces? [ 819.580890][ T3703] usb 6-1: USB disconnect, device number 39 [ 819.722630][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 819.732066][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.740216][ T123] usb 3-1: Product: syz [ 819.747336][ T123] usb 3-1: Manufacturer: syz [ 819.752199][ T123] usb 3-1: SerialNumber: syz [ 819.763273][ T123] usb 3-1: config 0 descriptor?? [ 820.051413][ T3703] usb 3-1: USB disconnect, device number 8 21:34:35 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000"], 0x0) 21:34:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b0000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:35 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:35 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x894c, 0x0) [ 820.219275][T13869] dccp_xmit_packet: Payload too large (65475) for featneg. [ 820.285255][T13871] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 820.350019][T13871] 8021q: adding VLAN 0 to HW filter on device bond124 21:34:35 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:35 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 21:34:35 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x3}, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) 21:34:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b0000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 820.672086][ T3703] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 820.830060][T13881] dccp_xmit_packet: Payload too large (65475) for featneg. [ 820.861520][T13880] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000), 0x8) [ 820.942267][T13880] 8021q: adding VLAN 0 to HW filter on device bond125 [ 820.981870][ T3703] usb 6-1: Using ep0 maxpacket: 16 21:34:36 executing program 4: pipe2$9p(&(0x7f0000000180), 0x80800) 21:34:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) listen(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 821.104571][ T3703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.115289][ T3703] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 821.263439][ T3703] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 821.273136][ T3703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 821.281490][ T3703] usb 6-1: SerialNumber: syz [ 821.349558][ T3703] usb 6-1: config 0 descriptor?? [ 821.385113][ T123] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 821.394284][ T3703] hub 6-1:0.0: bad descriptor, ignoring hub [ 821.400356][ T3703] hub: probe of 6-1:0.0 failed with error -5 [ 821.413361][ T3703] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 821.642019][ T123] usb 3-1: Using ep0 maxpacket: 32 [ 821.722495][ T3703] usb 6-1: USB disconnect, device number 40 [ 821.762378][ T123] usb 3-1: config 0 has no interfaces? [ 821.942891][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 821.952402][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.960576][ T123] usb 3-1: Product: syz [ 821.965078][ T123] usb 3-1: Manufacturer: syz [ 821.973698][ T123] usb 3-1: SerialNumber: syz [ 821.985942][ T123] usb 3-1: config 0 descriptor?? 21:34:37 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:37 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000"], 0x0) 21:34:37 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:37 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) [ 822.159379][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.166288][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.319565][ T3703] usb 3-1: USB disconnect, device number 9 [ 822.340458][T13898] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 822.433493][T13898] 8021q: adding VLAN 0 to HW filter on device bond126 [ 822.652329][ T123] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 822.912262][ T123] usb 6-1: Using ep0 maxpacket: 16 21:34:38 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:38 executing program 4: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000000)) setrlimit(0x0, &(0x7f0000000080)) 21:34:38 executing program 0: getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) 21:34:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 823.062234][ T123] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.072675][ T123] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 823.188061][ T123] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 823.201412][ T123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 823.204164][T13912] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 823.210459][ T123] usb 6-1: SerialNumber: syz [ 823.260141][ T123] usb 6-1: config 0 descriptor?? 21:34:38 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 21:34:38 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:38 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) [ 823.339744][T13912] 8021q: adding VLAN 0 to HW filter on device bond127 [ 823.383696][ T123] hub 6-1:0.0: bad descriptor, ignoring hub [ 823.389756][ T123] hub: probe of 6-1:0.0 failed with error -5 [ 823.408703][ T123] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:34:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 823.582624][ T123] usb 6-1: USB disconnect, device number 41 21:34:38 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f0000001180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000040)="674b179a06d6740991e3c0749fb73dae3af913c1c2a1dd27c0aa09003a75872996472d2a7a02153cbf828198ff2c6012d403b21f6f4d845448b3f0057673d0ea3087b78c6b3aaaf9b98704f2209c4101621fe187359c9b6dfa1cb7a78fb6ffc7c3f152efbb114b7e86de535b461fc67f053ef46e58b36fe1ba0d0bc5b314178f7fceceaa05070d0b3130e3e026c7301cb151980b220305f202779e76aa68520b271757608b7e04dcd8e606e34d1ebde4a61abed27f4dc2b7cb8453435fce8848711a46abf261b564e7f0eb0b36b189d0039a7ee3f10751bfac895409150c36d36ca488b7d23708daf81f12be397c3964b23b8e9516d1027e7dae74b71d67ef1d34a0c4d88b5ec05ebefaf37910e874855361abbadd09aa37e49adad88d79bb368cdd5e2a090393c3f019785fe5759a38e3b2c05f2a4869ad30d94357bb5ba6812dab217fed224e438701a618f553bdf4aaff8574f821d3bae22444154793903419482aad64f29a8d3845cc7cc476bf78ea08b6c970738dcf7020bbe5b09225095cef3538e42e7e50f9dd3936110f7003ca7df6786da8c56b2bcc41437dd707acbba4c2015f059479f43c854a6451d4710caa349d99430671606ef79102aa80d601e73fcb6f52a6c3d1473f3e85e7610e1403f62a322ce44bf978bc5b2649b418a5df1acf12d749cc11bdf9cac27df8875d3fd2e0997c91ee93d3f0312e519f5213b104c74d06b53713e478f0d2a5ca0e2f85423cf45fbc5e31381856a92476132ff088c4e99b03745c7b5e02e153991e9557cdedbdfb3d991a799577ae7dbd223d9043bbc2ae8256bb51b096a46a57d4b8544bcde887e5511c24630e8aa8f42440c2998b4b6c2a659ea399e3cd8441ca2e2c0aec4e41195b38414507f24c9f56bf173231cb85af4c51f2b9bb1211a5fa0d0f0fa5856982c703eae3afa9e1f9a08b820a62b218a17ff330bf61dfbed869cb9d2cf79efb728f96abe41401631998625f99f0afe5c18c50b3ca3eb0c8298514f655987edf3360d0dd0cf3539c77e0dce2aefc324037157cdd59e222576565693eea3cd317c94b43af34a4331588209fb49f5e5f9d596ad49ab73e50eb36456cd28483150fbe81bb6728d8bf5aed3b297631359daac4a44f1c444e0732f47aaeaed479cc3a5aaffdb085740e182706c31d0e9f25c5d636b92c38cff3e8e16f5dcc255a8cc52dff052f09cefe94878c757d2cd62ca9e5a44b0f9d73f6fe2d4885ec7d7795f5a40fff787c265d88bbcea78c5713f0e2050a74b0a12b7c8d8482087f765c793533e02695497417b892d2a52e8efcc7d4ad0ac8a902d90266d6a49f10f6038386d384a3374506f56ff3f1b2f64a90ea3989aad46228a88ac0db03a0192809633db432ad0c997ad1d6d286754a2e3ac6fc2f2d3e0a131e02c3a0415ed35b1ba4f7ab63e2bd20d6ba2903210a2b3f4a416891bd87c9fa98f5088695cad35239a1660fb9d8cc2bb9e8d0c1382dac9df3d6bbd290c8fba5adbf2068023e1fa0636182f6bd1c0b776b98bc4b9a59c87ee75115066c6df77b48f1079f844595fea71cb7b36a09a95d6621933af5216294736042fc40e47d1fdb73c8a2b712b8ba2136e90716dd646646986d125d390eb06612996a008b5e7b5d7af7a75025747a140f2e7b1f8309284fa83ab0c2134c3b390bfb8cee32d62ceede6e8d4b26f1fc7783ad26c92e2cb78d81f78b1667399c426faeec71283d1a128b363a211ebce398d20494c1ec1a6a1af42a179b1bd34af48f1389062466c7ab8b76d0df9584f0b4a349c4321721b9bd00fc632bc369350e3445779e93a11f00959293cfbe3623de46b3f727696cddfbfc0fa1e9f563c3021e63f2606ca20adc821256d62e82441bd30a1ca36dd5eef84a370145e5ed1bd3a39998729b75ee9ac2fe22b4d8440551ff1b604a1ca19cae5e7a273e39e5f35e4575218804c1e7ad5157d8a7c7a5e6a9831fc4b8a70c55de366004cb2d43ed58ccfb8d573321b36e798de7c00b0d877da16d4868b110d28a75a1fd6a6e3414a0d9e664344bbbd91c378aaa0d8e39a6c8fe38fb911e3ca52a8266fb02c853c72820685172d9cca0ad8baf3f1002e4b0313814bdebeaa463789b4705e1ae75d0d37bd70f09728e46e6a879ad1f1b922fc42ac2f3b09b6edbde641d49750d2480b88851548cdc1afabc24d6a0033cba6cb99507c91ad6d9a81470888445c608c70e17cf5ecc8a911568bcd81242021e6d273fd3959f6c051ddbb25499cb215dbc0a1803375aad80f3f0bbeb7860184009bfca4ffc7b30bb4ca8c4c61f2ce0188e47b990d9e813163992b7e410f1118c1e95c4552efa542f7ad07e138f05536499bc6456af8cb44cba15ff9f6243ebcea74edac2b8aa62aa8d4b2ac528418889f4d992a8d9b5602c59c491152643006cdc30578c506edda821faaf727fcb6f22ac070afb78df0f3d1718f2251e0dba8375fe11287f2ed63f13381a9d0c791fb34bc3caa21448496501de6f42972b562889e001f6f692139addef21583cc06b57cb3bc0b6b12687c85cba4df1686f66099b0365ae1b82b893a77cb4afec083dd8fcdc678179f257f1ec344baaaaa202a9a19912ab914be7f4ac0992d3732d154c12fd3ac9daba0634b1a95282342f4f11116054dc364f7c673ef3ec1f173cca4e4f3d0541ee901d4fbbe23b5796dd6304f7d5fbb1b74254f11135a158cd0555d58e3df8b7b59a9d5f0bfde3d4eabe8898806dc681fa1c62a245044c01e4473006a14be773345420514550494c7a01858edaf3f4f2f2f657fcdab73fb8535f28f4ca21a57915542fc5567351871a477155cb3026ceb420ec651c4e78f6f14c51a7db41f99f7fb25089ae8dc6025d1786a730ec30130bc5591cef777f6dad055f6bc863c6662b424eecb61579cb66caf9121fca73bb48cf622cf2df2049f331c32e32bb6cb721f44f5941332bf3c0eeecee0935f0256d6496bb69877b508c5818d37d1c7121b404da2ddb54833ff28fbf45113dbf2e7a7628e11315c79bf84153cfc99ab1a868126a772462c98d2353f73707e545cf5cc469c5642c6bc09d5ce62b120ea55a7e42d3695acd0eb39ad023c3fdcd118d5722a0ba3bbe517c9f0b1b44a39870fedba89d569300f0c561fd8839c66c9be4ee650f6dfa091769795a1a14d59484cddb060c908e929c4fa965eb47898f77d4746984aa95d587e18d6eac0b123086d55b686da67b1ceddb3adc1af8f6b603b24ae15dded5d852ee43e6a07b80c2940ac96bf2b2e0808ca6b0ad723b9b20f016d409eb6fe66688f997d5eda61a2ac6ec9b570d7a45e4053f57aeb4382d43e3ebe5f73462915bd0386ddfa138b1d4d8056eb7c99899d9c9137be381a2b37f1368b4c89fb81dfcadbf005ee78b80d1f37155013e859b60062f0b5f4befd32f49cc2b21a511f4d811b696602bf4136f67bec1b4b656faafd615639f0587c525ba36a666368073eda081e1b01d36c03796eb485d5652638d4185abee1d2da5f775a64e580fdb4a802007022c4bd877ccae89750bb4cb4f3560ad46dd5e11ead1463b102ff81ec62fea6955ff3b7a8582462c6f11c990a778a972a016062c78d9b180f2be0bb2abc81dd2236ae3bc43de2938066b33a22e1e25ccf0c9757b6e75b587002068cd6a1f39e005d9a23c5d419a056b03ce42e338eda341092bb9d640f97a0c87bd2ac8bddbf68ba856907927e3639e3680e2ef585e2e4ff386d124e2e8e3cbc7d3b91019477719db4e4a057ae53eaa02b456ce97c7138af9700655f48d3c41b72e3064bcaafa61ce8e7dab3fe66ac17a7ae64420ccd1a4824f35290495d42258701fdd7600626e7b7383a436476f3b809411d4f72d9311a1f52e7380661161703f69672a2839c7ffbee6c857a0ddb8b8d0343d140d445af96352bdbc9b0a4edfd119f7baf6fd092c09711f8f2bc57ee39952ecd4e3853a79c23847960f9d4f0fcb044ef9f5487ebb5aa9c5e8d88d2890149eb39b8d7fcfaba3aa28dec3179d16d82dab45889f270ade4b10f243908d0db1f65f066fe346f1202bccd5150e6eefad63176b1a7b11ed143ee95c1655e37a2e3846b69916d3a5a04d467dda2e44fb1455bb4147a115f06e0794b8ecb14fbd7ab33a9dbff7248b17ea6bf590b94796729abc56905fe977a08a311be028934e31731569fb01a91606", 0xb91}], 0x1}, 0x0) [ 823.752036][ T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 823.757593][T13922] dccp_xmit_packet: Payload too large (65475) for featneg. [ 823.952778][T13924] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 823.992265][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 824.008817][T13924] 8021q: adding VLAN 0 to HW filter on device bond128 [ 824.114108][ T5] usb 3-1: config 0 has no interfaces? 21:34:39 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000"], 0x0) 21:34:39 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 21:34:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 824.283004][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 824.292497][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.300733][ T5] usb 3-1: Product: syz [ 824.305342][ T5] usb 3-1: Manufacturer: syz [ 824.310181][ T5] usb 3-1: SerialNumber: syz [ 824.421294][ T5] usb 3-1: config 0 descriptor?? [ 824.602650][ T123] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 824.710747][ T3549] usb 3-1: USB disconnect, device number 10 [ 824.802111][ T5] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 824.992880][ T123] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 825.051967][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 825.172297][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.172708][ T123] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.182861][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 825.192079][ T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.192203][ T123] usb 1-1: Product: syz [ 825.217523][ T123] usb 1-1: Manufacturer: syz [ 825.223087][ T123] usb 1-1: SerialNumber: syz [ 825.282698][ T5] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 825.292468][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 825.300886][ T5] usb 6-1: SerialNumber: syz 21:34:40 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:40 executing program 4: io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="7a5dff162aff7ddf71ad2ca25a34156a", 0x10}]) 21:34:40 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 825.328659][ T5] usb 6-1: config 0 descriptor?? [ 825.388697][ T5] hub 6-1:0.0: bad descriptor, ignoring hub [ 825.395038][ T5] hub: probe of 6-1:0.0 failed with error -5 [ 825.408085][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 825.515083][T13944] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 825.535252][ T123] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 825.593291][ T5] usb 6-1: USB disconnect, device number 42 [ 825.644399][ T123] usb 1-1: USB disconnect, device number 53 21:34:40 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:40 executing program 4: unshare(0x400) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x6}) [ 825.707102][T13944] 8021q: adding VLAN 0 to HW filter on device bond129 21:34:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:41 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 826.002103][ T3703] usb 3-1: new high-speed USB device number 11 using dummy_hcd 21:34:41 executing program 4: unshare(0x400) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x6}) 21:34:41 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001"], 0x0) 21:34:41 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x500}) [ 826.242357][T13956] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 826.257511][ T3703] usb 3-1: Using ep0 maxpacket: 32 21:34:41 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 826.327895][T13956] 8021q: adding VLAN 0 to HW filter on device bond130 [ 826.412430][ T3703] usb 3-1: config 0 has no interfaces? [ 826.573424][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 826.585287][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.594068][ T3703] usb 3-1: Product: syz [ 826.598381][ T3703] usb 3-1: Manufacturer: syz [ 826.603232][ T3703] usb 3-1: SerialNumber: syz [ 826.645007][ T3703] usb 3-1: config 0 descriptor?? [ 826.852295][ T123] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 826.925213][ T3703] usb 3-1: USB disconnect, device number 11 [ 827.111943][ T123] usb 6-1: Using ep0 maxpacket: 16 [ 827.245035][ T123] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.256005][ T123] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 827.342576][ T123] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 827.352074][ T123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 827.360404][ T123] usb 6-1: SerialNumber: syz [ 827.372640][ T123] usb 6-1: config 0 descriptor?? [ 827.424137][ T123] hub 6-1:0.0: bad descriptor, ignoring hub [ 827.430274][ T123] hub: probe of 6-1:0.0 failed with error -5 [ 827.443268][ T123] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:34:42 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0x3) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0x1) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9a, 0x0) 21:34:42 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:42 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc0189436, &(0x7f0000000080)) 21:34:42 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:42 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9}) [ 827.743407][T13977] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 827.776676][ T3703] usb 6-1: USB disconnect, device number 43 21:34:42 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 827.876166][T13977] 8021q: adding VLAN 0 to HW filter on device bond131 21:34:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_elf32(r1, 0x0, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x2b8, 0x0, 0x218, 0x0, 0x3e0, 0x3a8, 0x3a8, 0x3e0, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @remote, [], [], 'macsec0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9a, 0x0) 21:34:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 828.116733][ T123] usb 3-1: new high-speed USB device number 12 using dummy_hcd 21:34:43 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001"], 0x0) 21:34:43 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 828.372016][T13991] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 828.417706][T13991] 8021q: adding VLAN 0 to HW filter on device bond132 [ 828.462085][ T123] usb 3-1: Using ep0 maxpacket: 32 21:34:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 828.603000][ T123] usb 3-1: config 0 has no interfaces? [ 828.773175][ T123] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 828.782747][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.790930][ T123] usb 3-1: Product: syz [ 828.795514][ T123] usb 3-1: Manufacturer: syz [ 828.800271][ T123] usb 3-1: SerialNumber: syz [ 828.821405][T14000] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 828.853861][ T123] usb 3-1: config 0 descriptor?? [ 828.889063][T14000] 8021q: adding VLAN 0 to HW filter on device bond133 [ 828.900448][ T3549] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 829.145378][ T3703] usb 3-1: USB disconnect, device number 12 [ 829.162258][ T3549] usb 6-1: Using ep0 maxpacket: 16 [ 829.302231][ T3549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.312779][ T3549] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 829.402635][ T3549] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 829.412076][ T3549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 829.420429][ T3549] usb 6-1: SerialNumber: syz [ 829.429105][ T3549] usb 6-1: config 0 descriptor?? [ 829.483932][ T3549] hub 6-1:0.0: bad descriptor, ignoring hub [ 829.489996][ T3549] hub: probe of 6-1:0.0 failed with error -5 [ 829.503903][ T3549] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:34:44 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:44 executing program 4: dup(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 21:34:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xf2) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006140), 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) [ 829.821657][ T3549] usb 6-1: USB disconnect, device number 44 [ 829.917070][T14009] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 829.968673][T14009] 8021q: adding VLAN 0 to HW filter on device bond134 21:34:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:45 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:45 executing program 4: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x11, 0xa, 0x3, &(0x7f0000000000)) 21:34:45 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001"], 0x0) [ 830.454303][T14020] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:45 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 830.552001][ T3703] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 830.552538][T14020] 8021q: adding VLAN 0 to HW filter on device bond135 21:34:45 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 830.792485][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 830.848142][T14030] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 830.916196][T14030] 8021q: adding VLAN 0 to HW filter on device bond136 [ 830.927612][ T5] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 830.944230][ T3703] usb 3-1: config 0 has no interfaces? [ 831.107348][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 831.116931][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.125369][ T3703] usb 3-1: Product: syz [ 831.129678][ T3703] usb 3-1: Manufacturer: syz [ 831.134604][ T3703] usb 3-1: SerialNumber: syz [ 831.163955][ T3703] usb 3-1: config 0 descriptor?? [ 831.185942][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 831.312774][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.323313][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 831.429509][ T5] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 831.439270][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 831.448257][ T5] usb 6-1: SerialNumber: syz [ 831.458601][ T26] usb 3-1: USB disconnect, device number 13 [ 831.461923][ T5] usb 6-1: config 0 descriptor?? [ 831.504290][ T5] hub 6-1:0.0: bad descriptor, ignoring hub [ 831.510483][ T5] hub: probe of 6-1:0.0 failed with error -5 [ 831.532417][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 831.827476][ T26] usb 6-1: USB disconnect, device number 45 21:34:47 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "254016b1e819a4393ee3a68959bab36a"}]}, 0x34}}, 0x0) 21:34:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:47 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:47 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:47 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200"], 0x0) [ 832.298994][T14044] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 832.388600][T14044] 8021q: adding VLAN 0 to HW filter on device bond137 21:34:47 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:47 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, 0x0) 21:34:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:47 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 832.721971][ T5] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 832.867448][ T26] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 832.877965][T14060] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:48 executing program 0: syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 832.935174][T14060] 8021q: adding VLAN 0 to HW filter on device bond138 [ 832.994132][ T5] usb 6-1: Using ep0 maxpacket: 16 21:34:48 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 833.120190][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 833.122732][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.137348][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 833.233824][ T5] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 833.243713][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 833.252269][ T5] usb 6-1: SerialNumber: syz [ 833.264602][ T26] usb 3-1: config 0 has no interfaces? [ 833.277756][ T5] usb 6-1: config 0 descriptor?? [ 833.329977][ T5] hub 6-1:0.0: bad descriptor, ignoring hub [ 833.338805][ T5] hub: probe of 6-1:0.0 failed with error -5 [ 833.352066][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 833.453010][ T26] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 833.462356][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.470518][ T26] usb 3-1: Product: syz [ 833.475679][ T26] usb 3-1: Manufacturer: syz [ 833.480434][ T26] usb 3-1: SerialNumber: syz [ 833.498883][ T26] usb 3-1: config 0 descriptor?? [ 833.652969][ T3549] usb 6-1: USB disconnect, device number 46 [ 833.795369][ T5] usb 3-1: USB disconnect, device number 14 21:34:49 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:49 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:49 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:49 executing program 0: syz_mount_image$squashfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x14}, 0x18) 21:34:49 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200"], 0x0) 21:34:49 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:49 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 834.629821][T14078] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) [ 834.728556][T14078] 8021q: adding VLAN 0 to HW filter on device bond139 [ 834.775538][ T5] usb 6-1: new high-speed USB device number 47 using dummy_hcd 21:34:49 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:50 executing program 4: io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\n', 0x300}]) [ 835.032725][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 835.093426][ T3703] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 835.153013][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.163764][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 835.299905][ T5] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 835.309820][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 835.318863][ T5] usb 6-1: SerialNumber: syz [ 835.324005][T14094] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 835.352315][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 835.378655][ T5] usb 6-1: config 0 descriptor?? [ 835.430581][T14094] 8021q: adding VLAN 0 to HW filter on device bond140 [ 835.432473][ T5] hub 6-1:0.0: bad descriptor, ignoring hub [ 835.444001][ T5] hub: probe of 6-1:0.0 failed with error -5 [ 835.457190][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 835.523839][ T3703] usb 3-1: config 0 has no interfaces? [ 835.682424][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 835.693257][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.701419][ T3703] usb 3-1: Product: syz [ 835.706359][ T3703] usb 3-1: Manufacturer: syz [ 835.711110][ T3703] usb 3-1: SerialNumber: syz [ 835.725583][ T3703] usb 3-1: config 0 descriptor?? [ 835.752455][ T5] usb 6-1: USB disconnect, device number 47 [ 836.032766][ T3549] usb 3-1: USB disconnect, device number 15 21:34:51 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:51 executing program 4: io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\n', 0x300}]) 21:34:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x104, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 21:34:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:51 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:51 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000092100000001222200"], 0x0) 21:34:51 executing program 0: syz_usb_connect$uac1(0x0, 0x77, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, '&'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 836.811324][T14106] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:52 executing program 4: io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\n', 0x300}]) [ 836.939685][T14106] 8021q: adding VLAN 0 to HW filter on device bond141 21:34:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 837.032261][ T5] usb 6-1: new high-speed USB device number 48 using dummy_hcd 21:34:52 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 837.262796][ T3703] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 837.280105][ T5] usb 6-1: Using ep0 maxpacket: 16 21:34:52 executing program 4: r0 = creat(0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 837.339444][T14123] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 837.394096][T14123] 8021q: adding VLAN 0 to HW filter on device bond142 [ 837.438476][ T26] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 837.447139][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.457944][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 21:34:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 837.534560][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 837.625032][ T5] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 837.634783][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 837.645243][ T5] usb 6-1: SerialNumber: syz [ 837.672666][ T3703] usb 3-1: config 0 has no interfaces? [ 837.702313][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 837.725377][ T5] usb 6-1: config 0 descriptor?? [ 837.766562][ T5] hub 6-1:0.0: bad descriptor, ignoring hub [ 837.773173][ T5] hub: probe of 6-1:0.0 failed with error -5 [ 837.786158][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 837.847216][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.847217][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 837.847365][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.857670][ T26] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 837.857811][ T26] usb 1-1: config 1 has no interface number 1 [ 837.857921][ T26] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 38, using maximum allowed: 30 [ 837.858065][ T26] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 837.917216][ T3703] usb 3-1: Product: syz [ 837.921529][ T3703] usb 3-1: Manufacturer: syz [ 837.926478][ T3703] usb 3-1: SerialNumber: syz [ 837.993375][ T5] usb 6-1: USB disconnect, device number 48 [ 838.032577][ T26] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 838.042372][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.054449][ T26] usb 1-1: Product: syz [ 838.058764][ T26] usb 1-1: Manufacturer: syz [ 838.064593][ T26] usb 1-1: SerialNumber: syz [ 838.100233][T14133] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 838.189503][T14133] 8021q: adding VLAN 0 to HW filter on device bond143 [ 838.303559][ T3703] usb 3-1: config 0 descriptor?? [ 838.506901][ T26] hub 1-1:1.2: bad descriptor, ignoring hub [ 838.513277][ T26] hub: probe of 1-1:1.2 failed with error -5 [ 838.603142][ T26] usb 1-1: USB disconnect, device number 54 [ 838.684021][ T7936] udevd[7936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.806651][ T3549] usb 3-1: USB disconnect, device number 16 21:34:54 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:54 executing program 4: r0 = creat(0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:54 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:54 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e1010902240001000000000904000009030000000921000000012222000905"], 0x0) 21:34:54 executing program 0: syz_usb_connect$uac1(0x0, 0x77, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, '&'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 839.639130][T14145] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:54 executing program 4: r0 = creat(0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 839.693877][T14145] 8021q: adding VLAN 0 to HW filter on device bond144 [ 839.792856][ T26] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 839.832658][ T3703] usb 1-1: new high-speed USB device number 55 using dummy_hcd 21:34:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 839.963380][ T5] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 840.032904][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 840.072704][ T3703] usb 1-1: Using ep0 maxpacket: 16 21:34:55 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:55 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 840.174843][ T26] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 840.184057][T14158] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 840.185661][ T26] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 840.200294][ T3703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.218123][ T3703] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 840.227352][ T3703] usb 1-1: config 1 has no interface number 1 [ 840.233774][ T3703] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 38, using maximum allowed: 30 [ 840.244770][ T3703] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 840.265739][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 840.329448][T14158] 8021q: adding VLAN 0 to HW filter on device bond145 [ 840.362995][ T26] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 840.372373][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 840.380733][ T26] usb 6-1: SerialNumber: syz [ 840.416160][ T26] usb 6-1: config 0 descriptor?? [ 840.422420][ T5] usb 3-1: config 0 has no interfaces? [ 840.453851][ T26] hub 6-1:0.0: bad descriptor, ignoring hub [ 840.459933][ T26] hub: probe of 6-1:0.0 failed with error -5 [ 840.473928][ T26] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 21:34:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:55 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 840.584510][ T5] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 840.594224][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.602827][ T5] usb 3-1: Product: syz [ 840.608487][ T5] usb 3-1: Manufacturer: syz [ 840.613656][ T5] usb 3-1: SerialNumber: syz [ 840.639882][ T5] usb 3-1: config 0 descriptor?? [ 840.703215][ T3703] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.714374][ T3703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.722923][ T3703] usb 1-1: Product: syz [ 840.727248][ T3703] usb 1-1: Manufacturer: syz [ 840.732067][ T3703] usb 1-1: SerialNumber: syz [ 840.782810][ T26] usb 6-1: USB disconnect, device number 49 [ 840.978425][T14168] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 841.069334][T14168] 8021q: adding VLAN 0 to HW filter on device bond146 [ 841.186870][ T3703] hub 1-1:1.2: bad descriptor, ignoring hub [ 841.193147][ T3703] hub: probe of 1-1:1.2 failed with error -5 [ 841.263564][ T3703] usb 1-1: USB disconnect, device number 55 [ 841.335326][ T7936] udevd[7936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.482023][ T26] usb 3-1: USB disconnect, device number 17 21:34:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:57 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:57 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e1010902240001000000000904000009030000000921000000012222000905"], 0x0) 21:34:57 executing program 0: syz_usb_connect$uac1(0x0, 0x77, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, '&'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 842.199011][T14176] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:57 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 842.302488][T14176] 8021q: adding VLAN 0 to HW filter on device bond147 21:34:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 842.479387][T14189] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 842.512175][ T5] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 842.520492][ T3551] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 842.525720][T14189] 8021q: adding VLAN 0 to HW filter on device bond148 [ 842.633044][ T3703] usb 3-1: new high-speed USB device number 18 using dummy_hcd 21:34:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:57 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 842.768894][ T3551] usb 1-1: Using ep0 maxpacket: 16 [ 842.774837][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 842.880066][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 842.893467][ T3551] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.904091][ T3551] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 842.913353][ T3551] usb 1-1: config 1 has no interface number 1 [ 842.919596][ T3551] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 38, using maximum allowed: 30 [ 842.930778][ T3551] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 842.944666][ T5] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 842.955664][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 843.035564][T14197] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 843.090098][T14197] 8021q: adding VLAN 0 to HW filter on device bond149 [ 843.122961][ T3703] usb 3-1: config 0 has no interfaces? [ 843.152178][ T5] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 843.161511][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 843.172203][ T5] usb 6-1: SerialNumber: syz [ 843.238160][ T5] usb 6-1: config 0 descriptor?? [ 843.286095][ T5] hub 6-1:0.0: bad descriptor, ignoring hub [ 843.292491][ T5] hub: probe of 6-1:0.0 failed with error -5 [ 843.305966][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 843.318080][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 843.328923][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.338199][ T3703] usb 3-1: Product: syz [ 843.342706][ T3703] usb 3-1: Manufacturer: syz [ 843.347450][ T3703] usb 3-1: SerialNumber: syz [ 843.390387][ T3703] usb 3-1: config 0 descriptor?? [ 843.433862][ T3551] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.443418][ T3551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.451591][ T3551] usb 1-1: Product: syz [ 843.456391][ T3551] usb 1-1: Manufacturer: syz [ 843.461115][ T3551] usb 1-1: SerialNumber: syz [ 843.639838][ T5] usb 6-1: USB disconnect, device number 50 [ 843.840351][ T5] usb 3-1: USB disconnect, device number 18 [ 843.889589][ T3551] hub 1-1:1.2: bad descriptor, ignoring hub [ 843.896874][ T3551] hub: probe of 1-1:1.2 failed with error -5 [ 843.986745][ T3551] usb 1-1: USB disconnect, device number 56 [ 844.049611][ T7936] udevd[7936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 21:34:59 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:34:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, 0x0, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:34:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:34:59 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:34:59 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e1010902240001000000000904000009030000000921000000012222000905"], 0x0) 21:34:59 executing program 0: syz_usb_connect$uac1(0x0, 0x77, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, '&'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 21:34:59 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) [ 844.676898][T14209] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:34:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 844.792436][T14209] 8021q: adding VLAN 0 to HW filter on device bond150 [ 844.901930][T10329] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 844.908372][ T3551] usb 6-1: new high-speed USB device number 51 using dummy_hcd 21:35:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, 0x0, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:35:00 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:35:00 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 845.112388][ T3703] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 845.126269][T14226] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 845.162287][ T3551] usb 6-1: Using ep0 maxpacket: 16 [ 845.195964][T14226] 8021q: adding VLAN 0 to HW filter on device bond151 [ 845.208672][T10329] usb 1-1: Using ep0 maxpacket: 16 [ 845.302328][ T3551] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 845.313135][ T3551] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 845.332756][T10329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 21:35:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, 0x0, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 845.344391][T10329] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 845.353682][T10329] usb 1-1: config 1 has no interface number 1 [ 845.359933][T10329] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 38, using maximum allowed: 30 [ 845.370905][T10329] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 845.376212][ T3703] usb 3-1: Using ep0 maxpacket: 32 [ 845.404195][ T3551] usb 6-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 845.414136][ T3551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 845.424117][ T3551] usb 6-1: SerialNumber: syz [ 845.495155][ T3551] usb 6-1: config 0 descriptor?? [ 845.522644][ T3703] usb 3-1: config 0 has no interfaces? [ 845.534885][ T3551] hub 6-1:0.0: bad descriptor, ignoring hub [ 845.540956][ T3551] hub: probe of 6-1:0.0 failed with error -5 [ 845.554368][ T3551] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 845.671421][T14233] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 845.702486][T10329] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.705841][ T3703] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 845.712133][T10329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.721256][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.733427][T10329] usb 1-1: Product: syz [ 845.739019][ T3703] usb 3-1: Product: syz [ 845.743492][T10329] usb 1-1: Manufacturer: syz [ 845.747112][ T3703] usb 3-1: Manufacturer: syz [ 845.751797][T10329] usb 1-1: SerialNumber: syz [ 845.756412][ T3703] usb 3-1: SerialNumber: syz [ 845.787209][ T3551] usb 6-1: USB disconnect, device number 51 [ 845.851949][T14233] 8021q: adding VLAN 0 to HW filter on device bond152 [ 845.852181][ T3703] usb 3-1: config 0 descriptor?? [ 846.159163][ T26] usb 3-1: USB disconnect, device number 19 [ 846.323405][T10329] hub 1-1:1.2: bad descriptor, ignoring hub [ 846.329481][T10329] hub: probe of 1-1:1.2 failed with error -5 [ 846.384616][T10329] usb 1-1: USB disconnect, device number 57 [ 846.511500][ T7936] udevd[7936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 21:35:01 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:35:01 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='\n', 0x300}]) 21:35:01 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:35:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:35:01 executing program 5: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x9}, [@processing_unit={0xb, 0x24, 0x7, 0x4, 0x0, 0x0, "29e28daf"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "ac2e46"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x4, 0x0, 0x81}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x3, &(0x7f0000000200)=@string={0x3, 0x3, "c0"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) 21:35:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f0000000000), 0x4) [ 846.979184][T14243] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:35:02 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) 21:35:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 847.128775][T14243] 8021q: adding VLAN 0 to HW filter on device bond153 21:35:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000700)='GPL\x00', 0x5, 0x8f, &(0x7f0000000740)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 847.232539][ T3703] usb 6-1: new high-speed USB device number 52 using dummy_hcd 21:35:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:35:02 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) [ 847.452196][T14220] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 847.473031][ T3703] usb 6-1: Using ep0 maxpacket: 32 [ 847.555464][T14258] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 847.605031][T14258] 8021q: adding VLAN 0 to HW filter on device bond154 [ 847.623318][ T3703] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 847.632583][ T3703] usb 6-1: config 1 has no interface number 1 [ 847.638846][ T3703] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:35:02 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 847.652078][ T3703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.663268][ T3703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.792269][T14220] usb 3-1: Using ep0 maxpacket: 32 [ 847.913403][T14220] usb 3-1: config 0 has no interfaces? [ 847.936649][ T3703] usb 6-1: string descriptor 0 read error: -22 [ 847.943591][ T3703] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 847.953135][ T3703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.092389][T14220] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 848.102072][T14220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.110236][T14220] usb 3-1: Product: syz [ 848.116688][T14220] usb 3-1: Manufacturer: syz [ 848.121441][T14220] usb 3-1: SerialNumber: syz [ 848.135827][T14220] usb 3-1: config 0 descriptor?? [ 848.309421][ T3703] usb 6-1: USB disconnect, device number 52 [ 848.371039][ T7936] udevd[7936]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 848.449793][T14220] usb 3-1: USB disconnect, device number 20 21:35:04 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:35:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:35:04 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/usbtest', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x641, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x641, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x641, 0x0) 21:35:04 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) 21:35:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:35:04 executing program 5: syz_emit_ethernet(0x15, &(0x7f0000000080)={@remote, @empty, @val={@void, {0x806}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0x0, "06"}}}}}}, 0x0) 21:35:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x2) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 849.262389][T14276] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:35:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 849.386668][T14276] 8021q: adding VLAN 0 to HW filter on device bond155 21:35:04 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0xf0ff7f00000000) pipe2(0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040), 0xa) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x1, 0x0, {0x2}}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xd6, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x1bba, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x36, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x0, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x7d, 0x2}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x40, 0x1, 0x3f, 0x10, 0x81}, 0xaa, &(0x7f0000000140)={0x5, 0xf, 0xaa, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xe9, 0x2, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x34, 0x1f, 0x2, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b5248fbc98b36c31aac995d4507d57a3"}, @generic={0x5c, 0x10, 0x2, "a8762a057375d99e2f3a9e0bdf997c542089e4213411f971eb25398d014af1a7f235c67b8adf5686de0e4e1f2462d45aa6aaac14c1029f5e11eebf7a9fc4eec3a5c7ed771472f21d0af095e632426ed348c452921a4c6d87a6"}, @generic={0x16, 0x10, 0x4, "697903a87405b4a147ea590ef786748008ea54"}]}, 0x2, [{0x6a, &(0x7f0000000300)=@string={0x6a, 0x3, "dd7a74b77daf0a71b69aa534346ac3536916845c6f6735151885e09b358ea57057773ed5173413abf5a95c5d40d007a01e2fcde8f174baf3f7c8450aee1ace6eecd5a467ee31805311f7a09d346ba1068a9b6977bb1b8e52be113b56c80ad0226be01acd8825ec7e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c01}}]}) pipe2(0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xf3c7dd570c37b745, 0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 21:35:04 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 21:35:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:35:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 849.725543][T10329] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 849.915972][T14290] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 850.032413][T14220] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 850.032933][T14290] 8021q: adding VLAN 0 to HW filter on device bond156 [ 850.051412][T10329] usb 3-1: Using ep0 maxpacket: 32 [ 850.185910][T10329] usb 3-1: config 0 has no interfaces? [ 850.373516][T10329] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.0f [ 850.382930][T10329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.391075][T10329] usb 3-1: Product: syz [ 850.395526][T10329] usb 3-1: Manufacturer: syz [ 850.400261][T10329] usb 3-1: SerialNumber: syz [ 850.417100][T10329] usb 3-1: config 0 descriptor?? [ 850.432800][T14220] usb 1-1: not running at top speed; connect to a high speed hub [ 850.522672][T14220] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 850.692619][T14220] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.700156][T10329] usb 3-1: USB disconnect, device number 21 [ 850.703505][T14220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.716673][T14220] usb 1-1: Product: syz [ 850.720979][T14220] usb 1-1: Manufacturer: Ⰱ [ 850.725907][T14220] usb 1-1: SerialNumber: syz [ 850.792926][T14286] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 851.092193][T14220] cdc_ncm 1-1:1.0: bind() failure [ 851.106263][T14220] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 851.113840][T14220] cdc_ncm 1-1:1.1: bind() failure [ 851.134417][T14220] usb 1-1: USB disconnect, device number 58 21:35:06 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000002f8cd20e60405000f01010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x100000000400402, 0x0, 0x1013, 0x400]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d104b829280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f090fc7bbbee30000d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:35:06 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 21:35:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) 21:35:06 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 21:35:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) 21:35:06 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0x4800, 0x0) [ 851.535533][T14301] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 21:35:06 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff0700400e632f77fbac14140ee0", 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 21:35:06 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xa00, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0xffc3}], 0x1}}], 0x1a000, 0x5299583d21000000) [ 851.661225][T14301] 8021q: adding VLAN 0 to HW filter on device bond157 21:35:06 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 21:35:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="01"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:35:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c00f5ff000000001d00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="000200000000ffdbdf2501488483c5a1dc6ffc83e00000000c00992d8b000000000000000000", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x200040c8}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='^$\x00\x00', @ANYRES16=r4, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000400)={'vlan0\x00', @ifru_hwaddr=@broadcast}) bind(r5, &(0x7f0000000540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71589f7d}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000100018e77b345c3dcbef54b23e770d0a07c132b2783f631d828655862299e83b57b5864666ab9ae363c4b22535e2de92715822f5b27b445819e58664f28882a62e73280324e93c32d16a82ddf7175a1a1000000000000000000", @ANYRES64=r1, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005ffef00"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x84, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x84}}, 0x0) [ 851.891979][T14220] usb 3-1: new high-speed USB device number 22 using dummy_hcd 21:35:07 executing program 4: creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) [ 852.019380][T14315] ===================================================== [ 852.026478][T14315] BUG: KMSAN: uninit-value in bcmp+0x14e/0x290 [ 852.032671][T14315] bcmp+0x14e/0x290 [ 852.036503][T14315] ip4_obj_cmpfn+0x93/0x110 [ 852.041073][T14315] inet_frag_find+0x591/0x2a60 [ 852.045895][T14315] ip_defrag+0x49b/0x3d10 [ 852.050265][T14315] ipv4_conntrack_defrag+0x885/0xa30 [ 852.055656][T14315] nf_hook_slow+0x184/0x490 [ 852.060230][T14315] __ip_local_out+0x791/0x850 [ 852.064935][T14315] ip_local_out+0xa3/0x1f0 [ 852.069377][T14315] iptunnel_xmit+0xaaf/0x10e0 [ 852.074102][T14315] ip_tunnel_xmit+0x33a2/0x3b30 [ 852.078994][T14315] ipgre_xmit+0x127b/0x1300 [ 852.083523][T14315] xmit_one+0x2f4/0x840 [ 852.087727][T14315] dev_hard_start_xmit+0x186/0x440 [ 852.092869][T14315] __dev_queue_xmit+0x2123/0x3310 [ 852.097926][T14315] dev_queue_xmit+0x4b/0x60 [ 852.102455][T14315] __bpf_redirect+0x937/0x1800 [ 852.107311][T14315] bpf_clone_redirect+0x4a5/0x670 [ 852.112382][T14315] ___bpf_prog_run+0x92d/0xb420 [ 852.117274][T14315] __bpf_prog_run512+0x121/0x180 [ 852.122244][T14315] bpf_test_run+0x762/0x1040 [ 852.126907][T14315] bpf_prog_test_run_skb+0x15c9/0x2100 [ 852.132408][T14315] bpf_prog_test_run+0x784/0x820 [ 852.137399][T14315] __sys_bpf+0xadd/0x1240 [ 852.141763][T14315] __ia32_sys_bpf+0xe1/0x130 [ 852.146391][T14315] __do_fast_syscall_32+0x96/0xf0 [ 852.151467][T14315] do_fast_syscall_32+0x34/0x70 [ 852.156363][T14315] do_SYSENTER_32+0x1b/0x20 [ 852.160913][T14315] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 852.167298][T14315] [ 852.169623][T14315] Local variable key.i created at: [ 852.174735][T14315] ip_defrag+0x309/0x3d10 [ 852.179107][T14315] ipv4_conntrack_defrag+0x885/0xa30 [ 852.184432][T14315] [ 852.186759][T14315] CPU: 0 PID: 14315 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller #0 [ 852.195203][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.205272][T14315] ===================================================== [ 852.212204][T14315] Disabling lock debugging due to kernel taint [ 852.218637][T14315] Kernel panic - not syncing: kmsan.panic set ... [ 852.225064][T14315] CPU: 0 PID: 14315 Comm: syz-executor.0 Tainted: G B 5.17.0-syzkaller #0 [ 852.234909][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.244995][T14315] Call Trace: [ 852.248295][T14315] [ 852.251246][T14315] dump_stack_lvl+0x1ff/0x28e [ 852.255987][T14315] dump_stack+0x25/0x28 [ 852.260196][T14315] panic+0x487/0xe1f [ 852.264147][T14315] ? add_taint+0x181/0x210 [ 852.268659][T14315] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 852.274530][T14315] kmsan_report+0x2e6/0x2f0 [ 852.279109][T14315] ? preempt_count_sub+0xf8/0x330 [ 852.284229][T14315] ? __msan_warning+0xb8/0x130 [ 852.289055][T14315] ? bcmp+0x14e/0x290 [ 852.293071][T14315] ? ip4_obj_cmpfn+0x93/0x110 [ 852.297813][T14315] ? inet_frag_find+0x591/0x2a60 [ 852.302805][T14315] ? ip_defrag+0x49b/0x3d10 [ 852.307356][T14315] ? ipv4_conntrack_defrag+0x885/0xa30 [ 852.312864][T14315] ? nf_hook_slow+0x184/0x490 [ 852.317584][T14315] ? __ip_local_out+0x791/0x850 [ 852.322465][T14315] ? ip_local_out+0xa3/0x1f0 [ 852.327082][T14315] ? iptunnel_xmit+0xaaf/0x10e0 [ 852.331980][T14315] ? ip_tunnel_xmit+0x33a2/0x3b30 [ 852.337039][T14315] ? ipgre_xmit+0x127b/0x1300 [ 852.341743][T14315] ? xmit_one+0x2f4/0x840 [ 852.346097][T14315] ? dev_hard_start_xmit+0x186/0x440 [ 852.351414][T14315] ? __dev_queue_xmit+0x2123/0x3310 [ 852.356646][T14315] ? dev_queue_xmit+0x4b/0x60 [ 852.361351][T14315] ? __bpf_redirect+0x937/0x1800 [ 852.366337][T14315] ? bpf_clone_redirect+0x4a5/0x670 [ 852.371586][T14315] ? ___bpf_prog_run+0x92d/0xb420 [ 852.376645][T14315] ? __bpf_prog_run512+0x121/0x180 [ 852.381795][T14315] ? bpf_test_run+0x762/0x1040 [ 852.386610][T14315] ? bpf_prog_test_run_skb+0x15c9/0x2100 [ 852.392292][T14315] ? bpf_prog_test_run+0x784/0x820 [ 852.397452][T14315] ? __sys_bpf+0xadd/0x1240 [ 852.401999][T14315] ? __ia32_sys_bpf+0xe1/0x130 [ 852.406804][T14315] ? __do_fast_syscall_32+0x96/0xf0 [ 852.412061][T14315] ? do_fast_syscall_32+0x34/0x70 [ 852.417133][T14315] ? do_SYSENTER_32+0x1b/0x20 [ 852.421859][T14315] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 852.428429][T14315] ? __module_address+0x61/0x610 [ 852.433417][T14315] ? inet_frag_find+0x1bf/0x2a60 [ 852.438404][T14315] ? filter_irq_stacks+0xb5/0x230 [ 852.443477][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.448642][T14315] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 852.454505][T14315] __msan_warning+0xb8/0x130 [ 852.459144][T14315] bcmp+0x14e/0x290 [ 852.462986][T14315] ip4_obj_cmpfn+0x93/0x110 [ 852.467540][T14315] inet_frag_find+0x591/0x2a60 [ 852.472361][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.477519][T14315] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 852.483810][T14315] ? ip4_obj_hashfn+0x400/0x400 [ 852.488721][T14315] ip_defrag+0x49b/0x3d10 [ 852.493092][T14315] ? kmsan_slab_free+0xd5/0x140 [ 852.497985][T14315] ? slab_free_freelist_hook+0x24a/0x890 [ 852.503655][T14315] ? kfree+0x28f/0x950 [ 852.507754][T14315] ? pskb_expand_head+0x874/0x1ca0 [ 852.512909][T14315] ? ipgre_xmit+0x127b/0x1300 [ 852.517609][T14315] ? xmit_one+0x2f4/0x840 [ 852.521962][T14315] ? __dev_queue_xmit+0x2123/0x3310 [ 852.527189][T14315] ? dev_queue_xmit+0x4b/0x60 [ 852.531894][T14315] ? __bpf_redirect+0x937/0x1800 [ 852.536874][T14315] ? ___bpf_prog_run+0x92d/0xb420 [ 852.541937][T14315] ? __bpf_prog_run512+0x121/0x180 [ 852.547083][T14315] ? bpf_test_run+0x762/0x1040 [ 852.551892][T14315] ? bpf_prog_test_run_skb+0x15c9/0x2100 [ 852.557563][T14315] ? bpf_prog_test_run+0x784/0x820 [ 852.562717][T14315] ? __sys_bpf+0xadd/0x1240 [ 852.567255][T14315] ? __ia32_sys_bpf+0xe1/0x130 [ 852.572056][T14315] ? do_fast_syscall_32+0x34/0x70 [ 852.577132][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.582302][T14315] ipv4_conntrack_defrag+0x885/0xa30 [ 852.587641][T14315] ? defrag4_net_exit+0x120/0x120 [ 852.592705][T14315] nf_hook_slow+0x184/0x490 [ 852.597257][T14315] __ip_local_out+0x791/0x850 [ 852.601968][T14315] ? __ip_local_out+0x850/0x850 [ 852.606850][T14315] ip_local_out+0xa3/0x1f0 [ 852.611304][T14315] iptunnel_xmit+0xaaf/0x10e0 [ 852.616051][T14315] ip_tunnel_xmit+0x33a2/0x3b30 [ 852.620946][T14315] ? ip_tunnel_xmit+0x1d1/0x3b30 [ 852.625943][T14315] ipgre_xmit+0x127b/0x1300 [ 852.630484][T14315] ? ipgre_close+0x290/0x290 [ 852.635103][T14315] xmit_one+0x2f4/0x840 [ 852.639293][T14315] dev_hard_start_xmit+0x186/0x440 [ 852.644445][T14315] __dev_queue_xmit+0x2123/0x3310 [ 852.649501][T14315] ? skb_release_data+0xb98/0xc70 [ 852.654568][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.659737][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.664900][T14315] dev_queue_xmit+0x4b/0x60 [ 852.669431][T14315] __bpf_redirect+0x937/0x1800 [ 852.674259][T14315] bpf_clone_redirect+0x4a5/0x670 [ 852.679347][T14315] ___bpf_prog_run+0x92d/0xb420 [ 852.684239][T14315] ? bpf_csum_level+0x7b0/0x7b0 [ 852.689141][T14315] __bpf_prog_run512+0x121/0x180 [ 852.694122][T14315] ? finish_task_switch+0x42f/0xad0 [ 852.699428][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.704587][T14315] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 852.710478][T14315] ? ktime_get+0x36b/0x450 [ 852.714934][T14315] ? kmsan_get_metadata+0x33/0x220 [ 852.720093][T14315] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 852.725956][T14315] ? bpf_test_timer_continue+0x22c/0x830 [ 852.731642][T14315] ? kmsan_get_metadata+0x52/0x220 [ 852.736809][T14315] ? __bpf_prog_run480+0x180/0x180 [ 852.741968][T14315] ? __bpf_prog_run480+0x180/0x180 [ 852.747138][T14315] bpf_test_run+0x762/0x1040 [ 852.751829][T14315] bpf_prog_test_run_skb+0x15c9/0x2100 [ 852.757371][T14315] ? __bpf_prog_test_run_raw_tp+0x3a0/0x3a0 [ 852.763312][T14315] bpf_prog_test_run+0x784/0x820 [ 852.768307][T14315] __sys_bpf+0xadd/0x1240 [ 852.772696][T14315] __ia32_sys_bpf+0xe1/0x130 [ 852.777332][T14315] __do_fast_syscall_32+0x96/0xf0 [ 852.782403][T14315] ? irqentry_exit_to_user_mode+0x15/0x30 [ 852.788162][T14315] do_fast_syscall_32+0x34/0x70 [ 852.793063][T14315] do_SYSENTER_32+0x1b/0x20 [ 852.797610][T14315] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 852.803990][T14315] RIP: 0023:0xf6f0d549 [ 852.808077][T14315] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 852.827724][T14315] RSP: 002b:00000000f59075cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 852.836168][T14315] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 852.844163][T14315] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 852.852153][T14315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.860143][T14315] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 852.868131][T14315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.876135][T14315] [ 852.879338][T14315] Kernel Offset: disabled [ 852.883664][T14315] Rebooting in 86400 seconds..